E3Switch WAN Monitor Owner's manual

DS3/E3 WAN Monitor with
Ethernet Output for HDLC/PPP
Applications V .4
September 14th, 2011
Operating Information

Legal Preface:
COPYRIGHT & TRADEMARKS
Copyright © 2011 E3Swit h LLC. All Rights Reserved.
All other produ t names mentioned in this manual may be trademarks or registered trademarks of their
respe tive ompanies.
LIMITED WARRANTY
E3Swit h LLC (E3Swit h) guarantees that every unit is free from physi al defe ts in material and
workmanship under normal use for one year from the date of pur hase, when used within the limits set forth
in the Spe ifi ations se tion of this User Guide. If the produ t proves defe tive during the warranty period,
onta t E3Swit h Te hni al Support in order to obtain a return authorization number. When returning a
produ t from outside of the United States of Ameri a, learly state “NOT A SALE. RETURNED FOR
REPAIR” on the ommer ial invoi e; and failing to do so, the ustomer will be responsible for imposed
duties and taxes. All ustomers are responsible for shipping and handling harges for returned items.
IN NO EVENT SHALL E3SWITCH'S LIABILITY EXCEED THE PRICE PAID FOR THE PRODUCT
FROM DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES
WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) RESULTING FROM THE
USE OF THE PRODUCT OR ITS DOCUMENTATION, EVEN IF E3SWITCH HAS BEEN ADVISED
OF, KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES. E3Swit h
makes no warranty or representation, expressed, implied, or statutory, with respe t to its produ ts or the
ontents or use of this do umentation and spe ifi ally dis laims its quality, performan e, mer hantability, or
fitness for any parti ular purpose. E3Swit h reserves the right to revise or update its produ ts or
do umentation without obligation to notify any individual or entity. Please dire t all inquiries to:
E3Switch LLC
80 Coronado Ave
San Carlos, CA 94070
U.S.A.
http://www.ds3switch.com, [e-mail]
TEL: [phone]
FCC STATEMENT
This devi e omplies with Part 15 of the FCC Rules. Operation is subje t to the following two onditions:
1. This devi e may not ause harmful interferen e.
2. This devi e must a ept any interferen e re eived, in luding interferen e that may ause
undesired operation.
Note: This equipment has been tested and found to omply with the limits for a Class A digital devi e,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable prote tion against
harmful interferen e when the equipment is operated in a ommer ial environment. This equipment
generates, uses, and an radiate radio frequen y energy, and if it is not installed and used in a ordan e with
the instru tion manual, it may ause harmful interferen e to radio ommuni ations. Operation of this
equipment in a residential area is likely to ause harmful interferen e, in whi h ase the user will be
required to orre t the interferen e at his own expense.
INDUSTRY CANADA NOTICE
This digital apparatus does not ex eed the Class A limits for radio noise emissions from digital apparatus
set out in the Radio Interferen e Regulations of the Canadian Department of Communi ations.
Le present appareil numerique n'emet pas de bruits radioele triques depassant les limites appli ables aux
appareils numeriques de la lass A pres rites dans le Reglement sur le brouillage radioele trique edi te par
le ministere des Communi ations du Canada
EUROPEAN UNION (EU) STATEMENT
This produ t is in onformity with the prote tion requirements of EU Coun il Dire tive 89/336/EEC on the
approximation of the laws of the Member States relating to ele tromagneti ompatibility. The
manufa turer annot a ept responsibility for any failure to satisfy the prote tion requirements resulting
from a non-re ommended modifi ation of the produ t.
2

This produ t has been tested and found to omply with the limits for Class A Information Te hnology
Equipment a ording to CISPR 22/European Standard EN 55022. The limits for Class A equipment were
derived for ommer ial and industrial environments to provide reasonable prote tion against interferen e
with li ensed ommuni ation equipment.
Attention:
This is a Class A produ t. In a domesti environment this produ t may ause radio interferen e in whi h
ase the user may be required to take adequate measures.
International Ele trote hni al Commission (IEC) Statement
3

TABLE OF CONTENTS
CHAPTER 1: DESCRIPTION AND REQUIREMENTS ..................................................................................................... 6
CHAPTER 2: QUICK SET-UP ................................................................................................................................. 6
CHAPTER 3: FRONT PANEL .................................................................................................................................. 8
FRONT PANEL INDICATORS ...............................................................................................................................8
CHAPTER 4: REMOTE MANAGEMENT HTTP AND SNMP ..................................................................................... 8
UNIT'S IP/MAC ADDRESS ...............................................................................................................................8
Automati Link-Lo al IP Address.........................................................................................................9
Initial Numeri IP Address....................................................................................................................9
Unknown IP Address Re overy............................................................................................................9
MANAGEMENT PASSWORDS ...............................................................................................................................9
SECURITY .....................................................................................................................................................10
HTTP Interfa e Se urity.....................................................................................................................10
SNMP Se urity....................................................................................................................................10
HTTP MANAGEMENT ..................................................................................................................................10
Event Log File.....................................................................................................................................11
Resetting..............................................................................................................................................11
SNMP ........................................................................................................................................................11
UPGRADING FIRMWARE ..................................................................................................................................11
FEATURE ACTIVATION/UPGRADE .....................................................................................................................11
CHAPTER : OPERATING MODES AND CONFIGURATION ........................................................................................ 12
TELECOM .....................................................................................................................................................12
Cir uit Clo k Speed............................................................................................................................12
DS3 Cir uit ID PMDL........................................................................................................................12
PORT TO PORT PACKET FLOW .........................................................................................................................12
LAN-to-LAN.......................................................................................................................................12
Loopba k.............................................................................................................................................12
LAN PORT SETTINGS ....................................................................................................................................12
LAN Port Speed..................................................................................................................................13
Autonegotiation Problems...................................................................................................................13
SFP Se ond LAN Port........................................................................................................................13
Dedi ated Management/Data LAN Ports............................................................................................13
VLAN ........................................................................................................................................................14
CHAPTER 6: INTEROPERABILITY ......................................................................................................................... 14
LAN ..........................................................................................................................................................14
Autonegotiation problems...................................................................................................................14
SFP LAN Port 1..................................................................................................................................14
Pause Frames.......................................................................................................................................14
TELECOM .....................................................................................................................................................14
CHAPTER 7: TELECOM CONNECTIONS ................................................................................................................. 1
FRAMING AND PHYSICAL LINK ........................................................................................................................15
TELECOM CABLING ........................................................................................................................................15
CHAPTER 8: LAN CONNECTIONS AND PERFORMANCE ......................................................................................... 1
LAN PORTS ................................................................................................................................................15
AUTONEGOTIATION ........................................................................................................................................15
LAN CABLING .............................................................................................................................................16
CHAPTER 9: LAN PACKET FORMAT FOR WAN DATA ENCAPSULATION .............................................................. 16
HEADER FORMAT FOR WAN DATA ENCAPSULATION .........................................................................................16
MTU ..........................................................................................................................................................16
TRANSPORT LAYER ........................................................................................................................................16
CHAPTER 10: TROUBLESHOOTING ....................................................................................................................... 16
GENERAL .....................................................................................................................................................16
4

PERFORMANCE ..............................................................................................................................................17
INTEROPERABILITY .........................................................................................................................................17
PINGING .......................................................................................................................................................17
STEP-BY-STEP DIAGNOSIS ..............................................................................................................................17
CHAPTER 11: THIRD PARTY COPYRIGHT NOTICES .............................................................................................. 18
ECOS LICENSE ..............................................................................................................................................18
THE FREEBSD COPYRIGHT ...........................................................................................................................18
THE NET-SNMP COPYRIGHT ........................................................................................................................18
THE APACHE LICENSE ...................................................................................................................................20
THE SHA2 COPYRIGHT .................................................................................................................................21
THE BZIP2 LICENSE ....................................................................................................................................21
THE ATHTTPD LICENSE ..............................................................................................................................21
CHAPTER 12: TECHNICAL SPECIFICATIONS AND STANDARDS ................................................................................. 22
5

Chapter 1: Des ription and Requirements
Chapter 1: Description and Re uirements
The E3Swit h WAN Monitor des ribed herein allows HDLC/PPP pa kets on a T3/DS3/E3 WAN to be
easily monitored/re orded via output to an Ethernet port. Inline apability alleviates the ne essity for
additional WAN tap-hardware. Dual WAN inputs allow monitoring of WAN traffi in ea h dire tion.
Fanless operation and extremely low part- ount design allows use with greater reliability and in harsh
environments. All units are ra k mountable. NEBS Level 3 multi ard hassis with redundant power are
available.
Single or dual LAN output is available in a variety of RJ45 or SFP opper or opti al formats at either
100Mbit or GbE/GigE rates depending upon software options pur hased. Jumbo 9600-byte frame size is
available. If pur hased, the se ond LAN port is available for out-of-band management. An appropriate
SFP trans eiver must be supplied if the se ond SFP LAN port is to be used.
Management fun tions in lude both omprehensive SNMP statisti s with link up/down and DS3 FEAC
notifi ations as well as one- li k HTTP, user-friendly, olor- oded monitoring of link operational status and
bit-error rate. Both HTTP and SNMP management of the Monitor is possible either in-band through the
same LAN port as data being re orded or out-of-band if the software option to enable the se ond LAN port
has been pur hased.
The WAN ir uit being monitored may ontain CRC-16/32 or no CRC en oding. The WAN ir uit may be
framed or unframed, but must ontain no T1/E1 hannels (un hannelized). X43 s ramble de oding is
available..
LAN output is typi ally sent to a re ording devi e. LAN pa ket format is spe ified by the user at the layer-
2 level. MAC header, VLAN, Ethertype, MPLS and pseudowire ontrol word are all manually spe ified in
the unit's onfiguration settings.
For ease of installation, the Monitor does not require a onfiguration setup and will typi ally work
immediately upon onne tion of LAN and tele om ables. Some modifi ation of default IP management
addresses or header output for data re ording would typi ally be desired.
The hot-swappable Monitor ard may be pur hased in standalone or multi- ard hassis and draws a minimal
6 watts of power. Standalone, single units ship in high-reliability, fan-free 1U hassis with ra kmount
bra kets and are available in a 100-240VAC or a ±35-75 volt DC models. NEBS-III, redundant-power
multi ard hassis are available in 6-slot/1U and 20-slot/3U versions.
Chapter 2: Quick Set-up
Atta h the WAN Monitor to a power sour e. The front panel lights should illuminate. Green is normal;
orange indi ates an error.
Depending upon the LAN options pur hased, HTTP/SNMP management of the unit may be through either
RJ-45 LAN Port 2 or through the SFP LAN port. Likewise, WAN data to be re orded may be output
through either LAN port. These LAN port assignments are found in the HTTP settings web s reen of the
unit. Typi ally, the default onfiguration has the RJ-45 port assigned to the data re ording devi e and the
management interfa e through the SFP port if pur hased or the same RJ-45 port if not.
Atta h an Ethernet UTP5 able from your LAN equipment to the desired LAN port. The Monitor an
perform automati MDIX ross-over vs. straight-through able adaptation. The monitor's LAN light will
hange from orange to green if a properly negotiated link has been established. The network equipment
attached to the LAN port of the Monitor should be set for autonegotiation mode in order to allow the
Monitor to negotiate a 100Mbit full-duplex connection. Disabling autonegotiation or using old LAN
6

Chapter 2: Qui k Set-up
equipment may result in the atta hed LAN equipment onfiguring to half-duplex mode, resulting in CRC
errors and pa ket loss. Refer to the interoperability se tion of this do ument for more information
Use only 75-ohm oaxial ables to atta h the WAN Monitor to the DS3/E3 ir uit. The monitor is atta hed
either inline with ea h WAN ir uit able or, alternatively, to a WAN tap. For inline use, the WAN able
in one dire tion should be atta hed to the “In” WAN Port 1 and ontinues to the remote lo ation via the
“Out” WAN Port 1. The other ir uit dire tion omes to the “In” WAN Port 2 from the remote lo ation,
and pro eeds via the “Out” WAN Port 2 to the the lo al equipment. For use with a WAN tap, the “Out”
ports are not utilized and may be left open.
On e the monitor is re eiving a valid TDM signal without alarms, the DS3/E3 Port LED will hange from
orange to green.
Refer to the management hapter of this manual if HTTP or SNMP operating statisti s are desired or to
hange the default administrator password or administrative onta t/lo ation information.
Further HTTP management of the monitor via LAN is required in the following situations:
●if using long (>68m) DS3 oaxial ables
●to set CRC and s rambling to mat h the WAN ir uit being monitored
●to hange the default administrator password. This is suggested, as onfiguration annot be
modified after 5 minutes of any power y le if the default password has not been hanged
●to hange the management IP address of the unit
●to set detailed LAN pa ket header format for pa kets from the WAN
There is no further onfiguration or setup required for the Monitor.
7

Chapter 3: Front Panel
Chapter 3: Front Panel
Front Panel Indicators
All Indicators: Green indicates normal operation.
Orange indicates an error condition.
Black indicates a disabled port.
DS3/E3 1/2: Green if the unit is receiving a valid WAN signal with no alarm conditions.
Flashes black each time a packet is received on this port
Orange steady indicates loss of the incoming WAN AMI signal.
Flashes orange/green if incoming signal exists, but an alarm condition is being received.
BER: Green if OK.
Orange flash for each BPV bit error.
Orange steady for absence of DS3/E3 receive signal, loss of frame lock onto receive bit-stream,
drive-level fault on transmit cable, or excessive receive bit errors.
Note: In a dual DS3/E3 unit, the BER will reflect the status of the operational link if one fails.
LAN1/2: Green when a properly negotiated 100/1000BaseTX Full-Duplex or SFP LAN connection exists.
Flashes black each time a packet is received on this port.
Orange indicates no valid connection.
Chapter 4: Remote Management HTTP and SNMP
Monitors ontain both an HTTP management interfa e, whi h may be a essed via a web browser, and an
SNMPv2 agent through either LAN port (if se ond SFP LAN port has been pur hased/enabled)
Unit's IP/MAC Address
The sour e Ethernet MAC address of E3Swit h Monitors is 00:50:C2:6F:xx:xx. The Monitor's urrent IP
and MAC addresses are always both shown at the HTTP management s reen.
The Monitor's management interfa e an be initially onta ted at either its automati link-lo al IP address
e3swit h.lo al as des ribed below or at its initial numeri IP address des ribed below. Note that after initial
setup, an operator may have hanged the onta t IP address to a new value and the initial addresses below
may not work. Prior to operator re onfiguration the unit will respond to HTTP, SNMP and ping requests to
its initial IP address.
For initial ommuni ation with the Monitor, it may be ne essary to set the network address of the host port
ommuni ating with the Monitor to 169.254.xxx.xxx with subnet mask 255.255.0.0. Se urity proto ols
advise routers not to forward pa kets with these link-lo al IP addresses, so a dire t onne tion is advised.
On e initial onta t has been established with the HTTP management interfa e of the Monitor, the
Monitor's IP address an be set to a new, stati value if desired.
If a unit's operator- onfigured IP address is lost or forgotten, it an be re overed as des ribed later in this
hapter.
8

Chapter 4: Remote Management HTTP and SNMP
Other than the e3swit h.lo al addresses des ribed below, all IP addresses used within the Monitor's
management interfa e must be in xxx.xxx.xxx.xxx numeri format rather than a human-readable DNS-
resolvable hostname.
Automatic Link-Local IP Address
E3Swit h produ ts are shipped with an initial IP address that onforms to re ent zero- onfiguration link-
lo al standards. This allows multiple E3Swit h Monitors on the same IP network to initialize with unique
IP addresses without onfli t and allows simple ping/HTTP/SNMP a ess to the Monitors using hostnames
e3swit h.lo al or e3swit h-2.lo al,... provided that, free, ZeroConf mDNS software has been installed on
the ma hine attempting to ommuni ate with the Monitor. Do not prefix www. prior to e3swit h.lo al.
www.e3swit h.lo al will not work.
If multiple WAN Monitors are powered-up on a onne ted LAN, they will negotiate between themselves to
determine whi h is assigned name e3swit h.lo al and whi h re eives e3swit h-2.lo al and so on. Sin e the
assigned name will not ne essarily be fixed to a parti ular unit after power y les, the system manager will
probably want to use/set the monitor's numeri IP address sometime during or after initial installation.
Web des riptions are available for ZeroConf mDNS and Link-lo al IPV4LL ip addresses. Free ZeroConf
software su h as Bonjour for Windows or Avahi is available for Windows/Linux/Unix ma hines.
Initial Numeric IP Address
The Monitor an also be onta ted at its initial default IP numeri address whi h always takes the form
169.254.aa.bbb. Units typi ally have the initial IP address listed on top of the hassis or an be initially
onta ted at the IP address above where aa.bbb mat hes the serial number listed on the front label.
●
The Monitor's urrent IP and MAC addresses are both shown at the HTTP management s reen.
Unknown IP Address Recovery
The following methods may be used to determine a Monitor's IP address if lost or forgotten. Note that on e
determined, management ommuni ation with the unit may only be possible from a host onfigured to the
same IP subnet address if the unit's default router address is invalid.
To manually dis over a unit's IP address, unplug all LAN and BNC ables from the Monitor and power
y le the unit. 30 se onds after powerup, the Monitor will begin blinking out its IP address on the leftmost
LED. Ea h digit is ounted up as an orange blink with a pause between digits and a short blink for a 0. A
de imal in the IP address is indi ated with a green blink. For example, <orange><orange><pause><short-
orange><pause><green>... would be an IP address that begins “20.”
For those with a ess to pa ket sniffers, upon power-up, the Monitor will broad ast several gratuitous ARP
pa kets on its network ports whi h an be examined with a sniffer or pa ket monitoring software to
determine a unit's IP address. The sour e Ethernet MAC address of su h pa kets and E3Swit h Monitors is
00:50:C2:6F:xx:xx. T pdump or Wireshark are two readily available software pa kages to examine
network pa kets.
Additionally, examination of the MAC address table of an atta hed LAN swit h or router may provide the
IP address if the E3Swit h MAC address prefix (00:50:C2:6F:xx:xx) an be lo ated.
Management Passwords
The HTTP management statisti s page is initially a essible without a password. The HTTP settings page
is initially modifiable within the first several minutes after powerup with username admin and no password.
If the unit has not had its default password hanged, after several minutes the settings page will be lo ked
for se urity reasons. It is desirable to hange the default password of the unit. For se urity reasons,
hanging the default password of the unit must be done within the first several minutes of any powerup. If
9

Chapter 4: Remote Management HTTP and SNMP
the HTTP management password is lost or forgotten, it may be reset by a essing the HTTP management
settings within the first minute after powerup and with no BNC ables atta hed to the unit.
SNMP statisti s may initially be a essed using the read-only ommunity name public. Write- ommunity
names and variable a ess authorization may be set through the HTTP management interfa e.
Security
Please also refer to the password se tion above.
HTTP Interface Security
A ess to the HTTP management interfa e statisti s and settings pages an be sele tively limited to users
knowing the HTTP management password, whi h is transmitted se urely on the network using MD5
en oding. New values of management settings, or modifi ations of the administrator password are not
en rypted and are visible to users monitoring network pa kets, as is statisti al data requested by an MD5
authorized user or any information visible on a HTTP page.
When logging out from any secure webpage, the browser window should always be closed! Browsers
typi ally ontinue to send administrator redentials ontinuously even after apparent logout.
SNMP Security
The Monitor implements SNMPv2 , whi h is inherently an inse ure proto ol; however, the Monitor
enhan es se urity by implementing view-based a ess management (VACM), whi h an restri t read or
write a ess to spe ifi management settings and statisti s. When shipped, the Monitor allows read a ess
to “safe” SNMP statisti s and prohibits read and write a ess to statisti s and settings whi h ould allow
determination of network topology or interfere with normal link traffi . The VACM onfiguration an be
updated through the HTTP management interfa e to meet the user's needs, and most SNMP variables an
also be set through the HTTP management interfa e in a more se ure manner than SNMP allows.
– SNMP VACM Se urity Warning –
As shipped, the default “safe_ro_view” is se ure but not private.
View based a ess model VACM for SNMPv2 provides good restri tion
of a ess to only spe ified statisti s but no data priva y and
minimal user authenti ation. When a spe ifi variable is enabled
for reading or writing, from a se urity perspe tive it should
be onsidered either publi for reading or publi for writing.
Alternatively, most onfiguration parameters an be set through
the HTTP password-prote ted interfa e whi h is se ure.
Viewing snmpd. onf exposes it and ommunity names to visibility by
3rd party network sniffers. All SNMPv2 data on the network
is visible. All ommunity names an be "guessed" and, when used,
be ome visible to sniffers. Sour e IP addresses of requests
an be forged. Enabling a write ommunity should be onsidered
inse ure with respe t to the spe ifi view variables enabled.
Variables in the groups: interfa e, ds3, dot3 & mau, ontrol the
link datapath; allowing write a ess allows disabling the link.
Spe ifi variables disabled for all write users are se ure.
Spe ifi statisti s disabled for all read users are invisible
and se ure.
HTTP Management
The Monitor ontains a omprehensive, user-friendly HTTP management interfa e whi h allows a manager
to monitor bit-error-rates on the DS3/E3 link, lost pa kets, and user-friendly status messages at a single,
10