Spectracom SecureSync User Reference Manual
SecureSync
Time and Frequency
Synchronization System
®
User Reference Guide
Document Part No.: 1200-5000-0050
Revision: 26
Date: 25-May-2018
spectracom.com
© 2018 Spectracom. All rights reserved.
The information in this document has been carefully reviewed and is
believed to be accurate and up-to-date. Spectracom assumes no responsibility for any errors or omissions that may be contained in this document,
and makes no commitment to keep current the information in this manual, or
to notify any person or organization of updates. This User Reference Guide
is subject to change without notice. For the most current version of this documentation, please see our web site at spectracom.com.
Spectracom reserves the right to make changes to the product described in
this document at any time and without notice. Any software that may be
provided with the product described in this document is furnished under a
license agreement or nondisclosure agreement. The software may be used
or copied only in accordance with the terms of those agreements.
No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or any means electronic or mechanical,
including photocopying and recording for any purpose other than the purchaser's personal use without the written permission of Spectracom
Other products and companies referred to herein are trademarks or
registered trademarks of their respective companies or mark holders.
Orolia USA, Inc. dba Spectracom
• 1565 Jefferson Road, Suite 460, Rochester, NY 14623 USA
• Room 208,No. 3 Zhong Guan Village South Road, Hai Dian District, Beijing 100081, China
• 3, Avenue du Canada, 91974 LesUlis Cedex, France
Do you have questions or comments regarding this User Reference Guide?
è E-mail:
Warranty Information
For a copy of Spectracom's Limited Warranty policy, see the Spectracom
website: http://spectracom.com/support/warranty-information.
SecureSync User Reference Guide I
Blank page.
II SecureSync User Reference Guide
CHAPTER 1
Product Description
1.1 Getting Started
1.2 SecureSync Introduction
1.2.1 SecureSync's Inputs and Outputs
1.3 SecureSync Front Panel
1.3.1 Front Panel Keypad, and Display
1.3.1.1 Using the Keypad
1.3.1.2 Navigating the Front Panel Display
1.3.2 Status LEDs
1.4 Unit Rear Panel
1.5 Option Cards
1.5.1 Option Cards Overview
1.5.2 Option Card Identification
1.5.2.1 Option Card Identification by ID/Part Number
1.5.3 Option Card Connectors
1.6 The SecureSync Web UI
1.6.1 The Web UI HOME Screen
1.6.2 The INTERFACES Menu
1.6.3 The Configuration MANAGEMENT Menu
1.6.4 The TOOLS Menu
1
2
2
3
3
4
4
4
6
7
8
10
13
13
16
18
18
19
20
21
CONTENTS
1.7 Specifications
1.7.1 Input Power
1.7.1.1 Fuses
1.7.2 GNSS Receiver
1.7.3 RS-232 Serial Port (Front Panel)
1.7.4 10/100 Ethernet Port
1.7.5 Protocols Supported
1.7.6 1PPS Output
1.7.7 10MHz Output
1.7.7.1 10 MHz Output — Oscillator Phase Noise (dBc/Hz)
SecureSync User Reference Guide • TABLE OF CONTENTS
22
22
22
23
23
23
24
24
25
26
III
1.7.8 Mechanical and Environmental Specifications
26
1.8 Regulatory Compliance
CHAPTER 2
SETUP
2.1 Overview
2.1.1 Main Installation Steps
2.2 Unpacking and Inventory
2.3 Required Tools and Parts
2.3.1 Required GNSS Antenna Components
2.4 SAFETY
2.4.1 Safety: Symbols Used
2.4.2 SAFETY: Before You Begin Installation
2.4.3 SAFETY: User Responsibilities
2.4.4 SAFETY: Other Tips
2.5 Mounting the Unit
2.5.1 Rack Mounting
2.6 Connecting Supply Power
2.6.1 Power Source Selection
2.6.2 Using AC Input Power
2.6.3 Using DC Input Power
27
29
30
30
31
32
32
33
33
33
36
36
36
36
38
38
38
39
IV
2.7 Connecting the GNSS Input
2.8 Connecting Network Cables
2.9 Connecting Inputs and Outputs
2.10 Powering Up the Unit
2.11 Setting up an IP Address
2.11.1 Dynamic vs. Static IP Address
2.11.2 Assigning a Static IP Address
2.11.2.1 Assigning a New Static IP Address
2.11.2.2 Setting Up an IP Address via the Front Panel
2.11.2.3 Setting Up a Static IP Address via a DHCP Network
2.11.2.4 Setting Up an IP Address via the Serial Port
2.11.2.5 Setting up a Static IP Address via Ethernet Cable
2.11.3 Subnet Mask Values
SecureSync User Reference Guide • TABLE OF CONTENTS
41
42
43
43
44
45
45
46
48
50
51
52
53
2.12 Accessing the WebUI
53
2.13 Configuring Network Settings
2.13.1 General Network Settings
2.13.2 Network Ports
2.13.3 Network Services
2.13.4 Static Routes
2.13.5 Access Rules
2.13.6 HTTPS
2.13.6.1 Accessing the HTTPS Setup Window
2.13.6.2 About HTTPS
2.13.6.3 Supported Certificate Formats
2.13.6.4 Creating an HTTPS Certificate Request
2.13.6.5 Adding HTTPS Subject Alternative Names
2.13.6.6 Requesting an HTTPS Certificate
2.13.6.7 Uploading an X.509 PEM Certificate Text
2.13.6.8 Uploading an HTTPS Certificate File
2.13.7 SSH
2.13.8 SNMP
2.13.8.1 SNMP V1/V2c
2.13.8.2 SNMP V3
2.13.8.3 SNMP Traps
2.13.9 System Time Message
2.13.9.1 System Time Message Format
55
56
57
60
62
64
65
65
67
67
68
71
73
74
75
76
84
88
90
91
93
94
2.14 Configuring NTP
2.14.1 Checklist NTP Configuration
2.14.2 The NTP Setup Screen
2.14.3 Dis-/Enabling NTP
2.14.4 Viewing NTP Clients
2.14.5 Restoring the Default NTP Configuration
2.14.6 NTP Output Timescale
2.14.7 NTP Reference Configuration
2.14.7.1 The NTP Stratum Model
2.14.7.2 Configuring "NTP Stratum 1" Operation
2.14.7.3 Configuring "NTP Stratum Synchronization"
2.14.8 NTP Servers and Peers
2.14.8.1 The NTP Servers and NTP Peers Panels
2.14.8.2 NTP Servers: Adding, Configuring, Removing
SecureSync User Reference Guide • TABLE OF CONTENTS
95
95
95
98
99
100
100
102
102
102
103
104
106
107
V
2.14.8.3 NTP Peers: Adding, Configuring, Removing
2.14.9 NTP Authentication
2.14.9.1 NTP Autokey
2.14.9.2 NTP: Symmetric Keys (MD5)
2.14.10 NTP Access Restrictions
2.14.11 Enabling/Disabling NTP Broadcasting
2.14.12 NTP over Anycast
2.14.12.1 Configuring NTP over Anycast (General Settings)
2.14.12.2 Configuring NTP over Anycast (OSPF IPv4)
2.14.12.3 Configuring NTP over Anycast (OSPF IPv6)
2.14.12.4 Configuring NTP over Anycast (BGP)
2.14.12.5 Configuring Anycast via NTP Expert Mode
2.14.12.6 Testing NTP over Anycast
2.14.13 NTP Orphan Mode
2.14.14 Host Disciplining
2.14.14.1 Enabling Host Disciplining
2.14.15 NTP Expert Mode
2.14.16 Spectracom Technical Support for NTP
109
111
111
117
119
121
122
123
124
125
126
127
130
130
131
132
132
135
2.15 Configuring Input References
2.16 Configuring Outputs
2.16.1 The Outputs Screen
2.16.2 The 1PPS and 10MHz Outputs
2.16.2.1 Configuring a 1PPS Output
2.16.2.2 Configuring the 10 MHz Output
2.16.3 Configuring Optional Outputs
2.16.4 Network Ports
2.16.5 Signature Control
CHAPTER 3
Managing Time
3.1 The Time Management Screen
3.2 System Time
3.2.1 System Time
3.2.1.1 Configuring the System Time
3.2.1.2 Timescales
3.2.1.3 Manually Setting the Time
3.2.1.4 Using Battery Backed Time on Startup
136
136
137
138
140
140
141
141
141
145
146
147
148
148
149
150
152
VI
SecureSync User Reference Guide • TABLE OF CONTENTS
3.2.2 Timescale Offset(s)
3.2.2.1 Configuring a Timescale Offset
3.2.3 Leap Seconds
3.2.3.1 Reasons for a Leap Second Correction
3.2.3.2 Leap Second Alert Notification
3.2.3.3 Leap Second Correction Sequence
3.2.3.4 Configuring a Leap Second
3.2.4 Local Clock(s), DST
3.2.4.1 Adding a Local Clock
3.2.4.2 DST Examples
3.2.4.3 DST and UTC, GMT
154
154
155
155
156
156
157
158
158
160
161
3.3 Managing References
3.3.1 Input Reference Priorities
3.3.1.1 Configuring Input Reference Priorities
3.3.1.2 The "Local System" Reference
3.3.1.3 The "User/User" Reference
3.3.1.4 Reference Priorities: EXAMPLES
3.3.2 Reference Qualification and Validation
3.3.2.1 Reference Monitoring: Phase
3.3.2.2 BroadShield
3.3.3 The GNSS Reference
3.3.3.1 Reviewing the GNSS Reference Status
3.3.3.2 Determining Your GNSS Receiver Model
3.3.3.3 Selecting a GNSS Receiver Mode
3.3.3.4 Setting GNSS Receiver Dynamics
3.3.3.5 Performing a GNSS Receiver Survey
3.3.3.6 GNSS Receiver Offset
3.3.3.7 Resetting the GNSS Receiver
3.3.3.8 Deleting the GNSS Receiver Position
3.3.3.9 Manually Setting the GNSS Position
3.3.3.10 GNSS Constellations
3.3.3.11 A-GPS
161
161
163
166
167
169
172
172
174
182
183
187
189
192
194
195
196
197
198
201
205
3.4 Holdover Mode
3.5 Managing the Oscillator
3.5.1 Oscillator Types
3.5.2 Configuring the Oscillator
3.5.2.1 Time Figure of Merit (TFOM)
SecureSync User Reference Guide • TABLE OF CONTENTS
210
213
214
215
217
VII
3.5.3 Monitoring the Oscillator
3.5.4 Oscillator Logs
218
221
3.6 Managing TimeKeeper
3.6.1 What is TimeKeeper?
3.6.1.1 What can TimeKeeper do for me?
3.6.1.2 Using TimeKeeper – First Steps
3.6.2 Has TimeKeeper been activated?
3.6.3 Configuring a TimeKeeper PTP Master
3.6.4 Configuring TimeKeeper PTP Slaves
3.6.5 Configuring TimeKeeper as an NTP Time Server
3.6.6 En-/Disabling TimeKeeper
3.6.7 Status Monitoring with TimeKeeper
3.6.7.1 Enabling Status Monitoring
3.6.7.2 TKL "Status" Tab
3.6.7.3 TKL "Timing Quality" Tab
3.6.7.4 TKL "Time Map" Tab
CHAPTER 4
System Administration
4.1 Powering Up/Shutting Down
4.1.1 Powering Up the Unit
4.1.2 Shutting Down the Unit
4.1.3 Issuing the HALT Command Before Removing Power
4.1.4 Rebooting the System
221
222
222
222
223
224
226
229
230
231
231
232
232
233
235
236
236
237
237
238
VIII
4.2 Notifications
4.2.1 Configuring Notifications
4.2.2 Notification Event Types
4.2.2.1 Timing Tab: Events
4.2.2.2 GPS Tab: Events
4.2.2.3 System Tab: Events
4.2.3 Configuring GPS Notification Alarm Thresholds
4.2.4 Setting Up SNMP Notifications
4.2.5 Setting Up Email Notifications
4.3 Managing Users and Security
4.3.1 Managing User Accounts
4.3.1.1 Types of Accounts
SecureSync User Reference Guide • TABLE OF CONTENTS
239
240
242
242
242
243
243
244
245
247
247
247
4.3.1.2 About "user" Account Permissions
4.3.1.3 Rules for Usernames
4.3.1.4 Adding/Deleting/Changing User Accounts
4.3.2 Managing Passwords
4.3.2.1 Configuring Password Policies
4.3.2.2 The Administrator Password
4.3.2.3 Lost Password
4.3.3 LDAP Authentication
4.3.4 RADIUS Authentication
4.3.4.1 Enabling/Disabling RADIUS
4.3.4.2 Adding/Removing a RADIUS Server
4.3.5 TACACS+ Authentication
4.3.5.1 Enabling/Disabling TACACS+
4.3.5.2 Adding/Removing a TACACS+ Server
4.3.6 HTTPS Security Levels
4.3.7 Unlocking the Keypad via Keypad
4.3.8 If a Secure Unit Becomes Inaccessible
247
249
249
251
252
252
253
256
262
262
263
265
265
265
266
268
268
4.4 Miscellanous Typical Configuration Tasks
4.4.1 Web UI Timeout
4.4.2 Configuring the Front Panel
4.4.3 Displaying Local Time
4.4.4 Creating a Login Banner
4.4.5 Show Clock
4.4.6 Product Registration
4.4.7 Synchronizing Network PCs
4.4.8 Selecting the UI Language
4.5 Quality Management
4.5.1 System Monitoring
4.5.1.1 Status Monitoring via Front Panel
4.5.1.2 Status Monitoring via the Web UI
4.5.1.3 Status Monitoring of Input References
4.5.1.4 Reference Monitoring: Phase
4.5.1.5 Ethernet Monitoring
4.5.1.6 Outputs Status Monitoring
4.5.1.7 Monitoring the Oscillator
4.5.1.8 Monitoring the Status of Option Cards
4.5.1.9 NTP Status Monitoring
268
268
269
273
273
274
275
275
275
276
276
276
276
279
281
283
284
287
290
292
SecureSync User Reference Guide • TABLE OF CONTENTS
IX
4.5.1.10 Temperature Management
4.5.2 Logs
4.5.2.1 Types of Logs
4.5.2.2 Local and Remote Logs
4.5.2.3 The Logs Screen
4.5.2.4 Displaying Individual Logs
4.5.2.5 Saving and Downloading Logs
4.5.2.6 Configuring Logs
4.5.2.7 Setting up a Remote Log Server
4.5.2.8 Restoring Log Configurations
4.5.2.9 Clearing All Logs
4.5.2.10 Clearing Selected Logs
297
303
304
308
308
310
311
313
315
317
318
318
4.6 Updates and Licenses
4.6.1 Software Updates
4.6.2 Applying a License File
4.7 Resetting the Unit to Factory Configuration
4.7.1 Resetting All Configurations to their Factory Defaults
4.7.2 Backing-up and Restoring Configuration Files
4.7.2.1 Accessing the System Configuration Screen
4.7.2.2 Saving the System Configuration Files
4.7.2.3 Uploading Configuration Files
4.7.2.4 Restoring the System Configuration
4.7.2.5 Restoring the Factory Defaults
4.7.3 Cleaning the Configuration Files and Halting the System
4.7.4 Default and Recommended Configurations
4.7.5 Sanitizing the Unit
4.7.5.1 Physically Removing the CF Card
4.7.5.2 Cleaning/Restoring
4.7.5.3 Removing Other Files From the CF Card
4.7.5.4 Further Reading
APPENDIX
319
319
321
322
322
323
323
325
326
327
328
328
328
329
330
330
331
331
Appendix
5.1 Troubleshooting
5.1.1 Troubleshooting Using the Status LEDs
5.1.2 Minor and Major Alarms
5.1.3 Troubleshooting: System Configuration
X
SecureSync User Reference Guide • TABLE OF CONTENTS
333
334
334
335
336
5.1.3.1 System Troubleshooting: Browser Support
5.1.4 Troubleshooting – Unable to Open Web UI
5.1.5 Troubleshooting via Web UI Status Page
5.1.6 Troubleshooting GNSS Reception
5.1.7 Troubleshooting – Keypad Is Locked
5.1.8 Troubleshooting – 1PPS, 10 MHz Outputs
5.1.9 Troubleshooting – Blank Information Display
5.1.10 Troubleshooting the Front Panel Serial Port
5.1.11 Troubleshooting the Front Panel Cooling Fan
5.1.12 Troubleshooting – Network PCs Cannot Sync
5.1.13 Troubleshooting Software Update
337
337
338
340
341
341
342
343
343
344
344
5.2 Option Cards
5.2.1 Accessing Option Cards Settings via the WebUI
5.2.1.1 Web UI Navigation: Option Cards
5.2.1.2 Viewing Input/Output Configuration Settings
5.2.1.3 Configuring Option Card Inputs/Outputs
5.2.1.4 Viewing an Input/Output Signal State
5.2.1.5 Verifying the Validity of an Input Signal
5.2.2 Option Card Field Installation Instructions
5.2.2.1 Field Installation: Introduction
5.2.2.2 Outline of the Installation Procedure
5.2.2.3 Safety
5.2.2.4 [1]: Unpacking
5.2.2.5 [2]: Saving Refererence Priority Configuration
5.2.2.6 [3]: Determining the Installation Procedure
5.2.2.7 [4]: Bottom Slot Installation
5.2.2.8 [5]: Top Slot Installation, Bottom Slot Empty
5.2.2.9 [6]: Top Slot Installation, Bottom Slot Occupied
5.2.2.10 [7]: Frequency Output Cards: Wiring
5.2.2.11 [8]: Gb ETH Card Installation, Slot1 Empty
5.2.2.12 [9]: Gb ETH Card Installation, Slot1 Occupied
5.2.2.13 [10]: Alarm Relay Card, Cable Installation
5.2.2.14 [11]: Verifying HW Detection and SW Update
5.2.2.15 [12]: Restoring Reference Priority Configuration
5.2.3 Time and Frequency Option Cards
5.2.3.1 1PPS Out [1204-18, -19, -21, -2B]
5.2.3.2 1PPS In/Out [1204-28, -2A]
5.2.3.3 1PPS In/Out, 10MHz In [1204-01, -03]
345
345
346
347
348
349
350
351
351
352
352
353
353
354
355
356
358
360
361
363
364
365
367
367
367
372
377
SecureSync User Reference Guide • TABLE OF CONTENTS
XI
5.2.3.4 Frequency Out [1204-08, -1C, -26, -38]
5.2.3.5 Programmable Frequency Out [1204-13, -2F, -30]
5.2.3.6 Programmable Square Wave Out [1204-17]
5.2.3.7 Simulcast (CTCSS/Data Clock) [1204-14]
5.2.4 Telecom Option Cards
5.2.4.1 T1/E1 Out [1204-09, -0A]
5.2.5 Time Code Option Cards
5.2.5.1 IRIG Out [1204-15, -1E, -22]
5.2.5.2 IRIG In/Out [1204-05, -27]
5.2.5.3 STANAG Out [1204-11, -25]
5.2.5.4 STANAG In [1204-1D, -24]
5.2.5.5 HAVE QUICK Out [1204-10, -1B]
5.2.5.6 HAVE QUICK In/Out [1204-29]
5.2.5.7 ASCII Time Code In/Out [1204-02, -04]
5.2.6 Network Interface Option Cards
5.2.6.1 Gigabit Ethernet [1204-06]
5.2.6.2 PTP Grandmaster [1204-32]
5.2.7 Miscellaneous Option Cards
5.2.7.1 GNSS Receiver [1204-43, -44]
5.2.7.2 STL Option Module [1204-3E]
5.2.7.3 Alarm Relay Out [1204-0F]
5.2.7.4 Revertive Selector Card [1204-2E]
5.2.7.5 Event Broadcast [1204-23]
5.2.7.6 Bi-Directional Communication, RS-485 [1204-0B]
384
387
392
396
403
404
409
409
415
428
435
443
449
455
467
467
469
485
485
486
495
500
501
509
XII
5.3 Command-Line Interface
5.3.1 Setting up a Terminal Emulator
5.3.2 CLICommands
5.4 Time Code Data Formats
5.4.1 NMEAGGA Message
5.4.2 NMEARMC Message
5.4.3 NMEAZDA Message
5.4.4 Spectracom Format 0
5.4.5 Spectracom Format 1
5.4.6 Spectracom Format 1S
5.4.7 Spectracom Format 2
5.4.8 Spectracom Format 3
5.4.9 Spectracom Format 4
5.4.10 Spectracom Format 7
SecureSync User Reference Guide • TABLE OF CONTENTS
512
512
513
518
518
519
520
520
521
523
524
527
528
530
5.4.11 Spectracom Format 8
5.4.12 Spectracom Format 9
5.4.12.1 Format 9S
5.4.13 Spectracom Epsilon Formats
5.4.13.1 Spectracom Epsilon TOD1
5.4.13.2 Spectracom Epsilon TOD3
5.4.14 BBC Message Formats
5.4.14.1 Format BBC-01
5.4.14.2 Format BBC-02
5.4.14.3 Format BBC-03 PSTN
5.4.14.4 Format BBC-04
5.4.14.5 Format BBC-05 (NMEA RMC Message)
5.4.15 GSSIP Message Format
5.4.16 EndRun Formats
5.4.16.1 EndRun Time Format
5.4.16.2 EndRunX (Extended) Time Format
531
532
533
534
534
534
535
535
536
537
539
540
540
541
541
542
5.5 IRIG Standards and Specifications
5.5.1 About the IRIG Output Resolution
5.5.2 IRIG Carrier Frequencies
5.5.3 IRIG B Output
5.5.3.1 FAA IRIG B Code Description
5.5.4 IRIG E Output
5.5.5 IRIG Output Accuracy Specifications
5.6 Technical Support
5.6.1 Regional Contact
5.7 Return Shipments
5.8 License Notices
5.8.1 NTPv4.2.6p5
5.8.2 OpenSSH
5.8.3 OpenSSL
5.9 List of Tables
5.10 List of Images
5.11 Document Revision History
543
543
544
548
551
554
558
559
560
560
560
560
564
567
571
573
575
INDEX
SecureSync User Reference Guide • TABLE OF CONTENTS
XIII
BLANK PAGE.
XIV
SecureSync User Reference Guide • TABLE OF CONTENTS
Product Description
The Chapter presents an overview of the SecureSync Time and Frequency Synchronization System, its capabilities, main technical features and specifications.
The following topics are included in thisChapter:
1.1 Getting Started 2
1.2 SecureSync Introduction 2
1.3 SecureSync Front Panel 3
1.4 Unit Rear Panel 7
1.5 Option Cards 8
1.6 The SecureSync Web UI 18
1.7 Specifications 22
1.8 Regulatory Compliance 27
CHAPTER 1
CHAPTER 1 • SecureSync User Reference Guide
1
1.1 Getting Started
1.1 Getting Started
Welcome to the SecureSync User Reference Guide.
Where to start:
First-time users: "SecureSync Introduction" below.
Users with some knowledge of Time and Frequency Servers: "Overview" on page30.
If your unit is up and running and you want to change a setting: "Managing Time" on
page145, or "System Administration" on page235.
1.2 SecureSync Introduction
SecureSync®is a security-hardened 1-rack unit network appliance designed to meet rigorous
network security standards and best practices. It ensures accurate timing through multiple references, tamper-proof management, and extensive logging. Robust network protocols are used
to allow for easy but secure configuration. Features can be enabled or disabled based on your
network policies. Installation is aided by DHCP (IPv4), AUTOCONF (IPv6), and a front-panel
keypad and LCD display.
The unit supports multi- constellation GNSS input (SAASM GPS receivers, supporting L1/L2,
available for authorized users and required for the US DoD are available), IRIG input and
other input references. The unit is powered by AC on an IEC60320 connector. DC power as
back-up to AC power, or as the primary input power source, is also available.
SecureSync combines Spectracom’s precision master clock technology and secure network-centric approach with a compact modular hardware design to bring you a powerful time and frequency reference system at the lowest cost of ownership. Military and commercial applications
alike will benefit from its extreme reliability, security, and flexibility for synchronizing critical
operations.
An important advantage of SecureSync is its unique rugged and flexible modular chassis that
can be configured for your specific needs. Built-in time and frequency functions are extended
with up to six input/output modules.
You can choose from a variety of configurable option cards, each with an assortment of
input/output timing signal types and quantity, including additional 1PPS, 10 MHz, timecode
(IRIG, ASCII, HAVE QUICK), other frequencies (5MHz, 2.048MHz, 1.544MHz, 1MHz), Precision Timing Protocol (PTP) input/output, multi-Gigabit Ethernet (10/100/1000Base-T),
2
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
telecom T1/E1 data rates and multi-network NTP, allowing SecureSync to be customized for
your exact requirements.
A variety of internal oscillators is available, depending on your requirements for holdover capability and phase noise.
Note: Some of the features described are not available on all SecureSync vari-
ants.
1.2.1 SecureSync's Inputs and Outputs
SecureSync provides multiple outputs for use in networked devices and other synchronized
devices. A 1-Pulse-Per-Second (1PPS) output acts as a precise metronome, counting off seconds
of System Time in the selected timescale (such as UTC, TAI or GPS). A 10MHz frequency reference provides a precise, disciplined signal for control systems and transmitters.
SecureSync's outputs are driven by its inputs – most notably, Global Navigation Satellite System (GNSS), or IRIG signal generators and other available input references. GNSS-equipped
SecureSyncs can track up to 72 GNSS satellites simultaneously and synchronize to the satellite’s
atomic clocks. This enables SecureSync-equipped computer networks to synchronize anywhere
on the planet.
1.3 SecureSync Front Panel
1.3 SecureSync Front Panel
The front panel of a SecureSync unit consists of:
three separate illuminated status LEDs
a front panel control keypad
an LED time display
an LCD information display
an RS-232 serial interface
and a temperature controlled cooling fan.
The LCD information display is configurable using the SecureSync web user interface (also
referred to as the “Web UI”) or the front panel controls. Display options include status or position information, time, date, DOY (Day of Year), GNSS information, as well as network settings and SAASM key status (available with the SAASM GPS receiver option only). The RS-232
serial interface and the front panel controls provide a means of configuring the unit’s network
settings and perform other functions without requiring access to the Web UI.
SecureSync units with the SAASM GPS receiver option module installed also have an encryption key fill connector and key zeroize switch on the left-hand side of the front panel.
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
3
1.3 SecureSync Front Panel
Figure 1-1: SecureSync front panel layout (SAASM version)
1.3.1 Front Panel Keypad, and Display
To simplify operation and to allow local access to SecureSync, a keypad and a 4-line LCD
information display are provided on the front panel of the unit.
The front panel keypad and display can be used to configure basic network settings e.g., en/disabling DHCP, or setting an IP address and subnet mask.
Note: If the keypad be locked, see "Troubleshooting – Keypad Is Locked" on
page341.
1.3.1.1 Using the Keypad
The functions of the six keys are:
tu arrow keys: Navigate to a menu option (will be highlighted)
pq arrow keys: Scroll through parameter values in edit displays
ü ENTER key: Select a menu option, or load a parameter when editing
Ò BACK key: Return to previous display or abort an edit process
1.3.1.2 Navigating the Front Panel Display
After power initialization, press any key to go to the “Home” display. As shown in the illustration "Front panel menu tree" on the facing page, several status and setup displays are
4
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
1.3 SecureSync Front Panel
accessible from the main “Home” menu. To navigate through the menus, use the arrow keys to
highlight a selection and then press the ENTER button.
The main menu options and their primary functions are as follows:
Display: Used to configure the information display
Clock:Displaying and setting of the current date and time
System:Displaying version info, system halt and reboot, reset spadmin password
Netv4:Network interface configuration
Lock: Locks the front panel keypad to prevent inadvertent operation.
Front Panel Display: Menu Tree
The illustration below shows how the menu is organized, and which functions can be accessed
via the front panel (i.e. without using the Web UI):
Figure 1-2: Front panel menu tree
To modify a parameter:
Highlight the menu option and press the ENTER button.
“O” stands for current old setting, and “N” is the new setting.
You can only change the “N” setting.
Use the UP and DOWN arrow keys to scroll through all possible parameter values.
To edit a sequence of numbers:
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
5
LED Label Activity/Color Description
POWER
Off Both AC, and DC input power are disconnected.
OR: The unit's AC input switch is turned OFF, and DC input is not
present.
On/solid
green
AC and/or DC Power are supplied; the unit detects all power
inputs.
Red
The unit is configured for two power inputs, but detects only one
power input. OR:Detects a power configuration error.
Green
& blinking
orange
1/sec.
Power Error — general power configuration fault.
SYNC
Red
Time Sync Alarm:
1) The unit has powered up, but has not yet achieved synchronization with its inputs.
2) The unit was synchronized to its selected input references, but
has since lost all available inputs (or the inputs were declared
invalid) and the Holdover period has since expired.
Solid
green
The unit has valid time and 1PPS reference inputs present and is synchronized to its reference.
Orange
The unit is in Holdover Mode: It was synchronized to its selected
input references, but has since lost all available inputs (or the inputs
are not declared valid).The time and frequency outputs will remain
useable until the Holdover period expires.
1.3 SecureSync Front Panel
Use the LEFT and RIGHT arrow keys to select other digits. Once the desired parameter is
displayed, press ENTER to make the new value the current ("O") value. You will be asked
to confirm the setting change. Press ENTER to accept or BACK to cancel the parameter
change.
All entered values are stored in the unit's non- volatile memory and will be restored after a
power cycle.
1.3.2 Status LEDs
Three Status LEDs (see "SecureSync front panel layout (SAASM version)" on page4), located
on the unit's front panel, indicate SecureSync's current operating status:
POWER: Green, always on while power is applied to the unit
SYNC: Tri-color LED indicates the time data accuracy
FAULT: Two-color, three-state LED, indicating if any alarms are present.
At power up, the unit automatically performs a brief LED test run during which all three LEDs
are temporarily lit.
Table 1-1:
Front panel status indications
6
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
LED Label Activity/Color Description
FAULT
Off No alarm conditions are currently active.
Blinking
orange
A GNSS antenna alarm has been asserted and is currently active.
A short or open circuit has been detected in the GNSS antenna
cable. The light will automatically turn off once the alarm condition
clears.
To troubleshoot this condition, see
"Troubleshooting via Web
UI Status Page" on page338
.
Solid
orange
A Minor Alarm condition (other than an antenna problem alarm)
has been asserted and is currently active.
To troubleshoot this condition, see
"Minor and Major Alarms"
on page335
.
Red
A Major Alarm condition has been asserted and is currently active.
To troubleshoot this condition, see
"Minor and Major Alarms"
on page335
.
1.4 Unit Rear Panel
1.4 Unit Rear Panel
The SecureSync rear panel accommodates the connectors for all input and output references.
Optional AC connection for the power input
Optional DC power connector
Ethernet and USB connections
1PPS output
10 MHzoutput
Six bays for option cards
One optional antenna connector.
Figure 1-3: Standard rear panel
Typically, option cards will be installed at the factory. Should you purchase an extra option
card at a later point, you will need to populate the next vacant slot, observing the numerical
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
7
LED State Meaning
Orange
On
Off
LAN Activity detected
No LAN traffic detected
Green
On
Off
LAN Link established, 10 or 100 Mbps
No link established
1.5 Option Cards
order shown above. However, not all cards can be installed in all slots. Your local Spectracom
Sales Office will gladly assist you with the optimal option cards selection for your application.
The DC Power port connector is only installed if your unit was ordered with a DC input power
option. Other optional input/output connectors depend on the installed option cards.
Note: DC input power does not have an ON/OFF switch.
The ACPower connector is the input for the ACpower and provides an ACpower
ON/OFF switch. This connector assembly is only installed if SecureSync was ordered
with AC input power option.
The Ethernet connector provides an interface to the network for NTP synchronization and
to obtain access to the SecureSync product Web UI for system management. It has two
small indicator lamps, “Good Link” (green LED), and “Activity” (orange LED). The “Good
Link” light indicates a connection to the network is present. The “Activity” light will illuminate when network traffic is detected.
Table 1-2:
Ethernet status indicator lights
The USB connector is reserved for future expansion.
The 1PPS BNC connector offers a once-per-second square-wave output signal. The 1PPS
signal can be configured to have either its rising or falling edge to coincide with the system’s on-time point.
The 10 MHz BNC connector provides a 10 MHz sine-wave output signal.
The optional ANTENNA connector is a type “N” connector for the GNSS input from
your GNSS antenna via a coax cable. This connector will only be present if the standard GNSS receiver, or the optional SAASM GPS receiver module are installed.
1.5 Option Cards
Option Cards are circuit boards that can be installed into a SecureSync unit in order to add
input and output functionality. Installation is normally done in the factory when the unit is built.
Many cards, however, can be retrofitted in the field by qualified customer personnel (see
"Option Card Field Installation Instructions" on page351).
8
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
Caution: NEVER install an option card from the back of the unit, ALWAYS from
the top. It is therefore necessary to remove the top cover of the main chassis (housing).
Input and outputs can be categorized by:
Communication direction:
Input
Output
Signal type:
Frequency: 1/5/10/[programmable]MHz
Wave form (square, sinus)
1PPS
TTS
1.5 Option Cards
CTCSS
Signal protocol:
ASCII time code
IRIG
STANAG
Have Quick
E1/T1 data
Telecom timing, etc.
Ethernet (NTP, PTP)
Time code I/O
Alarm out, etc.
Functionality:
Networking card (incl. NTP, PTP)
Time code I/O
Alarm output
Special functionality e.g., revertive selector, bidirectional communication
Connector type:
BNC
DB-9/25
Terminal block
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
9
Function Web UI Name Illustration ID* Inputs Outputs Conn.'s
Time and Frequency Cards
Quad 1PPS out
(TTL)
1PPS Out BNC
18
0 1PPS, TTL (4x) BNC
(4x)
Quad 1PPS out
(10 V)
1PPS Out 10V
19
0 1PPS, 10 V
(4x)
BNC
(4x)
Quad 1PPS out
(RS-485)
1PPS Out, RS-485
21
0 1PPS, RS-485
(4x)
Terminal
block,
10-pin
Quad 1PPS out
(fiber optic)
1PPS Out, Fiber
2B
0 1PPS, F/O
(4x)
ST Fiber
optic
(4x)
1.5 Option Cards
RJ-12/45
SFP
ST fiber optic
To visually identify an option card installed in your unit, or to obtain an overview which option
cards are available for SecureSync, see "Option Cards Overview" below.
To obtain detailed information on a specific option card, using its ID number, see "Option Card
Identification" on page13.
To locate option card topics in this manual by their heading or functionality, see "Option Cards"
on page345. This Chapter also includes information on field installation and Web UI func-
tionality.
To visually identify a connector type, see "Option Card Connectors" on page16.
1.5.1 Option Cards Overview
The table below lists all SecureSync option cards available at the time of publication of this document, sorted by their function.
The table column (see table below) WebUI Name refers to the names under which the cards
installed in a SecureSync unit are listed in the INTERFACES > OPTION CARDS drop-down menu.
Detailed specifications and configuration assistance for every card can be found in the
APPENDIX. To quickly access the APPENDIX topic for your option card(s), you may use the
hyperlinks in table "Option cards listed by their ID number" on page14.
Note: * Every option card has a unique 2-digit ID number located on its cover
plate, and in the center column of the table below. The complete Spectracom Part
Number for option cards is 1204-xx (e.g., 1204-18).
Table 1-3:
Option cards identification
10
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
Function Web UI Name Illustration ID* Inputs Outputs Conn.'s
1in/3out 1PPS
(TTL [BNC])
1PPS/Frequency
RS-485
28
1PPS (1x) 1PPS (3x) BNC
(4x)
1in/2out
1PPS/freq
(fiber optic)
1PPS In/Out,
Fiber
2A
1PPS (1x) 1PPS (2) ST Fiber
optic
(3x)
5MHz out 5MHz Out
08
0 5MHz (3x) BNC
(3x)
10 MHz out 10 MHz Out
1C
0 10 MHz (3x) BNC
(3x)
10 MHz out 10 MHz Out
38
0 10 MHz (3x) TNC
(3x)
1MHz out 1MHz Out
26
0 1MHz (3x) BNC
(3x)
Progr. frequ.
out (Sine
Wave)
Prog Freq Out,
Sine
13
0 progr. clock,
sine (4x)
BNC
(4x)
Progr. frequ out
(TTL)
Prog Freq Out, TTL
2F
0 progr. clock,
TTL/sq. (4x)
BNC
(4x)
Prog frequ out
(RS-485)
Prog Freq Out, RS485
30
0 progr. clock,
RS-485 (4x)
Terminal
block,
10-pin
Square Wave
out
Square Wave
Out, BNC
17
0 square wave,
TTL (4x)
BNC
(4x)
1PPS in/out +
frequ. in
1PPS/Frequency
BNC
01
Var. frequ. +
1PPS
1PPS (TTL) BNC
(3x)
1PPS in/out +
frequ. in
1PPS/Frequency
RS-485
03
10 MHz +
1PPS
1PPS Terminal
block,
10-pin
CTCSS, Data
Sync/Clock
Simulcast
14
0 data clock,
CTCSS frequ.,
1PPS, 1alarm
(3x)
RJ-12 &
DB-9
Telecom Timing Cards
E1/T1 data,
75Ω
E1/T1 Out BNC
09
0 1.544/2.048
MHz (1x)
unbal. E1/T1
(2x)
BNC
(3x)
E1/T1 data,
100/120Ω
E1/T1 Out Terminal
0A
0 1.544/2.048
MHz (1x)
unbal. E1/T1
(2x)
Terminal
block,
10-pin
1.5 Option Cards
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
11
Function Web UI Name Illustration ID* Inputs Outputs Conn.'s
Time Code Cards
ASCII Time
Code RS-232
ASCII Timecode
RS-232
02
1 RS-232 (1x) DB-9
(2x)
ASCII Time
Code RS-485
ASCII Timecode
RS-485
04
1 1 Terminal
block,
10-pin
IRIG BNC IRIG In/Out BNC
05
1 2 BNC
(3x)
IRIG Fiber
Optic
IRIG In/Out, Fiber
27
1 2 ST Fiber
optic
(3x)
IRIG out, BNC IRIGOut BNC
15
0 4 BNC
(4x)
IRIG out, fiber
optic
IRIG Out, Fiber
1E
0 4 ST Fiber
optic
(4x)
IRIG out, RS485
IRIGOut, RS-485
22
0 4 Terminal
block,
10-pin
STANAG input STANAG In
1D
2x 1x DB-25
(1x)
STANAG in,
isol.
STANAG In, Isolated
24
2x 1x DB-25
(1x)
STANAG out STANAG Out
11
0 2x STANAG,
1x 1PPS
DB-25
(1x)
STANAG out,
isol.
STANAG Out,
Isolated
25
0 2x STANAG,
1x 1PPS
DB-25
(1x)
HAVE QUICK
out BNC
HAVE QUICK
Out, BNC
10
0 4 (TTL) BNC
(4x)
HAVE QUICK
out RS-485
HAVE QUICK
Out, RS-485
1B
0 4 Terminal
block,
10-pin
HAVE QUICK HAVE QUICK
29
1 3 BNC
(4x)
Networking Cards
Gigabit Ethernet
Gb Ethernet
06
(3, OR output) (3, OR input) RJ-45
(3x)
1.5 Option Cards
12
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
Function Web UI Name Illustration ID* Inputs Outputs Conn.'s
1Gb PTP:
Master only
Gb PTP
32
0 1PPS (1x
BNC), SFP
(1x)
BNC
(1x),
SFP (1x)
Communication and Specialty Cards
STL (Satellite
Time and Location)
STL
3E
Satellite, Eth.
(Maintenance)
0 SMA,
RJ45
Single GNSS GNSS Receiver
43
1 0 SMA
Dual GNSS Dual GNSS
Receiver
44
2 0 SMA
(2x)
Event in, Broadcast out
Event Broadcast
23
BNC: Event
trigger
DB-9: Event
broadcast
DB-9 +
BNC
(1x
each)
Revertive
Selector ("Failover")
n/a
2E
Frequ. or 1
PPS: (2x)
Frequ. or 1PPS
(1x)
BNC
(3x)
Alarm Relay
Out
Relay Output
0F
0 Relay Out (3x) Terminal
block,
10-pin
Bidir. Communication
RS-485 Comm
0B
Yes Yes Terminal
block,
10-pin
1.5 Option Cards
1.5.2 Option Card Identification
There are several ways to identify which option card(s) are installed in your SecureSync unit:
a.
Using the Web UI, navigate to the INTERFACES > OPTION CARDS drop-down menu, and
compare the list displayed in your UI with the table "Option cards identification" on
page10.
1.5.2.1 Option Card Identification by ID/Part Number
b.
If you have physical access to your SecureSync unit, inspect its rear panel, and compare
the 2-digit ID number printed in the lower left-hand corner on each option card with the
table below.
If you are looking for information specific to a particular option card, the table below can help
you find this information in this User Reference Guide.
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
13
Card
ID*
Card Name Name in UI See ...
01 1PPS/freq input (TTL levels) mod-
ule
1PPS/Frequency
BNC
"1PPS In/Out, 10MHz In [1204-01, 03]" on page377
02 ASCII Time Code module (RS-
232)
ASCII Timecode
RS-232
"ASCII Time Code In/Out [1204-02, 04]" on page455
03 1PPS/freq input (RS-485 levels)
module
1PPS/Frequency
RS-485
"1PPS In/Out, 10MHz In [1204-01, 03]" on page377
04 ASCII Time Code module (RS-
485)
ASCIITimecode
RS-485
"ASCII Time Code In/Out [1204-02, 04]" on page455
05 IRIG module, BNC (1 input, 2
outputs)
IRIG In/Out
BNC
"IRIG In/Out [1204-05, -27]" on
page415
06 Gigabit Ethernet module (3 ports) Gb Ethernet
"Gigabit Ethernet [1204-06]" on
page467
08 5 MHz output module (3 outputs) 5 MHz Out
"Frequency Out [1204-08, -1C, -26, 38]" on page384
09 T1-1.544 (75 Ω) or E1-2.048 (75
Ω) module
E1/T1 Out BNC
"T1/E1 Out [1204-09, -0A]" on
page404
0A T1-1.544 (100 Ω) or E1-2.048
(120 Ω) module
E1/T1 Out Terminal
"T1/E1 Out [1204-09, -0A]" on
page404
0B Bidirectional Communication
module
RS-485 Comm
"Bi-Directional Communication, RS-485
[1204-0B]" on page509
0F Alarm module Relay Output
"Alarm Relay Out [1204-0F]" on
page495
1.5 Option Cards
Note: * Every option card has a 2-digit identification (ID) number that can be
found in the corner of its cover plate, and in the table below. The ID number is
comprised of the two center digits of your option card's Spectracom Part Number: 1204-0180-0600.
Figure 1-4: Option Card ID number
The table lists all option cards available at the publication date of this documentation, sorted by
their ID number. Locate the option card ID number on its cover plate, and follow the cor-
responding hyperlink in the right-hand column.
Table 1-4:
Option cards listed by their ID number
14
CHAPTER 1 • SecureSync User Reference Guide Rev. 26
Loading...