1. Manuals
  2. Brands
  3. SecureLogix Manuals
  4. Firewall
  5. ETM System
  6. Installation manual

SecureLogix ETM System Installation Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
Release 6.3.0
®
ETM
System
Installation Guide
DOC-IN-ETM630-2011-1031

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the ETM System and is the answer not in the manual?

Questions and answers

Summary of Contents for SecureLogix ETM System

  • Page 1 Release 6.3.0 ® System Installation Guide DOC-IN-ETM630-2011-1031...
  • Page 2 Solutions address real-world problems for real-world voice networks. The flexible ETM System scales to support any voice environment, no matter how large or small. Engineered with full hybrid voice technology, the ETM System supports multi-vendor networks containing any mix of converging VoIP and legacy voice systems.
  • Page 3 IMPORTANT NOTICE: This manual, as well as the software and/or Products described in it, is furnished under license with SecureLogix Corporation ("SecureLogix") and may be used only in accordance with the terms of such license. Except as permitted by such license, no part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, recording, or otherwise, without prior written permission of SecureLogix.

  • Page 4: Customer Support

    Customer Support ® for Your ETM System 1-877-SLC-4HELP (1-877-752-4435) support@securelogix.com http://support.securelogix.com SecureLogix Corporation offers telephone, email, and web-based support. For details on warranty information and support contracts, see our web site at http://support.securelogix.com...

  • Page 5: Table Of Contents

    Contents Preface ® About the ETM System Documentation ................. 11 ® System Documentation ................11 Tell Us What You Think ..................12 Additional Documentation on the Web .............. 12 Conventions Used in This Guide ................ 12 Installation Overview Installation Considerations ....................13 ®...
  • Page 6 Copy the Oracle Database Driver to the Required Locations ......31 ® Special Instructions for a Remote ETM Server Only ........32 Where to Go From Here ..................32 Database Preparation ......................33 ® Opening the ETM Database Maintenance Tool ..........34 Providing Database Connection Information ............
  • Page 7 Overview of Terms ..................... 61 System Configuration Steps ................61 Start the Applications and Connect to the Server .............. 63 Start the Client and Server .................. 63 How to Start the Applications .............. 63 How to Start Multiple Application Instances ........64 ®...
  • Page 8 Configuring a Switch for SMDR ..............123 Outbound SMDR for Monitored Channels ......... 123 Call Recorder Protected Extensions ........... 123 Recording SMDR for Station-side CDR Reporting ......123 CDR Parse Files ................. 124 Extracting Access Codes ..............124 Supplying SMDR Processing Information ......... 124 Extracting Access Codes from SMDR ..........
  • Page 9 Connectors and Pinouts ..................169 ® 1012/1024 Appliance Telephone Network Connector Pinouts ....................170 ® 1012/1024 Appliance CPE Connector Pinout ......171 Model 1050 (AAA) Appliance ..................172 Technical Specifications ................... 172 Connectors ......................173 10/100 Base-T Ethernet Port Pinout ........... 173 ®...
  • Page 10 Appendix D: Database Directories and File Names Reference Directories Created by the Database Creation Script ............201 Windows Service Name..................202 File Names and File Locations ................. 202 Appendix E: Appliance Status LEDs LED Descriptions ......................203 Telco Appliance LEDs..................204 1060 Appliance LEDs ..................

  • Page 11: Preface

    Includes an appendix describing each of the predefined Reports and Elements. ® System Administration and Maintenance Guide—Provides task- oriented instructions for using the ETM System to monitor telco status and manage ETM System Appliances. About the ETM® System Documentation  11...

  • Page 12: Tell Us What You Think

    System. Please send your You Think documentation feedback to the following email address: docs@securelogix.com Additional SecureLogix Corporation provides corrections and additional documentation for its products via the SecureLogix Knowledge Base online Documentation at the following web address: on the Web http://support.securelogix.com Conventions...

  • Page 13: Installation Overview

    PBX, while security administrators enforce security Policy. The diagram below illustrates how a typical completed ETM 3200 Appliance installation might look. This example demonstrates several typical characteristics of an ETM System deployment: ...

  • Page 14: Choosing Locations For Etm System Components

    LAN so that SMDR and other transmitted data will have a layer of security protection. A dedicated subnet can also be used so that the ETM System network traffic will not have to compete with other network traffic.

  • Page 15: Etm System Client Location(S)

    Ensure that the host computers meet minimum system requirements for the ETM System Client. Minimum system requirements are provided on an insert provided with your ETM System and can also be found on the SecureLogix Knowledge Base at http://support.securelogix.com. ...

  • Page 16: Securing Etm System Ip Data Network Traffic

    ® Securing ETM The ETM System generates a low-to-moderate level of IP data network traffic that could contain sensitive information. The ETM System includes System IP Data 3DES encryption that secures data transmitted among ETM System Network Traffic components.

  • Page 17: Installation Quick Start

    Install the ETM Software: ETM Server, Report Server, Database Maintenance Tool, and ETM System Client Tools. Also install AAA Services for the Voice Firewall, if purchased. (p. 22) License the ETM Server and, if on a separate computer, the Report Server. (p. 29) Install, configure, and populate the Oracle DBMS and ETM Database.
  • Page 18 Installation and Configuration Guide for ETM SIP/AXP Application on Cisco ISR for instructions Both of these guides can be found in the SecureLogix Knowledge Base. The steps below apply only to ETM 1000, 2100, 3200, and AAA Appliances.
  • Page 19  ® Refer to the ETM System User Guide for task-oriented instructions for using the ETM System, with references to the other guides as applicable.  Refer to the Voice Firewall User Guide for instructions for using Voice Firewall Policies and AAA Services.
  • Page 20 20  Installation Quick Start...

  • Page 21: Step 1: Software Installation

    ETM applications on the same computer, or you can install components on separate computers in any combination. Components can also be installed on different supported operating systems. You can also install any number of remote ETM System Clients on user workstations. ® See "ETM System Concepts" in the ETM System User Guide for a detailed discussion of each of the applications and the ETM System architecture.

  • Page 22: Minimum System Requirements

    Customer Support. The ETM System supports several versions of the Oracle DBMS on both Supported Windows and Solaris. Since support for additional versions of Oracle may...

  • Page 23: About Multiple Application Instances

    /cdrom/cdrom0/Software/JRE-1.6.0_12/jre- 1_6_0_12-solaris-sparc.sh The JRE is installed in a subdirectory of the /usr/local directory named jre1.6.0_12. Begin the ETM System Software installation by typing at the prompt: pkgadd -d /cdrom/cdrom0/Software/Installer/ETM_6.1_bn where n is the build number of the installer. Install the ETM® Software  23...
  • Page 24 By default, the packages are installed in the following directory: You may want to ® create an ETM /opt/SecureLogix/ETM System user's group. Note that the Management Server and Report Server scripts are set by default to run automatically when the computer is booted. The scripts for the Management Server, S99ETMMS, and the Report Server, S99ETMRS, are located in the /etc/rc3.d directory.

  • Page 25: Installing The Etm Software (Windows)

    ETM System applications and then run the applications as Administrator rather than local user.  Install the ETM System in a directory that is not a system directory (for example, not in Program Files).  Disable the UAC feature on your operating system.
  • Page 26 Management Server, Report Server, and AAA Services applications. Click Typical, and then click Next. The ETM System Applications dialog box appears, as shown on the following page. Select the check box for each application that you want to install; clear the check box for each application that you do not want to install.
  • Page 27 AAA Services for the Voice Firewall is an optional application that is purchased separately. Select the check box if you have purchased AAA Services; clear the check box if you have not purchased AAA Services, and then click Next.  Advanced.
  • Page 28 Click the hard drive icon next to the application(s) that you want to install, and then click This feature will be installed on the local hard drive. Click the hard drive icon next to the application(s) that you do not want to install, and then click This feature will not be available.

  • Page 29: License The Management Server And Report Server

    TWLicense.txt. Copy TWLicense.txt to the Management Server installation directory. Copy the file to the root of the ETM System Server installation directory, and to the root of the Report Server installation directory, if it is installed on a different computer from the Management Server.

  • Page 30: Changing The Management Server's Tcp/Ip Port For Card Connections

    The default TCP/IP port on which the Management Server accepts connections from all Cards is 4313. If this port assignment is available on Management the ETM System host computer, skip this step and continue with "Create Server's TCP/IP ® and Configure the ETM Database"...

  • Page 31: Create And Configure The Etm Database

    Database which it is to be installed and the version of Oracle to be used, those instructions are not included in this installation guide. See the SecureLogix Knowledge Base, or contact SecureLogix Customer Support. The instruction document also describes the Oracle services the ETM System requires, to ensure that an existing installation meets the requirements.

  • Page 32: Special Instructions For A Remote Etm Server Only

    SID, IP address, port number, and database schema of the database. See "Install the Oracle Client Tools" in the ETM System Oracle installation documentation specific to your operating system and version of Oracle, available on the SecureLogix Knowledge base at http://support.securelogix.com.

  • Page 33: Database Preparation

    Database Preparation The instructions in this section apply to ETM System deployments with a single ETM Server. If multiple server instances and data warehousing are needed for large, dispersed deployments, the system can be configured with an ETM Repository with Managed Databases. For instructions on setting up an ETM Database Repository, see the Knowledge Base article ―Setting up a...

  • Page 34: Opening The Etm Database Maintenance Tool

    Opening the ® ETM Database. The ETM Database Maintenance Tool is installed by Database default with a complete install of the ETM System, or you can install it on a Maintenance different computer from the Management Server. Tool To open the ETM Database Maintenance Tool ...

  • Page 35: Connecting To The Database

    The Port number box defaults to 1521. If you are using a port other than the default, clear the Use default check box and type or select the correct port number. In the Database name box, type the SID of the database. In the Database Schema box, type the username you use to log into the standalone database (username defined for the ETM Server when you ran the Perl script.)

  • Page 36: Populating The Database With Tables

    IP address from which ETM Client Tool connections are allowed. You use this password to log in to a newly installed Management Server, and you use the ETM System Client at the specified IP address to complete ETM System configuration.
  • Page 37 The Allowed Client IP Address box is used to specify the IP address of the computer from which you will initially log in via the ETM System Console to complete system configuration.  If you will perform this initial configuration from a remote Client, type that address here.

  • Page 38: Set The Default Data Instance For The Management Server

    Set the Default When you set a data instance as the default, the ETM Database Maintenance Tool modifies the twms.properties file with the information Data Instance needed to allow the ETM Server to connect to the database. The file for the sections shown below are modified.

  • Page 39: Non-Owner Database Account

    Non-owner To create a non-owner database user account Database Account Log into SQL*Plus as SYSDBA Create a non-owner user. The following is an example command to create a user. Replace <RUNUSER> with the name of the user and <RUNUSERPASS> with the password. CREATE USER <RUNUSER>...
  • Page 40 Continue with one of the following:  If the ETM System components will communicate through a NAT firewall, continue with "Connecting Through a Firewall" on page 41. If not, see the next bullet.

  • Page 41: Connecting Through A Firewall

    Before you begin configuration, determine the following: Step 1: Gather Required  Select a TCP/IP port above 5000 to use for ETM System client tool Information connections to the Management Server (TWMSObjectStartPort).  Select a TCP/IP port above 5000 to use for Usage Manager connections to the Report Server (ReportServerStartPort).

  • Page 42: Step 2: On The Management Server Computer

    Step 2: On the The following files must be modified on the Management Server computer: Management  The hosts file Server  The twms.properties file Computer  In some cases (e.g., when the computer is not part of or not logged in to a domain), the Management Server configuration file: ETMManagementServer.cfg (Solaris) or ETMManagementService.cfg (Windows)

  • Page 43: Edit The Twms.properties File For The Management Server

    The RMI server host name for the Management Server must resolve to a fully qualified domain name. The RMI server host name is determined by Management an entry in the following configuration file, located in the ETM System Server installation directory:...

  • Page 44: Step 3: On The Report Server Host Computer

    By default, the following case-sensitive parameter is included in this file to resolve the RMI server host name: -Djava.rmi.server.useLocalHostName=True For most computers, this parameter will resolve the fully qualified domain name. However, in some cases, it will resolve to the IP address of the computer instead (typically when the computer is not part of or not logged in to a domain).

  • Page 45: Edit The Hosts File For The Report Server

    Solaris /opt/SecureLogix/ETM Windows C:\Program Files\SecureLogix\ETM Locate the line that reads ReportServerStartPort=0 and replace 0 with the TCP/IP port number you selected. Locate the line that reads ReportServerNumPorts=0 and replace 0 with 1. When 0 is specified, anonymous ports are used; when 1 is specified, the port number you specified for ReportServerStartPort is used.

  • Page 46: Edit The Report Server Configuration File

    The RMI server host name for the ETM Report Server must resolve to a Edit the Report fully qualified domain name. The RMI server host name is determined by Server entries in the following configuration file, located in the ETM System Configuration File installation directory: Solaris ETMReportServer.cfg...

  • Page 47: Step 4: On The Etm System Console Host Computer

    Edit the hosts file on each ETM System host computer, including the one on Step 4: On the the same computer as the Management Server, those on the same local ® System network, and those that are outside of the firewall.
  • Page 48  Allow Management Server traffic and established sessions to pass out of the firewall to the remote ETM System Console. For many firewalls, outbound traffic is not restricted, so this step may be unnecessary. Continue with "Install the Appliances" on page 49.

  • Page 49: Step 2: Hardware Installation

    Install the Appliances WARNING To ensure equipment and personnel safety, before you begin installing the Appliance(s), read the suggestions and warnings ® in ETM System Safety and Regulatory Information provided with your Appliances. Installation of the ETM Appliances consists of the following sequence of steps: (Applies to ETM 2100 and 3200 Appliances only.) Install the Controller Card(s) and Digital Trunk Interface(s) in the Appliance chassis.

  • Page 50: Install The Digital Trunk Interface/ Controller Card Pairs

    "Removing and Replacing Cards" on page 188. CAUTION Do not remove the DSP PMC from the Controller Card unless directed to do so by SecureLogix Customer support. To install the Digital Trunk Interface/Controller Card pairs At the back of the Appliance chassis, insert the Digital Trunk Interface into the bottom slot.

  • Page 51: Rack Mounting

    Rack Mounting The ETM 3200 Appliance uses 2 rack units (RU) of space; all other Appliances use 1 RU. To mount an Appliance in a rack When shipped, the mounting brackets are attached to the Appliance in the front-mounting position. If you are rear or mid mounting the Appliances, move the brackets to the applicable position on the side of the Appliance.

  • Page 52: Using A Y-Cable For Smdr

    Using a Y-Cable See the SecureLogix Knowledge Base located at http://support.securelogix.com/knowledgebase.htm for the correct for SMDR Y-cable pinout. When a Y cable is used to connect an Appliance Card to a PBX SMDR port, the Card assumes that the other device connected to the Y cable (e.g., a computer) is providing the handshake signal to request receive...

  • Page 53: Ac Appliances

    AC Appliances AC Appliances are supplied with a power cord. To connect power to an AC Appliance Connect the receptacle end of the provided power cord to the Appliance. Plug the power cord provided with your Appliance into a 100- 240VAC, 50-60Hz power source that is protected by a 15-amp circuit breaker or fuse.

  • Page 54: Configure The Card(S) To Connect To The Management Server

    Card and Span configuration is performed in the Performance Manager. IMPORTANT All ETM System components except remote ETM System Required Clients must be assigned static IP addresses. Remote ETM System Clients Information for must have a static IP address unless you allow IP masks. Out-of-the-Box...
  • Page 55 Start the terminal emulation application (such as HyperTerminal) on your terminal. Configure your terminal using the following serial port settings:   115,200 bps no parity   8 data bits no flow control  1 stop bit Initiate the session (procedure varies by type of emulation application). By default, during the first two minutes of power-on, the Card is in Enable mode and does not require a username/password combination for access.
  • Page 56 If you typed an IPv4 address, the Select Card IP netmask or prefix length prompt appears. Type either a prefix or the IP netmask (in dot notation) for the network on which this Card is to communicate with the Management Server (or type 0.0.0.0) and press ENTER. At the Select card IPv4 gateway prompt, type the gateway IP address for the network on which the Card is to communicate with the Management Server and press ENTER.

  • Page 57: Licensing Additional Spans

    Span 1 is licensed by default. To obtain the license key, contact Customer Support at one of the following: 1-877-SLC-4HELP or support@securelogix.com) You can also provide the Span license via the Performance Manager. However, if you need to change the Span type, you should provide the Span license now.
  • Page 58 To change the Span type Log in to the Card and enter Enable mode. At the ETM:1(r/w)> prompt, type: RESTART FAILSAFE The Card restarts with all Spans in Fail Safe mode. The Fail Safe menu appears. Tip You can also Fail Safe Mode Menu change Span type 1 - Enter Fail Safe ETM Shell...

  • Page 59: Specify The Management Server Tcp/Ip Port

    Continue with one of the following:  If the Management Server is to accept communication from Cards on a TCP/IP port other than 4313, continue with "Specify the Management Server TCP/IP Port" on page 59. If not, see the next bullet. ...

  • Page 60: Changing The Enable Mode Timeout

    Changing the By default, during the first two minutes of power-on, the Card is in Enable mode and does not require a username/password combination for access. Enable Mode After two minutes or one login session, you must login with a valid Timeout username/password combination.

  • Page 61: System Configuration Steps

    If you have completed the procedures in previous chapters, you are ready to ® configure the ETM System components. When you have finished the configuration procedures in this chapter, the ETM System will be ready to monitor and protect the voice network. The following terms are used in these instructions: Overview of Terms ...

  • Page 62: Step 3: Etm ® System Configuration

    Install updated software on the Cards, if necessary. Name each Span and perform telephony- and Policy-related Span configuration. If SMDR, NFAS, SS7 Groups, and/or AAA Services are in use: Create one or more switches with which to associate the Span(s) and to configure SMDR processing, SS7 Groups, and/or NFAS.

  • Page 63: Start The Applications And Connect To The Server

    Start the Applications and Connect to the Server Follow the procedures below to start the Management Server, ETM System Console, and Report Server. If connection problems occur or the Server fails to start, see "Troubleshooting System Communication" on page 71.

  • Page 64: How To Start Multiple Application Instances

    Software | ETM System Console.  The Performance Manager, embedded Usage Manager Client, and Directory Manager are launched from the ETM System Console after you log in to the ETM Server.  Standalone Usage Manager—(You do not need this open during...
  • Page 65 System Console is the same regardless of whether multiple Report Server and Management Server instances are present. The Performance Manager, embedded Usage Manager client, and Directory Manager are launched from the ETM System Console after you log in to the Server. Solaris ...

  • Page 66: Define An Etm Server Object In The Etm System Console

    Define an ETM Before you can log in to the ETM Server, you must define an ETM Server object in the ETM System Console. Perform this procedure in the ETM Server Object in System Console on the client computer from which you authorized client ®...

  • Page 67: Log In To The Etm Server

    Server to log in to the ETM Server to configure the system. To connect to the Management Server Start the ETM Server and open the local ETM System Console or the authorized remote ETM System Console. If connection problems occur, see Click the Server you want to log in to.

  • Page 68: Authorize Cards To Connect To The Etm Server

    In the Password box, type the password defined for the default admin user account when the data instance for the ETM Server was created. Click Login. The ETM System Console connects to the Server and a list of the ETM Client applications appears in the tree. ...
  • Page 69 To authorize a specific IP address, click New and then click IP Address. The Authorized Card Address dialog box appears. If connection problems occur, see "Troubleshooting System Communication" on page 71. Type the IPv4 or IPv6 address of the Card. Click OK.
  • Page 70 12. Click Close to save the changes and close the Authorized Cards dialog box. Continue with the following:  If the ETM Server, Cards, and ETM System Console(s) are communicating, continue with "Completing Card" on page 72. If not, see "Troubleshooting System Communication" below. 70  Step 3: ETM® System Configuration...

  • Page 71: Troubleshooting System Communication

     The DES key entered during Card configuration via the Console port matches the DES key in the twms.properties file in the ETM System installation directory. The DES keys must match because initial communication between system components and the Management Server is always encrypted.

  • Page 72: Completing Card Configuration

    Completing Card Configuration For instructions for out- The procedures below are used to complete Card configuration. The first of-box Card part of Card configuration was performed via direct serial connection. After configuration to enable the Cards have successfully connected to the ETM Server, Card a Card to connect to configuration continues in the Performance Manager.

  • Page 73: Moving Cards To Appliances

    Continue with "Moving Cards to Appliances" on page 73. To move a Card to an Appliance Moving Cards to Appliances In the Platform Configuration subtree, right-click the Card, and then click Move Card.  To move multiple Cards to the same Appliance, hold down CTRL while clicking each Card, and then right-click the selection, and then click Move Card(s).

  • Page 74: Single Or Multi-Card Configuration

    Single or Multi- For most Card configuration tasks, you can configure either a single Card or multiple Cards at once, while a few configuration settings are unique to Card each Card: Configuration?  All of the tabs on the Card Configuration dialog box and Multi- Card Configuration dialog box except the Card tab are identical.

  • Page 75: Card Configuration Settings

    1 is licensed by default.). If you need to license additional Spans on the Card and did not do so during out-of-box configuration, type the 16- character Span license that you received from SecureLogix Corporation. Completing Card Configuration  75...
  • Page 76 The Preferences tab sets the heartbeat interval for the Card. It is recommended that you do not change this setting; use the default of 1 minute. Click the Details tab. In the Time Zone box, click the down arrow and select the correct time zone for the Appliance location.
  • Page 77 See "Managing Telnet Logins to a Card" in ® the ETM System Administration and Maintenance Guide and "Logging In to a Span via Telnet" in the ® System Technical Reference for more information about logging in to a Card or Span via Telnet.
  • Page 78 The Management Server is preconfigured with a default DES key string to enable the ETM Server and Cards to establish communication. Communication between the Cards and the ETM Server is encrypted with 3DES encryption. You can change the DES Key this Card uses to communicate with the Server to a secret key for added security.

  • Page 79: Card Software Installation

    Continue with ―Configuring Telco Spans" on page 83. Since the Appliances are shipped with factory defaults, the latest version of Card Software the Appliance software may not be installed. The ETM System installation Installation directory contains the latest software available at release. Additional software updates may be available from the SecureLogix website at www.support.securelogix.com.

  • Page 80: Important Information About Installing Card Software

    Card is completely unresponsive, be certain that 15 minutes has elapsed since you began the download. Do not manually power cycle or reboot the Card. Connect via the Console port if possible and call SecureLogix Customer Support. A Last Resort recovery boot is available to recover unresponsive Cards.
  • Page 81 Card is completely unresponsive, be certain that 15 minutes has elapsed since you began the download, and then contact SecureLogix Customer Support before you manually power cycle or reboot the Card. A Last Resort recovery boot is available to recover unresponsive Cards.

  • Page 82: Sip Appliances Only

    SIP Appliances After installing new Appliance software on the SIP Call Processor, you must activate it on each of the proxy nodes for that appliance. If HA is in Only use, it is recommended that you upgrade one Media Proxy node and one Signaling Proxy node and then isolate all other nodes to force failover to the upgraded nodes.

  • Page 83: Configuring Telco Spans

    Configuring Telco Spans Telco Span configuration provides telephony- and Policy-processing information specific to each Span. These instructions do not apply to CRCs or AAA services. You can configure some Span settings on more than one Span at once, while other configuration settings are only available for individual Spans.

  • Page 84: General Tab

    To open the Multi-Span Configuration dialog box  In the Platform Configuration subtree, do one of the following: – To configure more than one adjacent Span at once, hold down SHIFT, click the first and last adjacent Span, right-click the selection, and then click Edit Span(s).

  • Page 85: Preferences Tab

    Debug logging can quickly generate a large file. The file is saved in the ETM System installation directory on the Management Server computer at the following path: <INSTALL_DIR>/debug/<macaddress_Spannumber_uniquei...

  • Page 86: Firewall Tab

    The Heartbeat Interval specifies how often the Span contacts the Management Server. The default heartbeat interval is 60 seconds. It is strongly recommended that you do not change this setting. More frequent heartbeats increase network load and do not increase reliability.
  • Page 87 (Not applicable to VoIP Spans) If STU-IIIs are in use on the selected Span(s), turn STU detection on to enable STUs to be recognized. STU detection is OFF by default.  To turn STU detection on, in the STU Detection on/off area, turn STU detection on by selecting the Actively Detect STU check box.

  • Page 88: Telephony Tab

    Telephony Tab (Does not apply to SS7 signaling links) To configure telephony settings In the Span Configuration dialog box, click the Telephony tab. In the Country Code box, type the country code for the country in which the Appliance is located. By default, the country code is set to 1. (U.S., North American Numbering Plan).

  • Page 89: Channel Map Tab

    Channel Map (Does not apply to VoIP Spans or SS7 signaling links) If you are configuring more than one Span at once, the Channel Map tab is not available; you can configure some of these settings on the Global Line Settings tab (see "Global Line Settings Tab"...
  • Page 90 (Only applies if SMDR is in use, and only applies to outbound calls) By default, Request Outbound SMDR is Off. In the Request Outbound SMDR column, select each channel for which you want the Span to request outbound SMDR data from the Server.
  • Page 91 (Applies only to recording Spans.) Inbound SMDR can be used to identify the called extension for recorded calls, to ensure that recordings of calls to Protected Extensions are not retained. You specify per channel whether Inbound SMDR is to be requested. Protected Extension processing only applies to channels on which See the Call Recorder Inbound SMDR is enabled.
  • Page 92 In the Signal Type column, for each enabled channel, click the down arrow and select the correct signaling in use on the channel. CAUTION If Signal Type is set incorrectly, the Span will not be able to evaluate Policy Rules against calls or terminate calls. ...
  • Page 93 NTT—Japan DTMF—UK analog lines that send a polarity reversal and the DTMF caller ID prior to the first ring (ETS 300 659-1). In the Tone Type column, for each enabled channel, click the down arrow and select the correct tone type to match the telephone network. Tone type specifies the digit tones used for call setup and teardown with ANI, DNIS, ADDR, and DID numbering formats.
  • Page 94 DNIS, and DID calls. The default is ADDR. Incoming numbering format must match the format on the channel and must correspond correctly to the tone type; otherwise, the ETM System Dialing Plan is unable to process call data. If DID/DNIS lines are used, the Incoming Numbering Format must...
  • Page 95 12. For each enabled channel, click the Format Precedence cell and type the applicable token. For incoming calls, format precedence determines the priority for selecting which numbering format to use as the destination number for telecommunications auditing and Policy enforcement if similar data values are present in the signaling string. If DID/DNIS lines are used, the Format Precedence must specify DID/DNIS to enable the Dialing Plan to correctly convert the extensions for Policy enforcement and the DID section of the Dialing...

  • Page 96: Global Line Settings Tab

    The Global Line Settings tab is available only on the Multi-Span Global Line Configuration dialog box. The Global Line Settings tab allows you to Settings Tab configure some of the Channel Map tab settings for a group of selected Spans at the same time. To configure Global Line Settings Format Precedence, Outgoing Numbering...
  • Page 97  In the Trunk Group For All Channels box, type a Trunk Group name to apply to all channels on all selected Spans.  In the Extension Map Status area, select the Clear All Extensions box to clear all extensions from the Extension column of the Channel Map tab on all channels on all selected Spans.

  • Page 98: Specific Settings

    H.323 Specific These instructions apply only to the 1090, 1012, and 1024 Appliances. These three ETM System hybrid appliances support small intercampus Settings H.323 deployments. An H.323 VoIP Span is defined as a pair of Network Interface Connectors (NICs) that provide the "tap" point for the Appliance.
  • Page 99 To identify each proxy/gatekeeper this Span may use: Click the New Proxy/Gatekeeper icon The Proxy/Gatekeeper dialog box appears. If any phone on your In the IP address field, type the IPv4 or IPv6 address of the network uses a Proxy Server or gatekeeper. different port than the In the Port box, type the port on which the Proxy Server receives one specified for the...

  • Page 100: Network Tab

     Bandwidth—Allows you to specify call resource limits by maximum bandwidth in kbps. The Span uses the number of calls value, but you can specify a value in bandwidth and it will be automatically converted to number of calls. IMPORTANT If the Span is in NAT mode, you must allocate at least the minimum number of media ports required for the call resources you have specified.
  • Page 101 (Does not apply if selecting NAT) By default, the relays default closed (allow traffic to pass). To set the relays to default open, select Network relays default open. (Not applicable in NAT mode; all non-VoIP packets are discarded.) If the Span is not in NAT mode, use the Packet Policy area to define one or more Rules that govern what happens to non-VoIP TCP or UDP packets that pass through the Span: Allow or Drop.
  • Page 102 Repeat for additional Rules. Place the Rules in the order you want them processed. For example, place a Rule allowing specific traffic before a Rule denying all other traffic. To configure the Span for NAT mode, select Span operates in NAT mode, and then click Configure.
  • Page 103 Click the Routes tab. The Routes tab displays the routes used by the VoIP Span in NAT mode. IMPORTANT Configuring routes is an expert function. The ETM System provides no error checking of the information you enter, and misconfigured routes may impair call traffic.
  • Page 104 In the Network field, type the IPv4 or IPv6 address of the network route for the device. Click the down arrow and select Mask to specify a netmask or Prefix to specify a prefix length for the provided IP address. Type the associated value in the adjacent box.

  • Page 105: Specifying Pn/Uri Precedence

    Specifying Endpoint precedence specifies whether the source and destination addresses should be reported as a URI or a phone number when both are available in PN/URI the signaling. Use the following ETM Command per Span to specify Precedence precedence: ENDPOINT PRECEDENCE pn | url VoIP Span configuration is complete.
  • Page 106 Communication between the Management Server and the Span is now disabled. Right-click the disabled Span, and then click Edit. The Span Configuration dialog box appears. Click Remove. A verification message appears. Click Yes to accept the changes. The unused TDM Span is removed from the tree. To enable the Span again, type the following command at the Console port of the Card or via the ASCII Management Interface for the VoIP Span: SERVER COMM ON 1.

  • Page 107: E1-Specific Span Settings

    E1-Specific E1-specific Span settings apply to both E1 CAS and E1 PRI Spans. Span Settings IMPORTANT All Spans on a Card must use the same clock source. Segregate Spans with different clock sources onto different Cards. To configure E1 settings In the E1 PRI Span Configuration dialog box, click the E1 Setup tab.
  • Page 108 In the Telco Delay box, type or select the time (hours, minutes, and For information about assigning Tracks to seconds) before notification that the trunk is down is sent to the System Events, see Diagnostic Log (at which time any specified System Event Tracks "System Events"...

  • Page 109: T1-Specific Span Settings

    T1-Specific T1-specific Span settings apply to T1 PRI, T1 CAS, T1 SS7 bearer, and T1 SS7 signaling link Spans. Span Settings IMPORTANT All Spans on a Card must use the same clock source. Segregate Spans with different clock sources onto different Cards. To configure T1 settings On the T1 Span Configuration dialog box, click the T1 Setup tab.
  • Page 110  Clear the check box if the Span is to automatically go inline after a reboot or restart. The ETM System supports user-enabled Pass-Through based on You can also turn pass-through mode on received Inband Line and ESF Data Link Loop-Up/Loop-Down codes.
  • Page 111 The Deactivate pass-through after box is available only if Autodetect is selected. If the Deactivate pass-through after box is selected, specify the time (days, hours, minutes, and seconds) to turn off Loopback Test Pass-Through Mode if the Loop-Down code is not detected. The default is 1 hour. Do one of the following: ...

  • Page 112: Pri-Specific Span Settings

    PRI-Specific PRI-specific settings apply to both T1 PRI and E1 PRI Spans. Span Settings To configure PRI-specific settings In the Span Configuration dialog box, click the PRI tab. In the Protocol Variant box, click the down arrow, and then click the applicable variant type.
  • Page 113 PRI issues to allow logical insertion/isolation from layer 2 and 3 on PRI Spans. Only change this setting if instructed to do so by SecureLogix Support personnel. To change the value, in the box, click the down arrow and select an option.
  • Page 114 – Masking Config—Select if you want to mask the source number only on all outgoing calls on the Span. Do the following to replace the actual Calling Party Number with a substitute digit string: Select the Restrict Calling Party Number check box, and then type the substitute number in the Modify Calling Party Number box.

  • Page 115: Ss7 Signaling Link-Specific Span Settings

    SS7 Signaling SS7 Bearer Spans can be configured to use either fully associated signaling links coresident with the Bearer Spans, or a dedicated SS7 Signaling Link Link-Specific Card. Use the applicable procedure below for your configuration. Span Settings To configure fully associated signaling links: Fully Associated Signaling Links On the...

  • Page 116: Dedicated Ss7 Signaling Link Cards

    The Protocol Variant defines the format of SS7 messaging. Options are ANSI ISUP and ETSI ISUP. Up to two SS7 Signaling Links can be defined for each Bearer Span. In the Number of Signaling Links box, type or select the number of Signaling Links.
  • Page 117 The Protocol Variant defines the format of SS7 messaging. Options are ANSI ISUP and ETSI ISUP. Up to 4 SS7 Signaling Links can be defined for each Signaling Link Card. In the Number of Signaling Links box, type or select the number of Signaling Links.

  • Page 118: Importing Span Configuration

    Importing Span After you have completed configuration for a Span, you can import its settings to apply to another Span of the same type. Settings can only be Configuration imported to a single Span at a time, not globally. To import Span settings In the Platform Configuration subtree, right-click the Span into which you want to import settings, and then click Edit Span(s).

  • Page 119: Installing Dialing Plans

    The Incoming and Spans have default Local and World Dialing Plans installed that enable the Outgoing Numbering ETM System to process calls. However, various call classification sections Formats must be should be customized for the specific Appliance locale to ensure proper call properly specified in classification (for example, local vs.
  • Page 120 Under the World INI box, click Modify. The Software Version Selection dialog box appears. Only .WNP files in the ps\software_repository\ini directory in the ETM Server installation directory appear. IMPORTANT If a Dialing Plan file is modified on the Server, it must be reinstalled on the Span(s) before the changes take effect.

  • Page 121: Configuring Switches

    Configuring Switches Switches are used to organize Spans according to the PBX to which they belong and to configure SMDR, NFAS, SS7 Groups, and Call Recording Protected Extensions. Switches are configured in the Telco Configuration subtree in the Performance Manager tree pane. Configuration consists of the following sequence of steps: Create a Switch to represent the PBX.

  • Page 122: Moving A Span To A Switch

    Type the name by which you want to identify this Switch and then click OK. For example, type: Meridian. The Switch appears in the Telco Configuration subtree. On the Switches dialog box, click Close. Continue with "Moving a Span to a Switch" below. To move a Span to a Switch Moving a Span to a Switch...

  • Page 123: Configuring A Switch For Smdr

    Continue with one of the following:  If SMDR is used on this Switch, see "Configuring a Switch for SMDR" below. Otherwise, see the next bullet.  If NFAS is used on this switch, see "Defining NFAS Groups" on page 131.

  • Page 124: Cdr Parse Files

    The specific format of SMDR/CDR data differs widely between PBXs. To successfully correlate SMDR data with calls, the ETM Server requires an SMDR parse file specific to the SMDR format in use. SecureLogix Corporation has defined SMDR parse files for a number of formats. These files are located in the ETM Server installation directory at .
  • Page 125 Under the SMDR Provider box, click Modify. The SMDR Provider Selection dialog box appears. IMPORTANT Span 1  Click the Card that is physically connected to the SMDR port on of the SMDR Provider the PBX, and then click OK. Card must be moved to the Switch before you Select the type of SMDR source: Serial or IP Network.
  • Page 126 In the Stop Bits box, click the down arrow and select value that matches the corresponding settings on the PBX SMDR serial port: 1 or 2.  For IP Network SMDR: In the IP SMDR Filter box, click the down arrow and click one of the following: Syslog, Unfiltered (UDP), or Unfiltered (TCP/IP).

  • Page 127: Extracting Access Codes From Smdr

    In the Offset between PBX and Card box: Click the down arrow and indicate whether the PBX time is later (+) or earlier (- ) than that of the SMDR Provider Card. The time on the Card is equal to the time on the ETM Server, plus or minus any time zone difference.

  • Page 128: Converting Internal Extensions From Smdr Into Fully Qualified

    You must define an Access Code Set in the Directory Manager before you can select it ® here. See the ETM System User Guide for instructions for defining an Access Code Set. You can return to this dialog box later to assign the Access Code Set after you complete installation.

  • Page 129: Smdr Extension Conversion Example

    Technical Reference 400 through 499 for details about editing The example procedure below instructs the ETM System to match and the SMDR parse file to extract the dialed digits remove the 4 from the extension extracted from the SMDR data, add 55598 from the SMDR data.

  • Page 130: Protected Extensions

    In the Remove this digit sequence from the start of the extension box, type 4. In the Prepend these digits to the extension box, type 55598. Select Use Span's area code, since the extensions are in the same area code as the Span. Click OK.

  • Page 131: Defining Nfas Groups

    Defining NFAS To prevent the D-Channel from being included in Resource Utilization Reports, disable monitoring of that channel in the Groups tab of the dialog box. To define an NFAS Group In the Telco Configuration subtree, right-click the applicable switch, and then click Manage NFAS Groups.
  • Page 132 In the Telco Configuration subtree, hold down CTRL, click each T1 PRI Span that is to be a member of the NFAS Group, right-click the selection, point to Move Span(s), and then click To NFAS Group. The Move Span(s) to NFAS Group dialog box appears. Click the NFAS Group to which these Spans are to belong, and then click OK.
  • Page 133 In the Level of Encryption box, select the level of encryption for Span-to-Span communication among members of this NFAS Group: Unencrypted, DES Encryption, or Triple DES Encryption. The default is Unencrypted. This encryption setting applies only to communication between the members of this NFAS Group. In the DES Key String box, type the DES secret key that members of this NFAS Group are to use for encrypted Span-to-Span communication.

  • Page 134: Defining Ss7 Groups

    For each Span listed in the Members area, click in the Interface ID field and type or select the Interface ID to match the switch. 12. Click OK. 13. Repeat this procedure for additional NFAS Groups, if applicable. Continue with one of the following: ...
  • Page 135 Click New. The New SS7 Group dialog box appears.  Type a descriptive name for the Group, and then click OK. The new SS7 Group appears under its switch in the Telco Configuration subtree. Next to the SS7 Group name, click the PLUS SIGN. The SS7 Group contains placeholders for Signaling Links and Bearer Spans.
  • Page 136 In the Remote Point Code box, type the point code (RPC) of the remote switch or the CO/IEC switch to which the Bearer trunks are connected. In the Glare Control box, click the down arrow, and then click the value used by the local switch. The available values are None, All, or Even/Odd.
  • Page 137 15. Click the SS7 Group to which these Spans are to belong, and then click OK. In the Telco Configuration subtree, the Spans move to the selected SS7 Group. Continue with one of the following:  If you are using AAA services for the Voice Firewall, see the procedure below to configure the AAA server.

  • Page 138: Configuring Aaa Services

    Configuring AAA Services If you did not purchase a AAA Appliance, you can skip this section and continue with "Configuring Management Server Settings" on page 148. If you purchased and installed a AAA Appliance, you configured the network connection information via the serial port of the Card and assigned the AAA Server an IP address during out-of -box configuration.

  • Page 139: Enabling Debug Logging For The Aaa Service

    Debug logging can quickly generate a large file. The file is saved in the ETM System installation directory on the Management Server computer at the following path: <INSTALL_DIR>/debug/<macaddress_Spannumber_uniqueid>.dbg.

  • Page 140: Selecting Message Types For Prompts

    To select message types for AAA Service prompts Selecting Message Types In the AAA Service Configuration dialog box, click the for Prompts Messages tab. In the Message Type column, click the down arrow of the message you want to configure, and then click the desired option. The table on the following page shows the options available for each message.
  • Page 141 Account Locked Message Notifies the user that the account has been locked.  Voice Recording  Error Tone  None Played when a user is disconnected after failing Disconnection Message  Voice Recording successive authorizations.  None Goodbye Message Played at the end of an authorization session. ...

  • Page 142: Setting Aaa Authorization Security Preferences

    AAA Service security preferences are set on the Security tab of the AAA Setting AAA Service Configuration dialog box. Authorization Security The table below lists the parameters, defaults, and ranges of the security Preferences parameters. Enable account lockout True Failed authorizations before lockout Lockout duration 1 day 1 minute...
  • Page 143 Do one of the following:  To prevent failed authorization attempts from locking out a user account, clear the Enable account lockout check box.  To prevent access to a user account after failed authorizations, select the Enable account lockout check box, and then set the following parameters: In the Failed authorizations before lockout box, type or select a number between 1 and 10 to define the number of...

  • Page 144: Setting Parameters For Aaa Server/Span Communication

    In the DES Key String box, change the passphrase for Span/AAA Service communication, if desired. The passphrase in the twms.properties file in the ETM System installation directory is used by default. In the Port box, type or select the port on which the AAA Service communicates with the local Spans, if different from the default.
  • Page 145 If no Switches appear, In the Exclude box, double-click the Switch(es) with which this see "Creating a AAA Service is associated. The Switch(es) move(s) to the Switch" on page 121. Include box. Click OK. You are returned to the AAA Service Configuration dialog box. The selected Switch(es) appear(s) in the Local Switches area.

  • Page 146: Configuring Aaa Server Modems

    To configure AAA Server Modems Configuring AAA Server In the AAA Service Configuration dialog box, click the Modem Modems Configuration tab. The Modem Configuration tab displays the modems in the AAA Server. Scan Modems is used  to detect new modems. If no modems are displayed, click Scan Modems.

  • Page 147: Importing Aaa Server Configuration

    Importing AAA You can import settings from one AAA Server to another on the same Management Server. Server Configuration To import AAA Server configuration In the Platform Configuration subtree, right-click the AAA Service icon for the AAA Server that you want to configure, and then click Edit AAA Service.

  • Page 148: Configuring The Call Recorder

    Management Server, commonly referred to as the ETM Server. The ETM Server is a background processing engine that controls the ETM Appliances and integrates the ETM System components with your data network. As a security feature, connections from remote client applications (those installed on a computer other than the one on which the ETM Server is installed) must be authorized on the ETM Server computer.
  • Page 149 To authorize a specific IP address, click New and then click IP Address. The Client Host dialog box appears. Type the IPv4 or IPv6 address of the Client. Click OK. To authorize a range of IP addresses, click New and then click IP Range.

  • Page 150: Associate A Report Server With The Etm Server

    ETM Server and Report Server on the same computer, use the procedure below. To associate a Report Server with the ETM Server On the ETM System Console main menu, click Servers | Server Management. The Server Administration Tool appears. Click the ETM Report Server tab.
  • Page 151 In the Host box, type the fully qualified host name or IP address of the computer on which the Report Server is installed. In the RMI Port box, type or select the correct RMI port established for the Report Server, if different from the default of 6990. This value is set in the twms.properties file on the Report Server computer.

  • Page 152: Specify The Path To The Oracle Client Tools

    ETM Server with the path to the Oracle client tools. Client Tools To specify the path to the Oracle client tools In the ETM System Console, click the name of the Server, and then IMPORTANT If the click Servers | ETM Server Data Management. The Data ETM Server is installed Management Tool appears.

  • Page 153: Importing The City/State Data

    <ORACLE_HOME>\bin. For example, type: C:\oracle\ora92\bin\ Click OK. At the time this version of the ETM System was released, it contained the Importing the latest city/state data. However, this information is updated regularly and City/State Data must be reimported to remain current. Updated files are available periodically on the SecureLogix website or by contacting SecureLogix Customer Support.

  • Page 154: Where To Go From Here

    From Here If you have completed the sequence of procedures described in the preceding sections, the ETM System is installed and configured. You are ready to perform telephony service cutover to place the ETM Appliances inline with your telecommunications system so they can begin monitoring calls.

  • Page 155: Step 4: Telephony Service Cutover

    Telephony  Service Cutover Create a diagram of the circuits to be monitored by the ETM System. Plan  Create a phone number cross-reference checklist to follow while performing the service cutover, if applicable. For example, if you are performing an analog cutover, create a spreadsheet with columns for Cutover Complete and Punchdown Block IDC Phone Number.

  • Page 156: Suggested Tdm Cutover Plan

     Determine how traffic can be rerouted during service cutover for certain blocks. Can hunt groups be used? Can the lines be put into maintenance mode?  Create a list of numbers to call before service cutover to verify that wiring is correctly installed.
  • Page 157 17V (brackets the offhook value, 15, and excludes the onhook value, 10). If the onhook and offhook voltage magnitudes are very close together, contact SecureLogix Customer Support to determine the proper threshold values or other necessary actions. Depending on the line characteristics and signaling type, the threshold values may need to be tweaked to properly follow hook state throughout the call.

  • Page 158: Placing Digital Spans Inline

    Digital TDM Spans  For each Card in the Appliance, connect telco cables to each licensed SS7 Signaling Link Span as follows: Cards only use ports 1 and 2. Span 1—Port 1 to CO, Port 2 to PBX. Span 2—Port 3 to CO, Port 4 to PBX Span 3—Port 5 to CO, Port 6 to PBX Span 4—Port 7 to CO, Port 8 to PBX ETM 5000 Series...

  • Page 159: Verifying Etm ® 1090/2100/3200 Appliance Operation

    In the Performance Manager, do the following: In the Platform Configuration subtree, right-click the Span, and then click Health & Status. The ETM System Statistics dialog box appears. Use this dialog box to view trunk errors, bipolar violations, and alarms. When you first open the dialog box, click Reset on the Cumulative tab to clear any errors that may have been introduced during cutover.

  • Page 160: Verifying Etm ® 1012/1024 Appliance Operation

    View the Diagnostic Log to verify that no errors are being reported; see "Viewing the Diagnostic Log" on page 162. View the Call Monitor to verify that calls are passing through the ETM Appliance; see "Monitoring Calls in Real Time" on page 164.

  • Page 161: Bypassing Tdm Appliances

    Spans placed inline, follow the procedure to allow telecommunications traffic to pass unaffected through the Appliances while you verify Span configuration. Contact SecureLogix Customer Support at 1-877-SLC-4HELP or support@securelogix.com for assistance, if necessary.

  • Page 162: Viewing The Diagnostic Log

    After performing telephony service cutover, view the Diagnostic Log for Viewing the evidence of configuration errors or connection problems. Diagnostic Log To view the Diagnostic Log  Do one of the following: – On the Performance Manager main menu, click Tools | View Diagnostic Logs.
  • Page 163 ERROR—Occurs in response to such events as elevated cabinet temperature or power supply failure. INFO—Messages labeled INFO do not represent problems. They provide general information about system operation, such as connection requests from ETM System components. PANIC—Occurs in response to such events as Card application or hardware errors.

  • Page 164: Monitoring Calls In Real Time

    The Call Monitor provides a near real-time display of call activity on Monitoring Calls monitored channels. You can use the Call Monitor to verify that call in Real Time traffic is passing through the Span(s). For details about each column in the Call Monitor and for information about setting display properties, see ®...

  • Page 165: Where To Go From Here

    ® Refer to the ETM System User Guide for an overview of the ETM System, a discussion of key concepts, and general instructions for using the ETM System, including a Quick Start.  ® Refer to the ETM System Administration and Maintenance Guide for...
  • Page 166 166  Step 4: Telephony Service Cutover...

  • Page 167: Appendix A: Appliance Technical Specifications, Connectors, And Pinouts

    Knowledge Base See the Knowledge Please see the SecureLogix Knowledge Base for Technical Specifications Base for all Tech Spec for all SecureLogix Corporation products. sheets. http://support.securelogix.com/knowledgebase.htm keyword: tech spec Model 1012/1024 Appliance Specs The following are the technical specifications for the ETM 1012/1024 Technical Appliances.
  • Page 168 ® 1012/1024 Appliance Technical Specifications, continued Compact Flash 64 MB minimum (ETM 1012/1024) 4 GB minimum (ETM 1024-CR) AC Input 100-240 VAC, 50/60 Hz Input Current 195 mA Heat Output 76.5 BTU/hr typical Fuse 1.6A, 250V Connection IEC Connector 1.75‖ H x 16.9‖ W x 13‖ D Dimensions Weight 11 lbs...

  • Page 169: Connectors And Pinouts

    Connectors and Descriptions and pinouts of the telco connectors on the ETM 1012/1024 Appliances are provided below. Pinouts Note: The Ethernet, Console, and Auxiliary port connectors are identical to those on the 2100/3200. The VoIP port connectors (Ethernet 0 and Ethernet 1) are identical to the Management Server Ethernet port. Front of Chassis Back of Chassis Model 1012/1024 Appliance Specs ...

  • Page 170: Pinouts

    ® 1012/1024 The Network connector on an ETM 1012/1024 Appliance is an RJ-21X connector to connect to the telephone network. Appliance Telephone Network Connector Pinouts Blue/White Ring Channel 1 to Network White/Blue Tip Channel 1 to Network Orange/White Ring Channel 2 to Network White/Orange Tip Channel 2 to Network Green/White...

  • Page 171: Etm ® 1012/1024 Appliance Cpe Connector Pinout

    ® 1012/1024 The CPE connector on an ETM 1012/1024 Appliance is an RJ-21X connector. Appliance CPE Connector Pinout Blue/White Ring Channel 1 to CPE White/Blue Tip Channel 1 to CPE Orange/White Ring Channel 2 to CPE White/Orange Tip Channel 2 to CPE Green/White Ring Channel 3 to CPE White/Green...

  • Page 172: Model 1050 (Aaa) Appliance

    Model 1050 (AAA) Appliance The following are the technical specifications for the ETM 1050 AAA Technical Appliance: Specifications 1GHz or greater Bus speed 100 MHz Asynchronous Bus Video Integrated 3D graphics Audio Integrated ADI 1885 AC97 128 MB or greater SRAM (NVRAM) 256 bytes (for configuration parameters).

  • Page 173: Connectors

    CB Scheme (EN/IEC60950) Marks and Approvals FCC Part 15, FCC Part 68 Each of the connectors on the ETM 1050 Appliance used for ETM System Connectors operation is described below. Only elements used for ETM System operation are labeled in the above illustration.

  • Page 174: Etm Etm

    ® 1050 Appliance Serial Port Pinout The ETM 1050 (AAA) Appliance provides a DB 9-pin male connector for serial port connection. Carrier Detect Data Set Ready Receive Data Request to Send Transmit Data Clear to Send Data Terminal Ready Ring Indicator Signal Ground ®...

  • Page 175: Model 1060 Appliance

    Model 1060 Appliance ® The sections below provide the hardware specifications for the ETM 1060 Appliance. Note: The pinouts on the ETM 1060 Appliance are identical to those in the ETM 2100/3200 Appliances. See ―Connector Pinouts‖ on page 184 for descriptions of each connector.

  • Page 176: Appliance Connectors

    ETM 1060 Appliance Technical Specifications, continued Desktop, 19‖ Rack, or Wall-Mount Mounting Operating Temperature 32 to 104 F (0 to 40 C) Storage Temperature -4 to 158 F (-20 C to +70 C) EMI/EMC FCC Part 15, ICES-003, EN55022, EN55024, CISPR 22 Safety CB Scheme (EN/IEC60950), UL /cUL 60950 Marks and Approvals...

  • Page 177: Model 1090 Appliance

    Model 1090 Appliance The following are the technical specifications for the ETM 1090 Technical Appliances: Specifications 200 MHz Motorola MPC8241 Bus speed 100 MHz Asynchronous Bus PCI Bus speed/width 33 MHz/32-bit 4 x 200 MHz Texas Instruments TMS320VC5510. 64 MB with ECC SRAM (NVRAM) 256 bytes (for configuration parameters).
  • Page 178 ® 1090 Appliance Technical Specifications, continued Storage Temperature -4 to 158 F (-20 C to +70 C) Number of Lines One T1, North American ISDN PRI, or European ISDN PRI Circuit Line Rate 1.544 or 2.048 Mbps Line Framing SF (D4), ESF, CRC 4 Line Code AMI, B8ZS, HDB3 Input Signal...

  • Page 179: Etm

    ® 1090 Appliance Technical Specifications, continued Marks and Approvals FCC Part 15, FCC Part 68, Industry Canada, CE Mark, UL/cUL Other Country Approvals Turkey ® The pinouts on the ETM 1090 Appliance are identical to those in the 1090 ETM 2100/3200 Appliances. The VoIP port pinouts are identical to the Appliance Ethernet port.

  • Page 180: Model 2100 And 3200 Appliances

    Model 2100 and 3200 Appliances The ETM 2100 Appliance contains a power supply, a fan unit, and one hot- swappable board set. The ETM 3200 Appliance contains two hot-swappable power supplies, a removable fan assembly containing 3 cooling fans, and 1-to-4 hot- swappable board sets.
  • Page 181 8240 Controller Card Technical Specifications, continued Input Current (3200) 1 board set: 650mA, 2 board sets: 950mA, 3 board sets: 1.250A, 4 board sets: 1.550A Heat Output (2100) 196.2 BTU/hr typical 1 board set: 255.1 BTU/hr typical, 2 board sets: 372.8 BTU/hr typical, Heat Output (3200) 3 board sets: 490.5 BTU/hr typical, 4 board sets: 608.2 BTU/hr typical Fuse (AC)
  • Page 182 8240 Controller Card Technical Specifications, continued Line Build Out T1: Short Haul 0-660ft (110 ft increments), T1: Long Haul 0, -7.5, -15, -22.5 dB, E1: 120 Ohm Keep Alive Unframed All Ones (AIS) Network/CO Activation Alarms LOS and/or Loss of Frame (Red), RAI (Yellow), AIS (Blue) Equipment/PBX Activation LOS and/or Loss of Frame (Red), RAI (Yellow), AIS (Blue) Reporting...

  • Page 183: Etm 2100 And 3200 Appliance Board Sets

    ® 2100 and Each four-Span, hot-swappable board set includes: 3200 Appliance  One Ethernet interface, RJ-45 10/100 Mbps. Board Sets  Two serial interfaces: RJ-48 Console and Auxiliary ports.  Eight line interfaces: 4 RJ-48 CO, 4 RJ-48 PBX.  Diagnostic LEDs.

  • Page 184: 10/100 Base-T Ethernet Port Pinout

    ® 1090, Pinouts for each of the connectors on the ETM 1090, 2100, and 3200 Appliances are provided below. 2100, and 3200 Appliance Connector Pinouts 10/100 Base-T Ethernet Port Pinout A standard RJ-45 jack is provided on each 1012, 1024, and 1090 Appliance and 3200 and 2100 Controller Card for connection to an Ethernet 10/100 Mps network.

  • Page 185: Co Port Pinout

    CO Port Pinout Each Digital Trunk Interface (at the back of the Appliance) has 4 pair of RJ- 48 connectors, 1 pair per Span, labeled 1-8, for connection to the telco network. Connectors 1, 3, 5, and 7 connect to the Spans from the CO. This pinout also applies to the Network port on the 1090 Appliance See ―Digital Trunk Interface‖...
  • Page 186 186  Appendix A: Appliance Technical Specifications, Connectors, and Pinouts...

  • Page 187: Appendix B: Removing And Replacing Appliance Components

    Removing and Replacing Appliance CAUTION 1000-series Appliances contain no Components user-serviceable parts. Do not open the IMPORTANT Before you begin any hardware maintenance, read the chassis. ® suggestions and warnings in the ETM System Safety and Regulatory Information, provided with your Appliances, to ensure equipment and personnel safety.

  • Page 188: Basic Esd Precautions

    See the sections below for the proper procedures for removing and replacing the Cards. WARNING Do not remove the DSP PMC from the Controller Card unless directed to do so by SecureLogix Customer support. To remove a Controller Card from the chassis Removing a...

  • Page 189: Removing A Digital Trunk Interface

    To remove a Digital Trunk Interface from the chassis Removing a Digital Trunk Before removing the Digital Trunk Interface, remove the Controller Interface Card as described in "Removing a Controller Card" on page 188. WARNING Never remove the Digital Trunk Interface from a powered chassis until after you remove the Controller Card.

  • Page 190: Replacing A Controller Card

    See "Verifying ETM® 1090/2100/3200 Appliance Operation" on page 159 for instructions for verifying that the Card set is operating normally. The instructions below provide step-by-step procedures for replacing and Replacing a configuring a Controller Card in an ETM 2100 or 3200 Appliance. Controller Card To replace a Controller Card Replace the Card, following correct hot-swap procedures as follows:...
  • Page 191 Through a serial connection to the new Card, complete the "out-of-the- Unless you use the box" setup procedures as described in ―Configure the Card(s) to same IP address as Connect to the Management Server‖ on page 54. the Card you are replacing, you must Connect the Ethernet cable.
  • Page 192 Complete essential Card configuration. After the new Card connects to the Management Server, right-click the Card icon in the Platform Configuration subtree pane, and then click Edit Card(s). In the Card Name box, type the name for the Card. Click the Details tab and select the correct time zone. 10.

  • Page 193: Removing And Replacing A Power Supply

    Card(s). In the Card Configuration dialog box, click Remove. 16. Follow the shipping instructions provided with the new Card to return the old Card to SecureLogix. In the ETM 3200 Appliance, if one of the power supplies fails, the second Removing and...

  • Page 194: Removing/Replacing The Fan Unit

    Removing/ Elevated cabinet temperature can be an indication that a cooling fan has failed. In the ETM 3200 Appliance, the fan unit can be removed and Replacing the replaced without turning power off to the chassis. Fan Unit CAUTION If a fan fails, it is important that you replace it as soon as possible, because the power supplies can cause the chassis To view cabinet temperature to rise quickly.

  • Page 195: Entering Fail Safe Mode

    Entering Fail If the network connection between the ETM Server and the Card is up, you can enter Fail Safe Mode from either the ASCII Management Interface Safe Mode in the Performance Manager or from a Console port connection. To enter Fail Safe Mode from the ASCII Management Interface Entering Fail Safe Mode from the In the Platform Configuration subtree, right-click the Card and...

  • Page 196: Fail Safe Menu Options

    The PASSWORD: prompt for Enable mode appears. Type the Enable mode password. The ETM:1(r/w)> prompt appears indicating that you are in Enable mode on Span 1. The Error LED on the Enter Fail Safe mode by doing one of the following: Controller Card is ...

  • Page 197: Appendix C: Span Telco Settings Reference

    At-a-Glance Reference Table to TDM Span Telco Settings (Not applicable to VoIP) The table below provides an at-a-glance reference to the available TDM telco settings in the Span Configuration dialog box, the TDM Span types to which they apply, their purposes, and the possible results if set incorrectly.
  • Page 198 Span Telco Settings, continued Format Channel T1 CAS, For incoming calls, Affects Policy enforcement. Precedence T1 PRI, determines the selection order for using ADDR, DID, or DNIS as the destination number for Voice Firewall Policy enforcement when multiple values are present in the call data.
  • Page 199 Span Telco Settings, continued Loopback T1 CAS, Enables/disables loopback test Affects Policy enforcement. T1 Setup Test Pass- T1 PRI, Pass-Through mode. The Span When the Pass-Through mode Through activates/ deactivates Pass- is On, telecom data is Mode Through upon detection of the transmitted without Loop-Up/Loop-Down codes.
  • Page 200 Span Telco Settings, continued Channel All except AAA Set to the line interface Improper setting prevents the Signal Type and SS7 signaling associated with the Span from evaluating calls signaling links monitored circuit. against Policies or terminating calls. Tone Type Channel Analog, Set to the incoming digit tone...

  • Page 201: Appendix D: Database Directories And File Names Reference

    Directories Created by the Database Creation Script The database creation script creates the following directory structure, in keeping with the Oracle Flexible Architecture specification:  <ORACLE_BASE>  <ORACLE_BASE>\admin\<ORACLE_SID> or <ORACLE_HOME>\admin\<ORACLE_SID>, depending on which exists. If both exist, <ORACLE_BASE>\admin\<ORACLE_SID> will be used. This directory is referred to as <ETM_DB_DIRECTORY> in this document.

  • Page 202: Windows Service Name

    Windows When installed on Windows, the Windows Service created for the database has a name in the format: Service Name OracleService<ORACLE_SID> File Names and By default, the locations of the data files are the standard locations as specified by the Oracle Flexible Architecture specification. Unless a special File Locations requirement is dictated by the installation, it is not necessary to change the file locations.

  • Page 203: Appendix E: Appliance Status Leds

    LED Descriptions The ETM Appliances have LEDs on the front and/or back of the chassis or Card to indicate status of ETM System operation and the telecommunications connections. The LEDs provide immediate visual notification of errors and warnings. Further investigation of these conditions...

  • Page 204: Telco Appliance Leds

    Telco Appliance The table below identifies the types of information, errors, and warnings represented by the LEDs on the ETM 1012, 1024, 1090, 2100, and 3200 LEDs Appliances. Error Front  Off during normal operation with no errors detected and the Status LED blinking green. ...
  • Page 205 LEDs on 1012/1024/1090/2100/3200 Appliances, continued Front  Green indicates that the Digital Trunk Interface is operational  Red indicates that the Digital Trunk Interface has an error. Front  Off if the DSP Mezzanine Card is not present.  Green indicates that the DSP Mezzanine Card is operational. ...

  • Page 206: 1060 Appliance Leds

    1060 Appliance The table below identifies the types of information, errors, and warnings represented by the LEDs on the ETM 1060 Appliance. LEDs Error Front  Off during normal operation with no errors detected and the Status LED blinking green. ...

  • Page 207: Index

    AAA Server ......................15, 138, 140, 143, 144 communication ........................144 configuring ..........................147 DES Key ..........................144 encryption ..........................144 local Switch ..........................144 modems ..........................146 port ............................144 AAA Services ......................15, 62, 119, 121, 138 authorization attempts ......................143 configuring ..........................
  • Page 208 network connector ....................173 serial port ......................... 174 technical specifications .................... 172 1090 ......................... 14, 158, 159 Auxiliary (SMDR/CDR) port .................. 184 connectors and pinouts..................179, 184 Console (serial) port ....................184 Ethernet connector ....................184 Network port ......................185 technical specifications ....................
  • Page 209 CCMI..............................153 City/State data ............................153 configuring ............................. 72 Cards ............................72 ETM System ..........................61 multiple Cards .......................... 74 process ............................. 61 connectors ....................169, 170, 171, 173, 179, 184 Console (serial) port ............54, 56, 71, 76, 77, 78, 80, 157, 184, 195, 203 data instance associate with Management Server ..................
  • Page 210 Client connections ...................... 148 ETM System configuring ..........................61 terms ............................61 ETM System Console ..........................21 ® Client Tools ..........................15 location ............................. 15 heartbeat interval ........................86, 139, 140 heartbeat interval ............................ 76 inbound SMDR requesting ..........................91 installing ..............................
  • Page 211 Repository with Managed Databases ..................... 33 SMDR ............................62, 90, 121 cable ............................51 converting to phone number....................129 parse file ..........................124 requesting inbound ........................91 SMDR Provider ........................123 Spans ..............................83 adding to NFAS Group ......................132 adding to SS7 Group ......................
  • Page 212 SS7 ........................... 62, 95, 115, 121, 134 adding Spans to SS7 Group....................136 associated signaling links ....................... 136 defnining SS7 Groups ......................134 listener port ..........................115 Local Point Code ........................135 Remote Point Code ........................ 135 signaling links ........................116 Switch .............................

Table of Contents