SecureLogix ETM System User manual

DOC-IN-ETM630-2011-1031
Release 6.3.0
ETM®System
Installation Guide

About SecureLogix Corporation
SecureLogix Corporation enables secure, optimized, and efficiently managed enterprise voice
networks. The company’s ETM®(Enterprise Telephony Management) System hosts a suite of
integrated telecom applications that protect critical network resources from telephony-based attack and
abuse, and simplify voice network management.
SecureLogix®Solutions address real-world problems for real-world voice networks. The flexible ETM
System scales to support any voice environment, no matter how large or small. Engineered with full
hybrid voice technology, the ETM System supports multi-vendor networks containing any mix of
converging VoIP and legacy voice systems.
SecureLogix Solutions are currently securing and managing over two million enterprise phone lines.
The company’s customers span nearly every industry vertical, from regional banks and hospitals, to the
largest military installations and multi-national corporations.
For more information about SecureLogix Corporation and its products and services, visit our website
at http://www.securelogix.com.
SecureLogix Corporation
13750 San Pedro, Suite 820
San Antonio, Texas 78232
Telephone: [phone] (non-sales)
Fax: [phone]
Email: [email protected]
Website: http://www.securelogix.com
Telephone: 1-877-SLC-4HELP
Email: [email protected]
Web Page: http://support.securelogix.com
Telephone: [phone]
Email: [email protected]
Web Page: http://training.securelogix.com
Telephone: [phone] (North America)
Email: [email protected]
Email: [email protected]
Web Page: http://support.securelogix.com

DOC-IN-ETM630-2011-1031
IMPORTANT NOTICE:
This manual, as well as the software and/or Products described in it, is furnished under license with
SecureLogix Corporation ("SecureLogix") and may be used only in accordance with the terms of such
license.
Except as permitted by such license, no part of this publication may be reproduced, stored in a retrieval
system, or transmitted, in any form or by any means, electronic, mechanical, recording, or otherwise,
without prior written permission of SecureLogix.
The content of this manual is subject to change without notice. SecureLogix assumes no responsibility
or liability for any errors or inaccuracies that may be contained herein or to correct the same.
ETM, TeleWatch Secure, TWSA, We See Your Voice, SecureLogix, SecureLogix Corporation, the
ETM Emblem, the SecureLogix Emblem and the SecureLogix Diamond Emblem are trademarks
and/or service marks or registered trademarks and/or service marks of SecureLogix Corporation in the
U.S.A. and other countries. All other trademarks mentioned herein are believed to be trademarks of
their respective owners.
© Copyright 1999-2011 SecureLogix Corporation. All Rights Reserved.
This product is protected by one or more of the following patents: US 6,249,575 B1, US 6,320,948 B1,
US 6,687,353 B1, US 6,718,024 B1, US 6,735,291 B1, US 6,760,420 B2, US 6,760,421 B2,
US 6,879,671 B1, US 7,133,511 B2, US 7,231,027 B2, US 7,440,558 B2, CA 2,354,149,
DE 1,415,459 B1, FR 1,415,459 B1, and GB 1,415,459 B1. U.S. Patents Pending.
ETM is used herein as shorthand notation to refer to the ETM®System.
This product includes:
Data Encryption Standard software developed by Eric Young ([email protected]),
© Copyright 1995 Eric Young. All Rights Reserved. (see DESLicense.txt on ETM software CD)
Style Report software owned and licensed exclusively by InetSoft Technology Corp.
© Copyright 1996-2000 InetSoft Technology Corp. All Rights Reserved.
Software developed by The Apache Software Foundation (http://www.apache.org/)
© Copyright 2000 The Apache Software Foundation. All Rights Reserved.
(See ApacheLicense.txt on ETM software CD.)
Linux kernel software developed by Linus Torvalds and others; and Busy Box software developed by
Bruce Perens and others. Distributed pursuant to the General Public License (GPL). See the Open
Source Code directory on the ETM software CD for related copyrights, licenses, and source code.
GNU C Library software; Distributed pursuant to the Library General Public License (LGPL). See the
Open Source Code directory on the ETM software CD for related copyrights, licenses, and source
code.

Customer Support
for Your ETM®System
1-877-SLC-4HELP
(1-877-752-4435)
[e-mail]
http://support.securelogix.com
SecureLogix Corporation offers telephone,
email, and web-based support.
For details on warranty information
and support contracts, see our web site at
http://support.securelogix.com

Contents

5
Contents
Preface 11
About the ETM®System Documentation.........................................................................11
ETM®System Documentation............................................................................11
Tell Us What You Think ....................................................................................12
Additional Documentation on the Web ..............................................................12
Conventions Used in This Guide........................................................................12
Installation Overview 13
Installation Considerations................................................................................................13
Choosing Locations for ETM®System Components..........................................14
Appliance Location ..............................................................................14
Management Server Location...............................................................14
Report Server Location.........................................................................14
ETM®System Client Location(s).........................................................15
Data Network Considerations.............................................................................15
Types and Amount of IP Data Network Traffic ...................................15
Securing ETM®System IP Data Network Traffic...............................16
Installation Quick Start 17
Understanding the Installation Process .............................................................................17
Installation Process.............................................................................................17
Step 1: Software Installation 21
Introduction.......................................................................................................................21
Minimum System Requirements.........................................................................22
Supported Operating Systems ..............................................................22
Supported DBMSs................................................................................22
Install the ETM®Software................................................................................................22
Software Installation Steps .................................................................................22
About Multiple Application Instances..................................................23
Installing the ETM®Software (Solaris)..............................................................23
Installing the ETM®Software (Windows)..........................................................25
License the Management Server and Report Server...........................................29
Obtain a Software License....................................................................29
Changing the Management Server's TCP/IP Port for Card Connections............30
Create and Configure the ETM®Database........................................................................31
Install and Configure the Oracle DBMS and Database ......................................31

6

Contents
Copy the Oracle Database Driver to the Required Locations .............................31
Special Instructions for a Remote ETM®Server Only .......................................32
Where to Go From Here .....................................................................................32
Database Preparation.........................................................................................................33
Opening the ETM®Database Maintenance Tool................................................34
Providing Database Connection Information......................................................34
Connecting to the Database ................................................................................35
Populating the Database with Tables..................................................................36
Creating a Data Instance.....................................................................................36
Set the Default Data Instance for the Management Server.................................38
Non-owner Database Account..............................................................39
Associate a Data Instance with Management Server............................39
Connecting Through a Firewall ........................................................................................41
Step 1: Gather Required Information..................................................................41
Step 2: On the Management Server Computer ...................................................42
Edit the hosts File for the Management Server.....................................42
Edit the twms.properties File for the Management Server ...................43
Edit the Management Server Configuration File (if applicable) ..........43
Step 3: On the Report Server Host Computer.....................................................44
Edit the hosts File for the Report Server ..............................................45
Edit the twms.properties File for the Report Server.............................45
Edit the Report Server Configuration File............................................46
Step 4: On the ETM®System Console Host Computer......................................47
Step 5: Configure the Firewall............................................................................47
Step 2: Hardware Installation 49
Install the Appliances........................................................................................................49
Install the Digital Trunk Interface/ Controller Card Pairs ..................................50
Mount the Appliances.........................................................................................50
Rack Mounting.....................................................................................51
Wall Mounting .....................................................................................51
Connect the SMDR Cable to the SMDR Provider Card.....................................51
Using a Y-Cable for SMDR .................................................................52
Connect the Ethernet Cable(s) ............................................................................52
Connect Power to the Appliance.........................................................................52
AC Appliances .....................................................................................53
DC Appliances .....................................................................................53
(AAA Only) Connect the Modem Line(s)............................................................53
Configure the Card(s) to Connect to the Management Server............................54
Required Information for Out-of-the-Box Configuration.....................54
Initial Card Configuration ....................................................................54
Licensing Additional Spans..................................................................57
Changing the Span Type ......................................................................57
Specify the Management Server TCP/IP Port.....................................................59
Changing the Enable Mode Timeout..................................................................60
Step 3: ETM®System Configuration 61
Configuring the ETM®System.........................................................................................61

Contents

7
Overview of Terms.............................................................................................61
System Configuration Steps................................................................................61
Start the Applications and Connect to the Server..............................................................63
Start the Client and Server..................................................................................63
How to Start the Applications ..............................................................63
How to Start Multiple Application Instances .......................................64
Define an ETM Server Object in the ETM®System Console ............................66
Log in to the ETM®Server.................................................................................67
Authorize Cards to Connect to the ETM Server.................................................68
Troubleshooting System Communication...........................................................71
Completing Card Configuration........................................................................................72
Creating an Appliance ........................................................................................72
Moving Cards to Appliances................................................................73
Single or Multi-Card Configuration?..................................................................74
Single Card Configuration....................................................................74
Multi-Card Configuration.....................................................................74
Card Configuration Settings ...............................................................................75
Card Software Installation ..................................................................................79
Important Information about Installing Card Software ........................80
Installing Card Software.......................................................................80
SIP Appliances Only ............................................................................82
Configuring Telco Spans ..................................................................................................83
How These Instructions are Organized...............................................................83
Single or Multi-Span Configuration?.................................................................83
Single Span Configuration ...................................................................83
Multi-Span Configuration ....................................................................83
General Tab ........................................................................................................84
Preferences Tab ..................................................................................................85
Firewall Tab........................................................................................................86
Telephony Tab....................................................................................................88
Channel Map Tab ...............................................................................................89
Global Line Settings Tab......................................................................96
H.323 Specific Settings.......................................................................................98
VoIP Tab ..............................................................................................98
Network Tab.......................................................................................100
Specifying PN/URI Precedence..........................................................105
Removing an Unused TDM Span in the ETM®1090 Appliance .......105
E1-Specific Span Settings.................................................................................107
T1-Specific Span Settings.................................................................................109
PRI-Specific Span Settings...............................................................................112
SS7 Signaling Link-Specific Span Settings......................................................115
Fully Associated Signaling Links.......................................................115
Dedicated SS7 Signaling Link Cards .................................................116
Importing Span Configuration..........................................................................118
Installing Dialing Plans.....................................................................................119
Defining Dialing Plans .......................................................................119
Installing Dialing Plans on a Span......................................................119
Configuring Switches......................................................................................................121
Creating a Switch..............................................................................................121
Moving a Span to a Switch...............................................................................122

8

Contents
Configuring a Switch for SMDR......................................................................123
Outbound SMDR for Monitored Channels.........................................123
Call Recorder Protected Extensions ...................................................123
Recording SMDR for Station-side CDR Reporting ...........................123
CDR Parse Files .................................................................................124
Extracting Access Codes ....................................................................124
Supplying SMDR Processing Information.........................................124
Extracting Access Codes from SMDR ...............................................127
Converting Internal Extensions from SMDR into Fully Qualified
Numbers .............................................................................................128
SMDR Extension Conversion Example .............................................129
Protected Extensions ..........................................................................130
Defining NFAS Groups ....................................................................................131
Defining SS7 Groups........................................................................................134
Configuring AAA Services.............................................................................................138
Naming the AAA Service and Adding a Tool Tip Comment...........................138
Enabling Debug Logging for the AAA Service................................................139
Selecting Message Types for Prompts..............................................................140
Setting AAA Authorization Security Preferences ..............................142
Setting Parameters for AAA Server/Span Communication..............................144
Configuring AAA Server Modems...................................................................146
Importing AAA Server Configuration..............................................................147
Configuring the Call Recorder........................................................................................148
Configuring Management Server Settings ......................................................................148
Authorize Remote Client Connections .............................................................148
Associate a Report Server with the ETM®Server ............................................150
Specify the Path to the Oracle Client Tools......................................................152
Importing the City/State Data...........................................................................153
Where to Go From Here ...................................................................................154
Step 4: Telephony Service Cutover 155
Performing Telephony Service Cutover..........................................................................155
Creating a Telephony Service Cutover Plan.....................................................155
Suggested TDM Cutover Plan............................................................156
Connecting the Telco Cable(s) ...........................................................156
Placing Digital Spans Inline ...............................................................158
Post-Cutover Verification.................................................................................158
Verifying ETM®1090/2100/3200 Appliance Operation....................159
Verifying ETM®1012/1024 Appliance Operation.............................160
Bypassing TDM Appliances.............................................................................161
Viewing the Diagnostic Log.............................................................................162
Monitoring Calls in Real Time.........................................................................164
Where to Go From Here..................................................................................................165
Appendix A: Appliance Technical Specifications, Connectors, and Pinouts 167
Knowledge Base .............................................................................................................167
Model 1012/1024 Appliance Specs.................................................................................167
Technical Specifications...................................................................................167

Contents

9
Connectors and Pinouts ....................................................................................169
ETM®1012/1024 Appliance Telephone Network Connector
Pinouts................................................................................................170
ETM®1012/1024 Appliance CPE Connector Pinout.........................171
Model 1050 (AAA) Appliance........................................................................................172
Technical Specifications...................................................................................172
Connectors........................................................................................................173
10/100 Base-T Ethernet Port Pinout...................................................173
ETM®1050 Appliance Serial Port Pinout..........................................174
ETM®1050 Appliance Modem Port Pinout.......................................174
Model 1060 Appliance....................................................................................................175
ETM®1060 Hardware Specifications...............................................................175
Appliance Connectors.......................................................................................176
Model 1090 Appliance....................................................................................................177
Technical Specifications...................................................................................177
ETM®1090 Appliance Connectors and Pinouts...............................................179
Model 2100 and 3200 Appliances...................................................................................180
Technical Specifications...................................................................................180
ETM®2100 and 3200 Appliance Board Sets....................................................183
Controller Card...................................................................................183
Digital Trunk Interface.......................................................................183
ETM®1090, 2100, and 3200 Appliance Connector Pinouts.............................184
10/100 Base-T Ethernet Port Pinout...................................................184
Auxiliary and Console Port Pinout.....................................................184
CO Port Pinout ...................................................................................185
PBX Port Pinout.................................................................................185
Appendix B: Removing and Replacing Appliance Components 187
Removing and Replacing Appliance Components..........................................................187
3200 Appliance Card Insertion Order Important ..............................................187
Basic ESD Precautions .....................................................................................188
Removing and Replacing Cards........................................................................188
Removing a Controller Card...............................................................188
Removing a Digital Trunk Interface...................................................189
Inserting a Digital Trunk Interface .....................................................189
Inserting a Controller Card.................................................................189
Replacing a Controller Card...............................................................190
Removing and Replacing a Power Supply........................................................193
Removing/ Replacing the Fan Unit...................................................................194
Low-Level Maintenance Mode.......................................................................................194
Entering Fail Safe Mode...................................................................................195
Entering Fail Safe Mode from the ASCII Management Interface......195
Entering Fail Safe Mode from a Console Connection........................195
Fail Safe Menu Options....................................................................................196
Appendix C: Span Telco Settings Reference 197
At-a-Glance Reference Table to TDM Span Telco Settings...........................................197

10

Contents
Appendix D: Database Directories and File Names Reference 201
Directories Created by the Database Creation Script......................................................201
Windows Service Name....................................................................................202
File Names and File Locations .........................................................................202
Appendix E: Appliance Status LEDs 203
LED Descriptions............................................................................................................203
Telco Appliance LEDs......................................................................................204
1060 Appliance LEDs.......................................................................................206
Index 207

About the ETM® System Documentation

11
About the ETM®System Documentation
The documentation for the SecureLogix Syslog Alert Tool consists of a user
guide in PDF format and online Help. The electronic PDF is available from
the main menu directory on the menu (Windows
systems), the folder in the ETM System installation
directory (all systems), and the root of the ETM Software installation CD.
The following set of guides is provided with your ETM®System:
ETM®System User Guide—Explains ETM System Concepts and provides
task-oriented instructions for using the ETM System, including a Quick
Start.
ETM®System Installation Guide—Provides task-oriented installation and
configuration instructions and explanations for technicians performing
system setup.
Voice Firewall User Guide—Provides an overview of the Voice Firewall,
examples of and instructions for creating and managing Firewall Policies,
and instructions for viewing results of Policy monitoring and enforcement.
Voice IPS User Guide—Provides an overview of the Voice IPS (Intrusion
Prevention System), examples of and instructions for creating and
managing IPS Policies, and instructions for viewing results of Policy
monitoring and enforcement.
ETM®Call Recorder User Guide—Provides an overview of the Call
Recorder system, instructions for installing, configuring and using the
system, examples of and instructions for creating and managing Call
Recorder Policies, and instructions for accessing and managing the
recordings.
Usage Manager User Guide—Provides task-oriented instructions and
tutorials for producing reports of telecommunications accounting and Policy
enforcement. Includes an appendix describing each of the predefined
Reports and Elements.
ETM®System Administration and Maintenance Guide—Provides task-
oriented instructions for using the ETM System to monitor telco status and
manage ETM System Appliances.
ETM®System
Documentation

12

Preface
ETM®System Technical Reference—Provides technical information and
explanations for system administrators.
ETM®Database Schema—Outlines the schema of the SecureLogix
database, to facilitate use of third-party reporting tools.
ETM®Safety and Regulatory Compliance Information—Provides
statements regarding safety warnings and cautions; includes statements
required for compliance with applicable regulatory and certification
authorities. (Provided as a package insert with new Appliance hardware.)
We welcome your suggestions or comments on the user guides and the
online Help provided with your ETM®System. Please send your
documentation feedback to the following email address:
[email protected]m
SecureLogix Corporation provides corrections and additional
documentation for its products via the SecureLogix Knowledge Base online
at the following web address:
http://support.securelogix.com
The following conventions are used in this guide:
Functions that require two or more mouse clicks to open a dialog box
or make a selection are written using the pipe symbol. For example:
Click View | Implied Rules.
Names of keys on the keyboard are uppercase. For example:
Highlight the field and press DELETE.
If two or more keys must be pressed at the same time, the PLUS SIGN
(+) is used as follows:
Press CTRL+ALT+DELETE.
Bold text indicates GUI labels, menu items and options, literal file
names, and paths. For example:
Click Edit, and then click Preferences.
C:\Program Files\SecureLogix\ETM\TWLicense.txt
Keyboard input is indicated by monospaced font. For example:
In the Name box, type: My report tutorial
Italics indicate web addresses and names of publications.
ETM System components and features are capitalized.
Tell Us What
You Think
Additional
Documentation
on the Web
Conventions
Used in This
Guide

Installation Considerations

13
Installation Considerations
As with any major telecommunications installation, it is necessary to have a
detailed installation plan before actual installation begins. Before you begin
installing the ETM®System, take the time to conduct a thorough site survey
to identify the details of the telecommunications environment the ETM
System is to monitor and the TCP/IP network on which it is to
communicate. This approach helps minimize unforeseen complications
arising from unique characteristics of a site's phone system or TCP/IP
network.
Typically, ETM Appliances install transparently in front of the PBX,
allowing your telecom administrators to control the PBX, while security
administrators enforce security Policy. The diagram below illustrates how a
typical completed ETM 3200 Appliance installation might look. This
example demonstrates several typical characteristics of an ETM System
deployment:
Appliance location adjacent to PBX
Dedicated subnet
Remote ETM System Console on user's desktop machine

14

Installation Overview
ETM Appliances are located inline with your customer-premises telecom
equipment to monitor usage and control access to your telecommunications
network. In a standard deployment, ETM Appliances are typically located
on the telephone network side of the PBX, as close as possible to the PBX.
Appliances can also be deployed on outside lines that bypass your PBX.
You should install the Management Server and Appliances in a secure
location and access to them should be limited. Installing the Management
Server and Appliances on a dedicated subnet can provide network security
as well as protect Station Message Detail Recording (SMDR) and other
transmitted data. Triple DES encryption provides additional security.
Additional Appliance location considerations include:
TDM and analog Spans in the 1012, 1024, 1090, 2100, and 3200 ETM
Appliances should be placed on the trunk side, between the telephone
network and the CPE, as close to the CPE as possible.
ETM 1050 Appliances (AAA) can be located anywhere that has
TCP/IP network connectivity for communication with the Management
Server and one or more standard analog phone lines for its modems.
The 1050 supports only IPv4.
ETM 1060 Call Recording Cache (CRC) Appliances can be located
anywhere that has TCP/IP network connectivity for communication
with the Recording Spans, ETM Server, and Collection Server (if
used). A low-latency network connection is best, since no recording
can occur if the Recording Span cannot connect to the CRC.
ETM 5000 series SIP Appliances and the SIP AXP solution are
installed logically inline on SIP trunks.
The ETM Server should be located in an area with a high level of physical
security, such as a server room, and you should maintain good, industry-
standard security practices for securing the operating system on the
Management Server computer. If you choose not to use DES encryption, it
is recommended that the Management Server communicate with its Spans
on a dedicated subnet within your LAN so that SMDR and other transmitted
data will have a layer of security protection. A dedicated subnet can also be
used so that the ETM System network traffic will not have to compete with
other network traffic.
Each ETM Server is associated with a specific Report Server. The Report
Server is typically installed on the same computer as the ETM Server,
although with proper configuration, it can be installed on a separate
computer.
Choosing
Locations for
ETM®System
Components
Appliance
Location
Management
Server Location
Report Server
Location

Installation Considerations

15
The ETM System can be managed from the ETM System Client installed
on the Management Server host computer and from remote ETM System
Clients. If you will be using remote ETM System Clients:
Ensure that the host computers meet minimum system requirements for
the ETM System Client. Minimum system requirements are provided
on an insert provided with your ETM System and can also be found on
the SecureLogix Knowledge Base at http://support.securelogix.com.
Note the IP addresses or subnet of the Client host computers. The ETM
Server maintains a list of authorized Clients, which you provide during
configuration. Only Clients in this list are allowed to connect. You can
authorize Client connections from specific IP addresses or from one or
more subnet masks.
The distributed client/server architecture of the ETM System enables
centralized control of dispersed telecommunications resources. Each ETM
Appliance Card is equipped with an Ethernet 10/100 Base-T network port
that accepts an RJ-45 connector. ETM System components communicate
via the TCP/IP networking protocol. Both IPv4 and IPv6 are supported.
In an ETM System deployment, IP network traffic exists between:
Management Servers and Appliance components, the ETM
System Console, and the ETM Database. Downloading new
software to multiple Cards simultaneously can create a short burst of
high traffic. Ongoing call events can generate moderate traffic if many
Spans are monitored and if call rates are high. SMDR can generate low
to moderate traffic depending on the number of lines handled by the
PBX and their associated activity.
Spans within an NFAS Group. NFAS Group member Spans
communicate signaling information from the NFAS Group member
with the primary or backup D channel to other Spans in the same NFAS
Group. The traffic level is small to moderate, depending on the level of
call activity.
AAA Services. The AAA Server communicates with its local Spans.
The traffic level is minimal.
Spans within an SS7 Group. SS7 Bearer-to-SS7 Signaling Link
communication generates small to moderate traffic, depending on the
level of call activity.
Usage Manager and the ETM Database. The Report Server
connects to the ETM Database to gather call data for reports. Traffic is
generally low; however, certain reporting activities, such as generating
a report with a large volume of call data, can generate significant
traffic.
ETM®System
Client Location(s)
Data Network
Considerations
Types and
Amount of IP
Data Network
Traffic

16

Installation Overview
Performance Manager and the Management Server. The
Performance Manager connects to the Management Server to monitor
operations, download Policies, and view logs. Traffic between the
Performance Manager and the Management Server is generally low;
however, certain monitoring activities, such as viewing the Policy
Log or Call Monitor during high activity, can generate significant
traffic. Downloading Policies and configuration to multiple
Cards/Spans simultaneously can generate bursts of high traffic, but
these activities are typically infrequent.
The ETM Database Maintenance Tool and the ETM
Database. The ETM Database Maintenance Tool connects to the
ETM Database to populate and maintain the database. Network traffic
is generally low but depends on the amount of data in the database
during maintenance and upon the procedure being performed.
Importing and exporting data instances can generate high traffic if a
large amount of data is present; other tasks create little traffic.
The ETM System generates a low-to-moderate level of IP data network
traffic that could contain sensitive information. The ETM System includes
3DES encryption that secures data transmitted among ETM System
components. For additional security and/or if IP data network traffic is a
concern at your location, consider the following approach when deploying
an ETM System:
Put ETM Appliances in a subnet separate from your main data network.
Placing Appliances in a subnet allows the traffic to be isolated, and
enables varying levels of network security to be implemented,
depending on your organization's needs. For example, switched routers
or hubs can be used to implement basic security measures, while using
a dual-homed (2 NIC Cards) machine for the Management Server or
isolating the subnet behind an IP firewall implements stronger network
security.
Place the ETM Server, Database, and Database Maintenance Tool
within that subnet if possible. Management Server/Card/Database
communication contributes to overall network traffic, and may contain
sensitive data, such as when SMDR is in use or when DTMF digits are
captured throughout call duration.
Securing ETM®
System IP Data
Network Traffic

Understanding the Installation Process

17
Understanding the Installation Process
This installation guide is designed to walk you through all required
procedures in the order in which they are to be performed. Just as an
experienced pilot performs preflight procedures before every flight, so you
should progress through this guide from start to finish to ensure that all
procedures are correctly completed in the proper order, even if you have
installed an ETM®System before. Missing or incorrectly performed steps
can cause difficult-to-troubleshoot problems that can easily be avoided by
following the procedures exactly as written here.
An installation checklist outlining the installation steps is provided below.
The remainder of this guide provides detailed instructions for each step.
IMPORTANT If you are upgrading from a previous version of the ETM
System, contact SecureLogix Customer Support for important upgrade
information before beginning installation.
ETM System installation consists of the following sequence of steps. The
checklist below is provided for you to check off each step of the installation
as it is completed.
Install the ETM Software: ETM Server, Report Server, Database Maintenance Tool, and
ETM System Client Tools. Also install AAA Services for the Voice Firewall, if purchased. (p. 22)
License the ETM Server and, if on a separate computer, the Report Server. (p. 29)
Install, configure, and populate the Oracle DBMS and ETM Database. (p. 31)
Copy the version-specific Oracle database driver (ojdbc14.jar for 10G or ojdbc6.jar for 11G) to
the ETM Server installation folder. Also copy this file to any remote Report Server installation
directory. (p. 31)
If the Database is installed on a different computer from the ETM Server, install the Oracle Client
Tools on the ETM Server computer and copy tnsnames.ora and listener.ora from the ETM
Database computer to the remote ETM Server computer. (Does not apply to 10g XE)
Configure the Management Server with the path to the SQL*Loader database utility. (p. 32)
It is strongly
recommended that you
read the ETM®System
User Guide and the
installation overview
chapter of this guide,
before beginning your
ETM System
installation.
Installation
Process

18

Installation Quick Start
Installation Procedure and Reference Page Number, continued
Configure the ETM applications to communicate through a NAT firewall, if applicable. (p. 41)
Authorize remote ETM System Console(s) to connect to the Management Server, if applicable. (p.
148)
Associate the Management Server with its Report Server, if installed on a different computer.
(p. 150)
If you are installing ETM 5000 series SIP Appliances, refer to the ETM®SIP Appliance Installation
and Configuration Guide for hardware installation instructions. If you are installing the SIP AXP
solution, see the Installation and Configuration Guide for ETM®SIP/AXP Application on Cisco ISR
for instructions Both of these guides can be found in the SecureLogix Knowledge Base. The steps
below apply only to ETM 1000, 2100, 3200, and AAA Appliances.
Install Digital Trunk Interface/Controller Card pairs in the Appliances (ETM 2100/3200 only). (p.
50)
Install the Appliance(s) in the rack. (p. 50)
Connect the SMDR cable, if applicable. (p. 51)
Connect power (AC or DC) to the Appliances. (p. 52)
Using a direct serial connection to each Appliance Card, perform initial network configuration to
enable the Card to communicate with the Management Server. (p. 54)
Change the Management Server's TCP/IP port in the twms.properties file if the default of 4313
causes a conflict with another device or service. (p. 59)
Connect the Ethernet cable(s).
Authorize Appliance Cards to connect to the Management Server. (p. 68)
Complete Card configuration. (p. 72)
Complete Span configuration. (p. 83)
Define and install location-specific Dialing Plans. (p. 119)
Configure the ETM System for SMDR, NFAS, AAA Services for the Voice Firewall, and Call
Recorder Protected Extensions, if applicable. (p.138 and p. 121)
Make a cutover plan. (p. 155)
Connect the telecom cables and execute the cutover plan. (p. 156)
Check line voltage. Contact Customer Support for applicable limits.
View LEDs to verify Appliance operation. (p. 158)
View the Diagnostic Log for errors. (p. 162)
View the Call Monitor to verify that the Spans are processing calls. (p. 164)

Understanding the Installation Process

19
After you have completed all of the procedures listed above:
Refer to the ETM®System User Guide for task-oriented instructions for
using the ETM System, with references to the other guides as
applicable.
Refer to the Voice Firewall User Guide for instructions for using Voice
Firewall Policies and AAA Services.
Refer to the Voice IPS User Guide for instructions for using Voice IPS
Policies and AAA Services.
Refer to the Call Recorder User Guide for instructions for recording
and accessing calls with the Call Recorder.
Refer to the ETM®System Administration and Maintenance Guide for
task-oriented instructions for using the Performance Manager to
monitor telco status and manage ETM Appliances.
Refer to the Usage Manager User Guide for instructions for producing
reports of telecommunications monitoring and Policy enforcement.
Refer to the ETM®System Technical Reference for system backup
information, properties and configuration file settings, Dialing Plan and
SMDR information, ETM Commands, error and debug messages, and
other technical information.

20

Installation Quick Start