Cisco ONS 15454 - Page 332

Cisco ONS 15454

728 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

9-10

Cisco ONS 15454 Reference Manual, R7.0.1

OL-9217-01

Chapter 9 Security

9.4 9.4.2 Shared Secrets

Table of Contents

Default Chapter3
- Table of Contents3
About this Manual39
- Revision History39
Appendix A Hardware Specification.40
- Document Organization42
- Related Documentation43
- Document Conventions44
- Obtaining Documentation and Submitting a Service Request50
Chapter 1 Shelf and Backplane Hardware52
- Rack Installation53
  - Reversible Mounting Bracket54
  - Mounting a Single Node55
- Front Door56
- Figure 1-4 Cisco ONS 15454 Deep Door57
- Figure 1-5 ONS 15454 Front Door Ground Strap58
- Backplane Covers60
  - Figure 1-9 Backplane Covers61
  - Lower Backplane Cover61
  - Figure 1-11 Backplane Attachment for Cover62
  - Rear Cover62
  - Alarm Interface Panel63
  - Figure 1-12 Installing the Plastic Rear Cover with Spacers63
- Electrical Interface Assemblies64
  - EIA Installation65
  - Table 1-1 EIA Types Compatible with the 15454-SA-ANSI Only65
  - Table 1-2 EIA Configurations Compatible with the 15454-SA-ANSI and the 15454-SA-HD66
  - Bnc Eia67
  - Minibnc EIA70
  - Minibnc Insertion and Removal Tool76
  - Table 1-7 J-Labeling Port Assignments for a Shelf Configured with High-Density Electrical Cards (B Side)76
- Smb Eia77
- AMP Champ EIA78
- Table 1-8 AMP Champ Connector Pin Assignments80
- Table 1-9 AMP Champ Connector Pin Assignments (Shielded DS-1 Cable)80
- Ubic-V Eia82
- Figure 1-20 UBIC-V Slot Designations82
- Ubic-H Eia83
- Table 1-10 UBIC-V Protection Types and Slots83
- Table 1-11 J-Labeling Port Assignments for a Shelf Assembly Configured with Low-Density Electrical Cards (a Side)85
- Table 1-12 J-Labeling Port Assignments for a Shelf Assembly Configured with Low-Density Electrical Cards (B Side)85
- Table 1-13 J-Labeling Port Assignments for a Shelf Configured with High-Density Electrical Cards (a Side)86
- Table 1-14 J-Labeling Port Assignments for a Shelf Configured with High-Density Electrical Cards (B Side)86
- EIA Replacement87
- Coaxial Cable87
- Cable87
  - Twisted Pair Wire-Wrap Cables87
  - Table 1-15 UBIC-H Protection Types and Slots87
  - Electrical Interface Adapters88
  - Figure 1-22 DS-1 Electrical Interface Adapter (Balun)88
- UBIC-V Cables89
- Table 1-16 UBIC-V DS-1 SCSI Connector Pin out90
- Figure 1-24 UBIC-V DS-1 Cable Schematic Diagram91
- Table 1-17 UBIC-V DS-1 Tip/Ring Color Coding92
- Table 1-18 UBIC-V DS-3/EC-1 SCSI Connector Pin out92
- UBIC-H Cables94
- Figure 1-25 UBIC-V DS-3/EC-1 Cable Schematic Diagram94
- Figure 1-23 Cable Connector Pins96
- Figure 1-26 Cable Connector Pins96
- Table 1-19 UBIC-H DS-1 SCSI Connector Pin out96
- Figure 1-27 UBIC-H DS-1 Cable Schematic Diagram97
- Table 1-20 UBIC-H DS-1 Tip/Ring Color Coding98
- Table 1-21 UBIC-H DS-3/EC-1 SCSI Connector Pin out98
- Ethernet Cables100
- Figure 1-28 UBIC-H DS-3/EC-1 Cable Schematic Diagram100
- Figure 1-29 100Baset Connector Pins101
- Figure 1-30 Straight-Through Cable101
- Table 1-22 E100-TX Connector Pinout101
- Cable Routing and Management102
  - Figure 1-31 Crossover Cable102
  - Fiber Management103
  - Fiber Management Using the Tie-Down Bar104
  - AMP Champ Cable Management105
  - Coaxial Cable Management105
  - Twisted-Pair Cable Management105
- Alarm Expansion Panel105
  - Wire-Wrap and Pin Connections106
  - Figure 1-35 AEP Printed Circuit Board Assembly106
  - Figure 1-36 AEP Block Diagram106
  - Figure 1-38 Alarm Input Circuit Diagram108
  - Table 1-25 Alarm Input Pin Association108
  - Figure 1-39 Alarm Output Circuit Diagram109
  - Table 1-26 Pin Association for Alarm Output Pins109
- Filler Card110
- Fan-Tray Assembly111
  - Figure 1-40 Detectable Filler Card Faceplate111
  - Fan Failure112
  - Fan Speed and Power Requirements112
  - Air Filter113
- Power and Ground Description113
- Alarm, Timing, LAN, and Craft Pin Connections114
  - Figure 1-42 ONS 15454 Backplane Pinouts (Release 3.4 or Later)115
  - Alarm Contact Connections116
  - Figure 1-43 ONS 15454 Backplane Pinouts116
  - LAN Connections117
  - Table 1-28 BITS External Timing Pin Assignments117
  - Timing Connections117
  - TL1 Craft Interface Installation118
- Cards and Slots118
  - Table 1-29 LAN Pin Assignments118
  - Table 1-30 Craft Interface Pin Assignments118
  - Card Slot Requirements119
  - Table 1-31 Slot and Card Symbols120
  - Table 1-32 Card Ports, Line Rates, and Connectors120
  - Card Replacement122
  - Ferrites122
- Software and Hardware Compatibility123
- Table 1-33 ONS 15454 Software and Hardware Compatibility-XC and XCVT Configurations123
- Table 1-34 ONS 15454 Software and Hardware Compatibility-XC10G and XC-VXC-10G Configurations125
Chapter 2 Common Control Cards129
- Common Control Card Overview129
- TCC2 Card134
- TCC2P Card138
- XCVT Card142
- XC10G Card146
- XC-VXC-10G Card150
- AIC-I Card155
- Electrical Card Overview161
- Table 3-1 Cisco ONS 15454 Electrical Cards162
Chapter 3 Electrical Card162
- Table 3-2 Electrical Card Software Release Compatibility163
- EC1-12 Slots and Connectors164
- Figure 3-1 EC1-12 Faceplate and Block Diagram164
- EC1-12 Hosted by XCVT, XC10G, or XC-VXC-10G165
- DS1N-14 Features and Functions166
- DS1-14 and DS1N-14 Hosted by XCVT, XC10G, or XC-VXC-10G168
- DS1-14 and DS1N-14 Port-Level Indicators169
- DS1/E1-56 Faceplate and Block Diagram170
- Figure 3-4 DS1/E1-56 Faceplate and Block Diagram171
- Table 3-6 DS1/E1-56 Card-Level Indicators171
- DS1/E1-56 Port-Level Indicators172
- DS3-12 and DS3N-12 Slots and Connectors173
- Figure 3-6 DS3N-12 Faceplate and Block Diagram174
- Table 3-7 DS3-12 and DS3N-12 Card-Level Indicators174
- DS3-12 and DS3N-12 Port-Level Indicators175
- DS3/EC1-48 Faceplate and Block Diagram176
- Figure 3-7 DS3/EC1-48 Faceplate and Block Diagram177
- Table 3-9 DS3/EC1-48 Card-Level Indicators177
- DS3/EC1-48 Port-Level Indicators178
- Figure 3-8 Ds3I-N-12 Faceplate and Block Diagram179
- Ds3I-N-12 Card-Level Indicators180
- DS3-12E and DS3N-12E Slots and Connectors181
  - Figure 3-9 DS3-12E Faceplate and Block Diagram182
  - Figure 3-10 DS3N-12E Faceplate and Block Diagram183
  - Table 3-11 DS3-12E and DS3N-12E Card-Level Indicators183
  - DS3-12E and DS3N-12E Port-Level Indicators184
  - DS3XM-6 Hosted by XCVT185
  - Figure 3-11 DS3XM-6 Faceplate and Block Diagram185
  - DS3XM-6 Port-Level Indicators186
  - Ported Mode187
  - Protection Modes188
  - DS3XM-12 Slots and Connectors189
  - DS3XM-12 Card-Level Indicators190
  - DS3XM-12 Port-Level Indicators191
  - Table 4-1 Optical Cards for the ONS 15454194
Chapter 4 Optical Card194
- Card Summary195
- Table 4-2 Optical Card Software Release Compatibility196
- Card Compatibility197
- OC3 IR 4/STM1 SH 1310 Card198
  - OC3 IR 4/STM1 SH 1310 Card-Level Indicators199
  - Figure 4-2 OC3IR/STM1 SH 1310-8 Faceplate and Block Diagram200
- OC3 IR/STM1 SH 1310-8 Card200
  - OC3 IR/STM1 SH 1310-8 Card-Level Indicators201
- OC12 IR/STM4 SH 1310 Card202
  - OC12 IR/STM4 SH 1310 Card-Level Indicators203
- OC12 LR/STM4 LH 1310 Card204
  - OC12 LR/STM4 LH 1310 Card-Level Indicators205
- OC12 LR/STM4 LH 1550 Card206
  - OC12 LR/STM4 LH 1550 Card-Level Indicators207
- OC12 IR/STM4 SH 1310-4 Card208
- Table 4-8 OC12 IR/STM4 SH 1310-4 Card-Level Indicators209
- OC48 IR 1310 Card210
- OC48 ELR 200 Ghz Cards220
  - OC48 ELR 200 Ghz Card-Level Indicators221
- OC192 SR/STM64 IO 1310 Card222
  - OC192 SR/STM64 IO 1310 Card-Level Indicators223
- OC192 IR/STM64 SH 1550 Card224
  - OC192 IR/STM64 SH 1550 Card-Level Indicators225
- OC192 LR/STM64 LH 1550 Card226
- Figure 4-16 Enlarged Section of the OC192 LR/STM64 LH 1550 (15454-OC192LR1550) Faceplate227
- Table 4-17 OC192 LR/STM64 LH 1550 Card-Level Indicators230
- OC192 LR/STM64 LH ITU 15Xx.XX Card231
Chapter 5 Ethernet Card246
- Table 5-2 Ethernet Card Software Compatibility247
- Slot Compatibility249
- E100T-G Card250
- E1000-2-G Card255
  - E1000-2-G Card-Level Indicators257
- G1000-4 Card258
  - STS-24C Restriction259
  - Slot Compatibility260
- STS-24C Restriction261
- G1K-4 Compatibility262
- ML100T-12 Card263
- FC_MR-4 Card Overview281
Chapter 6 Storage Acces Networking Card282
- FC_MR-4 Card-Level Indicators283
- Figure 6-1 FC_MR-4 Faceplate and Block Diagram283
- FC_MR-4 Port-Level Indicators284
- Enhanced Card Mode285
  - Differential Delay Features286
  - Link Recovery287
- FC_MR-4 Card Gbics288
- Electrical Card Protection289
Chapter 7 Card Protection290
- N Protection291
  - Revertive Switching292
- Electrical Card Protection and the Backplane293
- OC-N Card Protection301
- Figure 7-8 ONS 15454 in an Unprotected Configuration302
- Unprotected Cards302
- C H a P T E R 8 Cisco Transport Controller Operation306
CHAPTER 8 Cisco Transport Controller Operation307
- CTC Software Installed on the PC or UNIX Workstation307
- PC and UNIX Workstation Requirements309
- ONS 15454 Connection311
- CTC Window312
- Network View316
  - Network View Tabs317
  - Link Consolidation318
- Card View319
- Table 8-12 Card View Tabs and Subtabs320
- Print or Export CTC Data321
- Software Revert322
- User Ids and Security Levels323
Chapter 9 Security324
- Table 9-1 ONS 15454 Security Levels-Node View325
- Table 9-2 ONS 15454 Security Levels-Network View327
- Security Policies328
  - Secure Access329
  - Table 9-4 Audit Trail Window Columns329
- Radius Authentication330
- Shared Secrets331
- Table 9-5 Shared Secret Character Groups331
- Timing Parameters333
Chapter 10 Timing334
- Table 10-1 SSM Generation 1 Message Set335
- Table 10-2 SSM Generation 2 Message Set335
- Synchronization Status Messaging336
Chapter 11 Circuit and Tunnel338
- Concatenated STS Time Slot Assignments340
  - Table 11-1 STS Mapping Using CTC341
  - Circuit Status342
  - Circuit States343
  - Circuit Protection Types345
  - Circuit Information in the Edit Circuit Window346
  - Table 11-4 Port State Color Indicators347
  - Figure 11-2 BLSR Circuit Displayed on the Detailed Circuit Map348
- Cross-Connect Card Bandwidth348
- Figure 11-4 Two VT1.5 Circuits in a BLSR350
- Portless Transmux351
- DCC Tunnels352
  - Table 11-8 DCC Tunnels353
  - Traditional DCC Tunnels353
  - IP-Encapsulated Tunnels354
- Monitor Circuits355
  - Open-Ended Path Protection Circuits356
- BLSR Protection Channel Access Circuits357
- BLSR STS and VT Squelch Tables358
- Section and Path Trace359
- Table 11-9 ONS 15454 Cards Capable of J1 Path Trace360
- Path Signal Label, C2 Byte360
- Table 11-11 STS Path Signal Label Assignments for Signals with Payload Defects362
- Automatic Circuit Routing362
  - Bandwidth Allocation and Routing363
- Manual Circuit Routing364
- Constraint-Based Circuit Routing368
- Figure 11-14 VCAT Common Fiber Routing369
- Virtual Concatenated Circuits369
  - Figure 11-15 VCAT Split Fiber Routing370
  - Link Capacity Adjustment370
  - VCAT Circuit Size371
- Bridge and Roll372
  - Rolls Window373
  - Table 11-18 Roll Statuses374
  - Roll Status374
  - Single and Dual Rolls375
  - Figure 11-18 Single Destination Roll376
  - Figure 11-19 Single Roll from One Circuit to Another Circuit (Destination Changes)376
  - Figure 11-20 Single Roll from One Circuit to Another Circuit (Source Changes)376
  - Figure 11-21 Dual Roll to Reroute a Link377
  - Figure 11-22 Dual Roll to Reroute to a Different Node377
  - Two Circuit Bridge and Roll377
  - Protected Circuits378
- Vlan Management379
- Table 12-1 ONS 15454 Rings with Redundant TCC2/TCC2P Cards381
- SONET Rings and TCC2/TCC2P Cards381
Chapter 12 SONET Topologie and Upgrade383
- Four-Fiber Blsrs386
- BLSR Bandwidth389
- BLSR Application Example390
- Figure 12-9 Shelf Assembly Layout for Node 0 in Figure392
- Figure 12-10 Shelf Assembly Layout for Nodes 1 to 4 in Figure392
- BLSR Fiber Connections393
- Figure 12-12 Connecting Fiber to a Four-Node, Four-Fiber BLSR394
- Table 12-4 Comparison of the Protection Schemes394
- Figure 12-13 Linear (Point-To-Point) ADM Configuration395
- Linear ADM Configurations395
- Four-Shelf Node Configurations397
- Figure 12-16 Four-Shelf Node Configuration398
- OC-N Speed Upgrades398
- In-Service Topology Upgrades401
CHAPTER 13 Management Network Connectivity407
- IP Scenario 1: CTC and ONS 15454S on same Subnet407
- Figure 13-2 IP Scenario 2: CTC and ONS 15454 Nodes Connected to a Router408
- IP Scenario 3: Using Proxy ARP to Enable an ONS 15454 Gateway409
- IP Scenario 4: Default Gateway on a CTC Computer411
- IP Scenario 5: Using Static Routes to Connect to Lans412
- IP Scenario 6: Using OSPF415
- IP Scenario 7: Provisioning the ONS 15454 SOCKS Proxy Server417
- IP Scenario 8: Dual Gnes on a Subnet423
- IP Scenario 9: IP Addressing with Secure Mode Enabled425
- External Firewalls432
- Open GNE434
- TCP/IP and OSI Networking435
CHAPTER 14 Alarm Monitoring and Management469
- Overview469
Chapter 15 Performance Monitoring486
- Table 15-2 ONS 15454 Line Terminating Equipment487
- Intermediate Path Performance Monitoring487
- Pointer Justification Count Performance Monitoring488
- Table 15-3 Performance Monitoring Parameters490
- Figure 15-2 Monitored Signal Types for the EC1-12 Card496
- Performance Monitoring for Electrical Cards496
Chapter 16 SNMP534
- SNMP External Interface Requirement536
- Table 16-2 IETF Standard Mibs Implemented in the ONS 15454 System537
- SNMP Management Information Bases537
- SNMP Trap Content540
- Table 16-7 Generic IETF Traps541
- Table 16-8 ONS 15454 Snmpv2 Trap Variable Bindings542
- Remote Monitoring548
  - Bit RMON Monitoring over DCC549
  - HC-RMON-MIB Support550
Hardware Specifications557
- A.1.3 Cisco Transport Controller558
- A.1.8 EIA Interface559
- A.1.13 Dimensions560
- Table A-2 Individual Card Power Requirements562
- A.3 General Card Specifications562
  - A.3.2 Temperature564
  - Table A-3 Card Temperature Ranges and Product Names565
- A.4 Common Control Card Specifications566
  - A.4.2 TCC2P Card Specifications567
  - A.4.3 XCVT Card Specifications568
  - A.4.5 XC-XVC-10G Card Specifications569
  - User Data Channel570
  - Data Communications Channel570
  - A.4.7 AEP Specifications570
- A.5 Electrical Card Specifications571
  - A.5.2 DS1-14 and DS1N-14 Card Specifications572
  - A.5.3 DS1/E1-56 Card Specifications574
  - A.5.4 DS3/EC1-48 Card Specifications575
  - A.5.5 DS3-12 and DS3N-12 Card Specifications576
  - A.5.6 Ds3I-N-12 Card Specifications577
  - A.5.7 DS3-12E and DS3N-12E Card Specifications578
  - A.5.8 DS3XM-12 Card Specifications579
  - A.5.9 DS3XM-6 Card Specifications580
  - A.5.10 FILLER Card Specifications581
- A.6.1 OC3 IR 4/STM1 SH 1310 Card Specifications582
- A.6.2 OC3 IR/STM1SH 1310-8 Card Specifications583
- A.6.3 OC12 IR/STM4 SH 1310 Card Specifications584
- A.6.4 OC12 LR/STM4 LH 1310 Card Specifications585
- A.6.5 OC12 LR/STM4 LH 1550 Card Specifications586
- A.6.6 OC12 IR/STM4 SH 1310-4 Specifications587
- A.6.7 OC48 IR 1310 Card Specifications588
- A.6.8 OC48 LR 1550 Card Specifications589
- A.6.10 OC48 LR/STM16 LH as 1550 Card Specifications590
- A.6.11 OC48 ELR/STM 16 EH 100 Ghz Card Specifications591
- A.6.12 OC48 ELR 200 Ghz Card Specifications592
- A.6.13 OC192 SR/STM64 IO 1310 Card Specifications593
- A.6.14 OC192 IR/STM64 SH 1550 Card Specifications594
- A.6.15 OC192 LR/STM64 LH 1550 Card Specifications595
- A.6.16 OC192 LR/STM64 LH ITU 15Xx.XX Card Specifications596
- A.6.17 15454_MRC-12 Card Specifications598
- A.6.18 OC192SR1/STM64IO Short Reach Card Specifications599
- A.6.19 OC192/STM64 any Reach Card Specifications600
- A.7 Ethernet Card Specifications601
  - A.7.3 E1000-2 Card Specifications602
  - A.7.6 CE-100T-8 Card Specifications603
  - A.7.9 ML1000-2 Card Specifications604
- A.8 Storage Access Networking Card Specifications605
Appendix B Administrative and Service State608
- B.3 Service State Transitions609
Appendix C Network Element Default618
- C.2.2 Threshold Defaults619
- C.2.3 Defaults by Card620
- C.3 Node Default Settings690