UGiBuilder iDX 41t0000926revd061118

Selecting a Fast Path Application for a Multicast Service Profile.. Moving a Remote from an Inroute Group to an SCPC Line Card.. Line Card Dialog Box: VNO User Selecting Configure Carrie

iBuilder User Guide

iDX Release 4.1.x

June 14, 2018

iBuilder User Guide iDX Release 4.1.x

The information contained herein is proprietary and confidential to VT iDirect, Inc (“VT iDirect”) and iDirect Government, LLC (“iDirect Government”) and shall not be published, reproduced, copied, disclosed or used, in whole or part, for other than its intended purpose without the express written consent of a duly authorized representative of VT iDirect or iDirect Government.

Copyright © 2018 VT iDirect, Inc., 13861 Sunrise Valley Drive, Suite 300, Herndon, VA 20171, USA.All rights reserved Reproduction in whole or in part without permission is prohibited Information contained herein is subject to change without notice The specifications and information regarding the products in this document are subject to change without notice All statements, information and recommendations in this document are believed to be accurate, but are presented without warranty of any kind, express, or implied Users must take full responsibility for their application of any products Trademarks, brand names and products mentioned in this document are the property of their respective owners All such references are used strictly in an editorial fashion with no intent to convey any affiliation with the name or the product's rightful owner

VT iDirect ® is a global leader in IP-based satellite communications providing technology and solutions that enable our partners worldwide to optimize their networks, differentiate their services and

profitably expand their businesses Our product portfolio, branded under the name iDirect ®, sets standards in performance and efficiency to deliver voice, video and data connectivity anywhere in the

world VT iDirect ® is the world’s largest TDMA enterprise VSAT manufacturer and is the leader in key industries including mobility, military/government and cellular backhaul

Company Web site: www.idirect.net ~ Main Phone: 703.648.8000

TAC Contact Information: Phone: 703.648.8151 ~ Email: tac@idirect.net ~ Web site: tac.idirect.net

iDirect Government™, created in 2007, is a wholly owned subsidiary of iDirect and was formed to better

serve the U.S government and defense communities

Company Web site: www.idirectgov.com ~ Main Phone: 703.648.8118

TAC Contact Information: Phone: 703.648.8111 ~ Email: tac@idirectgov.com ~ Web site:

tac.idirectgov.com

Document Name: UG_iBuilder_iDX_4.1_T0000926_Rev_D_06_11_18

Revision History

The following table shows all revisions for this document To determine if this is the latest revision, check the TAC Web site at http://tac.idirect.net

Revision Date Updates

A 11/22/2017 Initial release for iDX 4.1.0

B 02/05/2018 Removed references to CX780 remotes and added note at

iDirect Remote Satellite Router Models on page 174

C 04/26/2018 iDX Release 4.1.0.4; updates include:

• Changed Caution at Using Static Routes with Multiple Protocol Processor Blades on page 192

• Added new section Layer 3 Tab on page 197

• Added new section Ports Tab on page 207

• Added new section Layer 2 Tab on page 241

• Added note about the range of valid VLAN IDs after Step 2c at

Configuring an Eight-Port Switch on page 202

D 06/14/2018 iDX Release 4.1.1.0; updates include:

• Added Configuring a Protocol Processor to Enable X7 Encrypted Multicast Fast Path on a Second Demodulator on

page 104

• Added Security Server on page 13

• Added Global Key Distribution on page 523 to include Security folder

• Added a note about the Enable BGP check box under Figure

6-59 Remote L2oS Tab in Remote L2oS Tab on page 234

• Changed the valid range of VLAN IDs from 2 to 4092 to 2 to

4094 on pages 108, 114, 115, 119, and 203

• Added iQ200Rackmount and iQ200Board to list of supported satellite routers in Table 6-1 at iDirect Remote Satellite Router Models on page 174

• Changed iQ Desktop remote to iQ Series remote as appropriate throughout Chapter 6

• Removed Windows XP from list of supported Windows versions

at System Requirements on page 13

• Added note about INI file's new location under Figure 2-1 at

System Requirements on page 13.Continued on next page

Revision History

D 06/14/2018 Continued from previous page

• Removed information about Windows XP Service Pack 3 compatibility under Figure 2-1 at System Requirements on

page 13

• Added bullet about using XLC-11 and XLC-M line cards in the same IG at the end of the bulleted list starting at Adding Receive-Only (Rx-Only) Line Cards on page 134

• Added note about Superburst and traditional acquisition support in the same inroute group Prerequisites for Converting to Adaptive TDMA on page 461

• To show Enable X7-ER SBC Down Alarm check box in

Automated Configuration Downloader dialog box, changed

the following figures: Figure 4-5 at Adding a Backup Teleport

on page 96; Figure 10-8 at Applying Multiple Configurations

to Network Elements on page 379; Figure 15-3 at

Reconfiguring the Network for TRANSEC on page 479

• Added notes describing Enable X7-ER SBC Down Alarm check

box at Applying Multiple Configurations to Network Elements

About This Guide xxxv

Purpose xxxv

Intended Audience xxxv

Contents Of This Guide xxxv

Document Conventions xxxvi

Getting Help xxxvii

Related Documents xxxvii

xxxviii

The iVantage Network Management System 1

Chapter 1 iDirect System Overview 3

System Overview 3

IP Network Architecture 5

Chapter 2 Overview of the Network Management System for iBuilder 9

2.1 Introduction 9

2.2 Required Information 10

2.3 Preparing Equipment in Advance 10

2.4 Components of the Network Management System 10

2.4.1 NMS Applications 10

2.4.2 Server Components 11

2.5 Installing iBuilder, iMonitor, and iSite 13

2.5.1 System Requirements 13

2.5.2 Installation Procedure 13

2.6 Launching iBuilder 14

2.6.1 Logging On To Another NMS Server 16

2.6.2 Turning Off/On Security Enhancement 17

2.6.3 Managing Telnet Access from Local Host Only 18

2.6.4 Multiple Users or PCs Accessing the NMS 19

2.6.5 Accepting Changes 19

2.7 iBuilder Tree Folders and Pre-defined Components 21

2.7.1 Spacecraft Pre-defined Components 21

2.7.2 QoS Pre-defined Components 22

2.7.3 Components Pre-defined Components 22

2.7.4 Manufacturers Pre-defined Components 23

2.8 Using the iBuilder Interface 24

2.8.1 Clicking on Elements and Folders 24

2.8.2 Using the Docking Feature 25

2.8.3 Expanding the iBuilder Tree 25

2.8.4 Collapsing the iBuilder Tree 26

2.8.5 Sorting Columns 27

2.8.6 Sorting the iBuilder Tree 27

2.8.7 iBuilder Tree Elements, Folders and Menus 28

2.8.8 Using the Interface Toolbars and Menu Options 31

2.9 Customizing and Creating New Details Views 40

2.9.1 Customizing Details Views for Configuration Reporting 41

2.9.2 Creating Additional Filters for Customized Reporting 43

2.10 Working with Multiple Elements Simultaneously 44

2.10.1 Working with Multiple Configurations and Image Files 44

2.10.2 Modifying Parameters on Multiple Elements 45

2.11 Configuration Status of Elements 46

2.11.1 What is a Configuration State? 46

2.11.2 Possible Configuration States 47

2.11.3 Configuration State Transition 49

2.11.4 Viewing Configuration States 49

2.11.5 Reasons for Configuration State Changes 49

2.11.6 Configuration States and iMonitor 50

2.12 In Color versus Shaded Icons 50

2.13 Database Numbering Convention 50

2.14 Viewing the Activity Log 51

2.15 Configuring Warning Properties 54

2.15.1 Setting Global Warning Properties 55

2.15.2 Customizing Warning Properties for Individual Network Elements 57

2.15.3 Clearing Customized Warning Properties 58

2.16 Managing NMS Licenses 60

2.16.1 Importing License Files 60

2.16.2 License Properties Tabs 63

2.16.3 Exporting iBuilder Data for Licensing 63

2.16.4 Permanently Enabling Chassis License Download 66

Chapter 3 Defining Hub RFT Components and the Satellite 69

3.1 Preparing the Hub RFT Components Folders 69

3.1.1 Adding an Antenna 69

3.1.2 Adding an Upconverter or Downconverter 70

3.1.3 Adding a High Power Amplifier (HPA) 72

3.2 Adding a Spacecraft 73

3.3 Adding a Transponder 74

3.4 Configuring Fan-In Fan-Out 76

3.5 Adding Bandwidth 77

3.6 Adding Carriers 78

3.6.1 Adding Downstream Carriers 78

3.6.2 Adding TDMA Upstream Carriers 81

3.6.3 Adding SCPC Upstream Carriers 84

3.6.4 Estimating the Information Rate for a Downstream Carrier 88

3.7 Adding Linear Predistortion 89

3.7.1 Importing a Coefficient Set to the Transponder 90

3.7.2 Mapping a Carrier to a Coefficient Set 92

3.7.3 Assigning the Carrier to the Line Card 93

Chapter 4 Defining Network Components 95

4.1 Adding a Teleport 95

4.2 Adding a Backup Teleport 96

4.3 Adding a Hub RFT 99

4.4 Protocol Processors 100

4.4.1 TRANSEC Protocol Processors 100

4.4.2 Adding a Protocol Processor 101

4.5 Configuring a Protocol Processor to Enable X7 Encrypted Multicast Fast Path on a Second Demodulator104 4.5.1 Prerequisites for X7 Encrypted MCFP on a Second Demodulator 105

4.6 Setting Warning Properties for Protocol Processor Blades 106

4.7 Adding a Protocol Processor Blade 106

4.8 Adding an SVN 107

4.8.1 Overriding Automatically-Assigned SVN Addressing 109

4.8.2 Special VLAN/SVN Configuration 109

4.9 Configuring L2oS Hub Parameters 110

4.9.1 Configuring SDT 112

4.9.2 Configuring L2SW Default 112

4.9.3 Configuring SVNs 113

4.10 Adding an Encapsulator 121

4.11 Modifying Network by Assigning Encapsulator 122

4.12 Adding Processing Nodes 123

4.13 Modifying a Processing Node 124

4.14 Viewing Processing Nodes 125

Chapter 5 Defining Networks, Line Cards, and Inroute Groups 127

5.1 iDirect Line Card Model Types 128

5.2 Adding a Network 128

5.3 Line Card Types 131

5.4 Adding a Transmit or Transmit and Receive Line Card 132

5.5 Adding Receive-Only (Rx-Only) Line Cards 134

5.5.1 Adding Multiple Receive Carriers to a Line Card 139

5.7 Changing to an Alternate Downstream Carrier 144

5.8 Defining a Standby Line Card 146

5.8.1 Overview of Line Card Redundancy 146

5.8.2 Adding a Standby Line Card to a Network 147

5.8.3 Managing Line Card Redundancy Relationships 149

5.8.4 Swapping an Active and Standby Line Card 155

5.8.5 Line Card Failover 156

5.9 Setting Warning Properties for Line Cards 157

5.10 Inroute Groups 157

5.10.1 Adding an Inroute Group 159

5.10.2 Configuring Inroute Group Compositions 163

5.10.3 Configuring Uplink Control Parameters 165

5.11 Downstream Carriers Network Parameters 168

5.11.1 System Operation 168

5.11.2 Configuring Downstream Network Parameters 169

5.11.3 Adjusting Downstream Carrier Parameters for CCM Networks 170

Chapter 6 Configuring Remotes 173

6.1 iDirect Remote Satellite Router Models 174

6.2 Adding Remotes 174

6.3 Remote Information Tab 175

6.3.1 Transmit and Receive Properties 179

6.3.2 Customers and Distributors 182

6.4 Remote IP Config Tab 184

6.4.1 VLAN and LAN Information 184

6.4.2 Domain Name System (DNS) 188

6.4.3 Dynamic Host Configuration Protocol (DHCP) 189

6.4.4 RIPv2, Static Routes, Multicast Groups, Port Forwarding and NAT 190

6.5 Layer 3 Tab 197

6.5.1 Adding Layer 3 SVNs to an iQ Series Remote 197

6.5.2 Configuring the Default VLAN 198

6.5.3 Configuring User VLANS 199

6.6 Remote Switch Tab 201

6.6.1 Configuring an Eight-Port Switch 202

6.7 Ports Tab 207

6.7.1 Port Types 207

6.7.2 Configuring iQ Series Ports 208

6.7.3 Configuring iQ Series VLANs 210

6.7.4 Assigning/Editing VLANs to iQ Series Remote Ports 211

6.8 Remote QoS Tab 213

6.8.1 QoS Profiles 213

6.8.2 Rate Shaping Configuration 217

6.8.3 Adaptive Parameters 220

6.8.4 EIR and MODCOD Configuration 221

6.8.5 Downstream and Upstream Distributor 223

6.9 Remote Geo Location Tab 224

6.10 Remote VSAT Tab 227

6.10.1 Configuring an ASCSignal Remote Transceiver 229

6.10.2 Configuring the Stacker Feature 230

6.11 Remote VSAT-2 Tab 232

6.12 Remote L2oS Tab 234

6.12.1 Configuring SDT 236

6.12.2 Configuring SVNs 236

6.12.3 Configuring Header Compression 239

6.13 Layer 2 Tab 241

6.13.1 Configuring SVNs 242

6.14 Mesh Receiver Tab 245

6.14.1 Configuring a Mesh Receiver 246

6.15 Setting Warning Properties for Remotes 246

6.16 Pool License Properties Tab 247

6.16.1 Assigning a License to a Remote 248

6.16.2 Viewing License Pool Info 248

6.17 Adding a Remote by Cloning an Existing Remote 249

6.18 Roaming Remotes 249

6.18.1 Adding a Roaming Remote 250

6.18.2 Managing Roaming Remote Configuration 251

6.18.3 Beam Switching for Roaming Remotes 257

6.19 Enabling IP Packet Compression Types 258

6.19.1 TCP Payload Compression 259

6.19.2 UDP Header Compression 260

6.19.3 CRTP 260

6.19.4 UDP Payload Compression 261

6.19.5 L2TP Payload Compression 261

Chapter 7 Configuring Quality of Service for iDirect Networks 263

7.1 Group QoS Description 263

7.1.1 QoS Properties 264

7.1.2 Group QoS Hierarchy 267

7.1.3 QoS Modes 274

7.1.4 Multicast Bandwidth Group 277

7.2 Configuring Group QoS 278

7.2.1 The Group QoS User Interface 279

7.2.2 Estimating Effective MIR and CIR for Downstream Networks 286

7.2.3 Allocation Fairness Relative to CIR 290

7.2.4 Allocation Fairness Relative to MODCOD 292

7.2.5 Adding a Bandwidth Group 294

7.2.6 Adding a Service Group 296

7.2.7 Working with Application Service Groups 298

7.2.8 Working with Remote Service Groups 316

7.2.9 Configuring Full-Trigger CIR for a Remote 325

7.2.10 QoS Congestion Alarm Feature 327

7.3 Working with Group Profiles 329

7.3.1 Saving Group Profiles 329

7.3.2 Copying Group Profiles 332

7.3.3 Modifying Group Profiles 333

7.3.4 Applying Group Profiles to Networks and Inroute Groups 334

7.4 Application Profiles and Filter Profiles 336

7.4.1 Adding a Profile 337

7.4.2 Copying a Profile 338

7.4.3 Adding an Application Profile 339

7.4.4 Adding a Filter Profile 343

7.4.5 Adding a Rule to an Application Profile or Filter Profile 344

Chapter 8 Configuring a Hub Chassis 349

8.1 Configuring the Chassis IP Address 349

8.1.1 Setting the IP Address for a Chassis with an EDAS Controller Board 350

8.1.2 Setting the IP Address for a Chassis with a MIDAS Controller Board 350

8.2 Chassis Licenses 351

8.3 Configuring and Controlling the Hub Chassis 352

8.4 Configuring a Four-Slot Chassis 354

8.5 Sharing a 20 Slot Chassis in a Multi-NMS System 357

8.5.1 Sharing the Chassis Manager Server 359

8.5.2 Configuring Chassis Slots for Access by Another NMS 360

8.5.3 Duplicating the Chassis Configuration on the Second NMS 362

8.5.4 Pointing an NMS to the Local Chassis Manager 363

8.6 Changing a Chassis IP Address 363

Chapter 9 Controlling Remotes 365

9.1 Activating and Deactivating Remotes 365

9.2 Moving Remotes Between Networks, Inroute Groups, and Line Cards 367

Chapter 10 Retrieving and Applying Saved and Active Configurations 371 10.1 Configuration Options Files 371

10.2 Hub-side and Remote-side Options Files 372

10.3 Modifying, Deleting, and Viewing Configurations 372

10.4 Retrieving Configurations 373

10.4.1 Retrieving a Single Saved or Active Configuration 373

10.4.2 Retrieving Multiple Saved or Active Configurations 374

10.5 Comparing Configuration Changes 376

10.6 Applying Configuration Changes 378

10.6.1 Applying Multiple Configurations to Network Elements 379

10.6.2 Applying a Configuration to a Protocol Processor, Processing Node, or Chassis 381 10.6.3 Applying a Configuration to the Network 382

10.6.4 Applying a Configuration to the Line Card 382

10.6.5 Applying a TCP or UDP Configuration to a Remote 383

10.7 Configuration Changes on Roaming Remotes 385

10.7.1 Roaming Options File Generation 385

10.7.2 Pending Changes across Networks 386

10.7.3 Applying Changes to Roaming Remotes 386

Chapter 11 Upgrading Software and Firmware 387

11.1 Image Package Versions 387

11.2 Upgrading with the Multicast Download Feature 388

11.2.1 Multicast Download Using UDP 388

11.2.2 Multicast Download Dialog Box 389

11.2.3 Selecting the Download Parameters 389

11.2.4 Multicast Download Procedure 393

11.2.5 Downloading an Image to Out of Network Remotes 394

11.2.6 Interactions with Other iBuilder Operations 394

11.2.7 Resetting Remotes 395

11.3 Upgrading with the TCP Download Feature 395

11.3.1 TCP Download Dialog Box 395

11.3.2 Selecting the Download Parameters 396

11.3.3 TCP Download Procedure 400

11.4 Upgrading Remotes Using Revision Server 401

11.4.1 How the Revision Server Works 401

11.4.2 When to Use the Revision Server 402

11.4.3 Starting the Revision Server 403

11.4.4 Controlling the Revision Server Real-Time Event Display 405

11.4.5 Monitoring Upgrades Using the Revision Server Status Pane 407

11.4.6 Cancelling an Upgrade 409

Chapter 12 Commissioning a Hub Line Card 411

12.1 Prerequisites 411

12.2 Add the Line Card in iBuilder and Retrieve the Configuration 412

12.3 Power on the Line Card 412

12.4 Determine the IP Address 413

12.5 Download the Image Packages and Options File 415

12.6 Connect the Transmit Ports 420

12.7 Connect the Receive Ports 420

12.8 Perform 1 dB Compression Point Test with the Satellite Operator 420

12.9 Set the Transmit Power for the Outroute with the Satellite Operator 421

12.10 Connect to the LAN and Apply the Line Card Configuration 422

Chapter 13 Managing User Accounts and User Groups 423

13.1 Conversion of User Accounts During Upgrade Procedure 423

13.2 NMS User Groups 424

13.2.1 Visibility and Access for VNO User Groups 424

13.2.2 Visibility and Access for CNO User Groups 426

13.2.3 Creating and Managing VNO and CNO User Groups 426

13.2.4 Setting Global Rate Limits for User Groups 429

13.2.5 Modifying per Node VNO Properties 430

13.2.6 Changes Made by an HNO During a VNO Session 431

13.2.7 Sharing a Chassis Among Multiple VNO User Groups 432

13.2.8 Configuring VNO Access Rights for a Shared Chassis 434

13.2.9 Configuring VNO Access Rights for SCPC Return Channels 437

13.2.10 VNO Operations on Line Cards in SCPC Return Mode 438

13.3 Modifying Group QoS Settings for VNO User Groups 440

13.3.1 Restricting VNO Access to GQoS Tab Only 440

13.3.2 Assigning Ownership of Group QoS Nodes to a VNO 442

13.3.3 Setting VNO Permissions for Group QoS Nodes 445

13.3.4 Viewing GQoS Nodes in a VNO Session 447

13.3.5 Setting VNO Permissions for QoS Profiles 447

13.4 Adding and Managing User Accounts 450

13.4.1 Adding a User and Defining User Privileges 450

13.4.2 Modifying a User 452

13.4.3 Adding a User by Cloning a User’s Account 452

13.4.4 Viewing a User’s Account Properties 453

13.4.5 Deleting an Existing User’s Account 454

13.4.6 Managing Accounts from the Active Users Pane 454

13.5 Changing Passwords 456

13.6 User Privileges 457

13.6.1 Super User and Guest Level Privileges 458

13.6.2 Super User and Guest Privileges for VNOs 459

13.7 Simultaneous Changes to the NMS Database 459

Chapter 14 Converting to Adaptive TDMA 461

14.1 Overview 461

14.2 Prerequisites for Converting to Adaptive TDMA 461

14.3 Converting an Inroute Group to Adaptive TDMA 462

14.3.1 Assumptions 462

14.3.2 Configure Adaptive Parameters for Individual Remotes 463

14.3.3 Add the New TDMA Upstream Carriers 463

14.3.4 Update Inroute Group Composition 1 465

14.3.5 Verify Network Performance Using IGC 1 468

14.3.6 Configure the Remaining IGCs 468

14.4 Verifying Adaptive Network Operation 471

14.4.1 Verify Remote TDMA Initial Power 471

14.4.2 Verify Remote TDMA Maximum Power 471

14.4.3 Monitor Adaptive TDMA Performance 472

14.4.4 Carrier Grooming 473

Chapter 15 Converting a Network to TRANSEC 477

15.1 TRANSEC Hardware Requirements 478

15.2 TRANSEC Host Certification 478

15.3 Reconfiguring the Network for TRANSEC 479

15.4 Configuring the Initial ACC Keys on the Remotes 482

15.5 Changing from TRANSEC to Non-TRANSEC 482

Appendix A Configuring a Distributed NMS Server 485

A.1 Prerequisites 485

A.2 Distributed NMS Server Architecture 485

A.3 Logging On to iBuilder and iMonitor 486

A.4 Setting Up a Distributed NMS 487

A.5 Regenerating the Options Files 494

A.6 Granting Read Permissions to NMS 2 and NMS 3 495

A.7 Assigning QoS Profiles 495

A.8 Configuring Database Backup and Restore 497

A.9 Verifying Correct Operation 497

A.10 Running the NAT Script 498

A.10.1 Running the NAT Script for iBuilder 498

A.10.2 Running the Nat Script for iMonitor 499

A.11 Managing a Distributed NMS 499

A.11.1 Enabling and Disabling Services for DNMS 499

A.11.2 Executing DNMS Management Scripts 500

Appendix B Using the iDirect CA Foundry 503

B.1 Accessing the CA Foundry 503

B.2 Creating a Certificate Authority 505

B.3 Logging On to a Certificate Authority 506

B.4 Connecting to a Host 506

B.5 Bringing an Unauthorized Remote into a TRANSEC Network 507

B.6 Certifying a Host 509

B.7 Revoking a Remote’s Certificate 510

Appendix C Managing TRANSEC Keys 513

C.1 Configuring the ACC Key on a Remote 513

C.2 Updating the DCC Keys 515

C.3 Changing the DCC Key Update Frequency 516

C.4 Updating the ACC Keys 516

C.5 Verifying the ACC Keys on an In-Network Remote 518

C.6 Identifying the Blade that Distributes TRANSEC Keys 521

Appendix D Global Key Distribution 523

D.1 Global Key Distribution for TRANSEC and Non-TRANSEC Networks 523

D.1.1 Distribution of ACC Keys to TRANSEC Networks 523

D.1.2 Distribution of Multicast Fast Path Encryption Keys to Non-TRANSEC Networks 524 D.2 Global Key Distribution Overview 524

D.3 Setting Up Global Key Distribution 526

D.3.1 Installing the GKD Server Software 526

D.3.2 Adding GKDs in iBuilder 527

D.3.3 Creating GKD Options Files 531

D.3.4 Certifying and Starting the GKD Server 534

D.3.5 Adding the GKD Server to the Protocol Processor 534

D.4 Additional GKD Procedures 536

D.4.1 Logging On to the GKD Console 536

D.4.2 Changing the GKD Console Password in a TRANSEC Network 536

D.4.3 Changing the GKD Console Password in a Non-TRANSEC Network 538

D.4.4 Determining the GKD Status 539

D.4.5 Viewing and Changing the Key Update Frequency 540

D.4.6 Determining the Time of the Next Key Update 541

D.5 Setting Up Global Key Distribution for Encrypted Multicast Fast Path on an X7 Second Demodulator542 D.5.1 Configuring GKD for Encrypted Multicast Fast Path in Primary Networks 542

D.5.2 Configuring GKD for Encrypted Multicast Fast Path in Secondary Networks 544 Appendix E Configuring Networks for Automatic Beam Selection 547

E.1 Configuring and Running the Map Server 548

E.1.1 The Map Server Configuration File 548

E.1.2 Adding Beams to the Beam Map File 549

E.1.3 Running the Map Server 550

E.2 Configuring Remotes for Automatic Beam Selection 551

E.2.1 Configuring an Antenna Reflector for ABS 551

E.2.2 Configuring a Remote for ABS 553

E.2.3 Changing the Minimum Look Angle 556

E.3 Remote Custom Keys for Automatic Beam Selection 556

E.3.1 Configuring the Network Acquisition Timers 558

E.3.2 Changing the Download Timeout 558

E.3.3 Muting a Remote’s Transmitter when Mapless 559

E.3.4 Changing the Time a Beam is Considered Unusable 559

E.3.5 Changing the GPS Interval 560

E.3.6 Enabling or Disabling Receive-Only Mode 560

E.3.7 Enabling a Local Map Server on a Remote Modem 560

E.4 Remote Console Commands 561

E.4.1 latlong 561

E.4.2 tlev 562

E.4.3 antenna debug 563

E.4.4 beam debug 564

E.4.5 beamselector 564

E.4.6 map debug 566

E.4.7 map show 567

E.4.8 map delete 567

Appendix F COTM Settings and Custom Keys 569

F.1 Maximum Speed for Remotes in an Inroute Group 569

F.2 COTM Type 570

F.3 TDMA Upstream Acquisition Range 570

F.4 Inroute Map Stale Timeout 571

F.5 Minimum Symbol Rates for Mobile Remotes 571

F.6 SCPC Upstream Acquisition Range 572

F.7 FEC Blocks per Frame for Spread Spectrum SCPC Return Channels 573

F.8 Guard Band for SCPC Return Channels 574

F.9 Remote LFO Correction Algorithm 574

Appendix G Remote Locking 575

F.1 Soft Locking versus Hard Locking 575

F.2 Locking an Evolution X3 Remote 576

F.2.1 Configuring the Network Key 576

F.2.2 Setting a Soft Lock 576

F.2.3 Removing a Soft Lock 577

F.2.4 Setting a Hard Lock 577

F.2.5 Checking Remote Lock Status on an Evolution X3 Remote 578

F.2.6 Non-Warranty RMA Required to Remove X3 Locks 578

Appendix G Configuring Remote and PP Signaled Beam Switching 579

Introduction 579

Supported Remotes 579

Configuring Remote Signaled Beam Switching 580

Configuring PP Signaled Beam Switching 584

Debug Information 593

Glossary of Terms 599

Index 605

Figure 1-1 Sample iDirect Network 4

Figure 1-2 iDirect IP Architecture – Multiple VLANs per Remote 6

Figure 1-3 iDirect IP Architecture – VLAN Spanning Remotes 7

Figure 1-4 iDirect IP Architecture – Classic IP Configuration 8

Figure 2-1 Windows 7 Start Menu Entries for NMS GUI Clients 14

Figure 2-2 iBuilder Login Information Dialog Box 15

Figure 2-3 Detected Default Password Dialog Box 15

Figure 2-4 Change Password Dialog Box 15

Figure 2-5 Connecting iBuilder to Another NMS Server 16

Figure 2-6 para_cfg.opt with Security Checking Turned Off 17

Figure 2-7 Clearing Automatically Accept Configuration Changes 20

Figure 2-8 Accept Changes Button Indicating Configuration Change 20

Figure 2-9 Configuration Changes Pending Dialog Box 20

Figure 2-10 iBuilder Tree 21

Figure 2-11 Bench Test Components in Initial iBuilder Tree 21

Figure 2-12 QoS Subfolders 22

Figure 2-13 Pre-defined Hub RFT Components 22

Figure 2-14 Pre-defined Remote Antenna Components 23

Figure 2-15 Example of Entries in Manufacturers Folder 23

Figure 2-16 iBuilder Main Window 24

Figure 2-17 Expand Tree Selection 26

Figure 2-18 Expanded Tree with Child Elements 26

Figure 2-19 Collapse Tree Selection 26

Figure 2-20 Collapsed Tree 26

Figure 2-21 Sorting Columns 27

Figure 2-22 Sort Preferences Dialog Box: Selecting Sort Order 27

Figure 2-23 Sort Preferences Dialog Box: Selecting the Sort Field 28

Figure 2-24 Fully-Expanded Network in the iBuilder Tree 29

Figure 2-25 Fully-Expanded Folder in the iBuilder Tree 29

Figure 2-26 iBuilder Tree Showing Elements with Insecure Passwords 30

Figure 2-27 Adding a New Manufacturer 31

Figure 2-28 iBuilder Title Bar 31

Figure 2-29 iBuilder Menu Bar 31

Figure 2-30 iBuilder Toolbar 32

Figure 2-31 Selecting Search Criteria on Find Toolbar 34

Figure 2-32 Find Dialog Box 34

Figure 2-33 iBuilder View Menu 35

Figure 2-35 iBuilder Active Users Pane 36

Figure 2-36 iBuilder Legend Pane 37

Figure 2-37 Accept Configuration Changes Icon 38

Figure 2-38 Configuration Changes Pane 38

Figure 2-39 Example of Configuration States 39

Figure 2-40 Selecting Details from the View Menu 39

Figure 2-41 Network Selected in Tree 40

Figure 2-42 Result in Details View 40

Figure 2-43 Network Selected in Tree 40

Figure 2-44 Result in Details View 40

Figure 2-45 Choose Details Dialog Box 41

Figure 2-46 Selecting a Details Filter 42

Figure 2-47 View Details for Carrier 43

Figure 2-48 Adding a Custom Report 43

Figure 2-49 Custom Report Modify Button 44

Figure 2-50 Custom Report Delete Button 44

Figure 2-51 Selecting the Parent Element for Group Editing 45

Figure 2-52 Selecting Multiple Elements for Group Editing 46

Figure 2-53 Configuration States of an iDirect Remote 49

Figure 2-54 Modifying an Assigned Network Element 50

Figure 2-55 New Teleport with System-Generated Number 51

Figure 2-56 Partial List of Activities Displayed in the Activity Log 51

Figure 2-57 Activity Log Dialog Box 52

Figure 2-58 Ellipsis Button and Graphical Clock Display 53

Figure 2-59 Opening an Options File from the Activity Log 53

Figure 2-60 Copying Multiple Rows from the Activity Log 54

Figure 2-61 Modify Global Warning Dialog Box 56

Figure 2-62 Modify Warning Dialog Box 57

Figure 2-63 Warning Properties Tab 58

Figure 2-64 Viewing the iBuilder License Toolbar 60

Figure 2-65 Enabling Chassis License Download to Chassis Manager 61

Figure 2-66 Select License Type Dialog Box 61

Figure 2-67 Selecting a License File for Import 62

Figure 2-68 Accepting Changes Importing a License File 62

Figure 2-69 License Properties Tab 63

Figure 2-70 Selecting Export Data for Licensing on License Toolbar 64

Figure 2-71 Selecting Data for Licensing 64

Figure 2-72 Saving Data for License Request 65

Figure 2-73 Sample License Request CSV file 65

Figure 2-74 para_cfg.opt with Chassis License Download Enabled 66

Figure 3-1 New Antenna Dialog Box 70

Figure 3-2 New Upconverter Dialog Box 71Figure 3-3 New HPA Dialog Box 72Figure 3-4 New Spacecraft Dialog Box 73Figure 3-5 Bandwidth Hierarchy in the iBuilder Tree 74Figure 3-6 Hub Transponder Dialog Box 75Figure 3-7 Translation Frequency Calculator 76Figure 3-8 Selecting Remote Fan In Translations / Fan Out Translations 77Figure 3-9 New Bandwidth Dialog Box 78Figure 3-10 Selecting Downstream Carrier 79Figure 3-11 New Downstream Carrier Dialog Box 79Figure 3-12 New TDMA Upstream Carrier Dialog Box 81Figure 3-13 Payload Size Field for Adaptive Carriers 82Figure 3-14 SCPC Upstream Carrier Icon in iBuilder Tree 84Figure 3-15 New SCPC Upstream Carrier Dialog Box 85Figure 3-16 MODCOD Distribution Calculator for DVB-S2 Carriers 88Figure 3-17 Calculating Estimated Information Rate for a DVB-S2 Network 89Figure 3-18 Adding Predistortion 90Figure 3-19 Predistortion Description Screen 91Figure 3-20 Selecting a DVB-S2X Carrier 92Figure 3-21 Predistortion Tab Showing Carrier Configured with Linear Predistortion 92Figure 3-22 Selecting a Downstream Line Card for Linear Predistortion 93Figure 3-23 Assigning Carrier to a Line Card 93Figure 4-1 Teleport Information Tab 95Figure 4-2 Teleport Geo Location Tab 96Figure 4-3 Configuring a Backup Teleport 97Figure 4-4 Roaming Dialog Box 98Figure 4-5 Automated Configuration Downloader Dialog Box 99Figure 4-6 New Hub RFT Dialog Box 100Figure 4-7 New Protocol Processor Dialog Box 102Figure 4-8 Persistent Multicast Group Dialog Box 104Figure 4-9 Protocol Processor Blades Tab 106Figure 4-10 Protocol Processor Blade Dialog Box 107Figure 4-11 Protocol Processor SVNs Tab 108Figure 4-12 Protocol Processor Add/Edit SVN Dialog Box 108

Figure 4-13 Overriding Automatically-Assigned SVN Addressing 109Figure 4-14 Protocol Processor SVN Tab with L2oS Enabled Checked 110Figure 4-15 Protocol Processor SVN Tab Showing CE Tag Transparent SVNs 111Figure 4-16 Protocol Processor MAC Address Aging Timeout 113Figure 4-17 Add/Edit SVN Dialog Box for Layer 2 114Figure 4-18 Add/Edit SVN Dialog Box for Layer 3 115

Figure 4-20 Add/Edit SVN Dialog Box for Layer 2 118Figure 4-21 Add/Edit SVN Dialog Box for Layer 3 119Figure 4-22 Add/Edit SVN Dialog Box for Layer 2 120Figure 4-23 Add Encapsulator 121Figure 4-24 New Encapsulator Screen 121Figure 4-25 Adding Encapsulator to Network 122Figure 4-26 Adding Processor Node 123Figure 4-27 Processing Node Dialog Box 123Figure 4-28 Encapsulator Dialog Box in Edit Mode 124Figure 4-29 Viewing Processing Nodes 125Figure 5-1 Network Dialog Box 129Figure 5-2 Persistent Multicast Group Dialog Box for a Network 130Figure 5-3 iBuilder Line Card Type Selections 131Figure 5-4 New Transmit Line Card Dialog Box 132Figure 5-5 New Receive Line Card Dialog Box 137Figure 5-6 Single Channel TDMA Receive Mode Traffic Slot Warning 138Figure 5-7 Line Card Receive Properties: Multiple Channel Modes 139Figure 5-8 Adding an Rx Line Card: Select Carrier Dialog Box 140Figure 5-9 Adding a DLC/ULC Rx Line Card: Select Carrier Dialog Box 140Figure 5-10 Viewing Other Assigned Upstream Carriers 141Figure 5-11 Associating an SCPC Return Channel with a VNO User Group 141Figure 5-12 Removing a Line Card from an Inroute Group 142Figure 5-13 Removing a Line Card from the Hub RFT 142Figure 5-14 Deactivating a Line Card 143Figure 5-15 Setting a Line Card to Standby 143Figure 5-16 Swapping the Downstream Carriers: Initial Configuration 144Figure 5-17 Selecting the New Alternate Downstream Carrier 145Figure 5-18 Selecting the New Primary Downstream Carrier 145Figure 5-19 New Standby Line Card Dialog Box 148Figure 5-20 Sample Chassis Configuration 150Figure 5-21 Manage Line Card Redundancy Dialog Box: By Standby View 150Figure 5-22 Manage Line Card Redundancy Dialog Box: By Active View 151Figure 5-23 Assigning a Warm Standby Line Card 152Figure 5-24 Assigning a Cold Standby Line Card 153Figure 5-25 Removing a Cold Redundancy Relationship 155Figure 5-26 Choosing a New Active Line Card During Line Card Swap 155Figure 5-27 Line Card Swap Event Sequence 156Figure 5-28 Inroute Group Relationships in a TDMA Network 158Figure 5-29 Inroute Group Information Tab 160Figure 5-30 Carrier Grooming Pop-Up 161Figure 5-31 Assign Hub to Inroute Group Dialog Box 162

Figure 5-32 Adding or Cloning an IGC 163Figure 5-33 Editing the New IGC 163Figure 5-34 Inroute Group Composition Dialog Box 164Figure 5-35 Selecting the MODCOD of an Adaptive Carrier in an IGC 165Figure 5-36 Inroute Group Uplink Control Tab 166Figure 5-37 DVB-S2 Configuration Dialog Box 170Figure 6-1 Remote Information Tab 176Figure 6-2 Detected Telnet access from local host only Dialog Box 179Figure 6-3 Remote Information Tab: Transmit and Receive Parameters for TDMA Remote 180Figure 6-4 Remote Information Tab: Transmit and Receive Parameters for SCPC Remote 181Figure 6-5 SCPC Initial Power Dialog Box 181Figure 6-6 Remote Information Tab: Customer and Distributor Parameters 182Figure 6-7 Add Customers Dialog Box 183Figure 6-8 Customers Dialog Box 183Figure 6-9 Entering Customer Parameters 184Figure 6-10 Sample VLAN Network Layout 185Figure 6-11 Remote IP Config Tab: Interface Configuration 186Figure 6-12 Remote IP Config Tab: Adding Layer 3 SVN 188Figure 6-13 Remote IP Config Tab: DNS Configuration 188Figure 6-14 Remote IP Config Tab: DHCP Configuration 190Figure 6-15 Remote IP Config Sub-Tabs 191Figure 6-16 Remote IP Config Tab: Routes Sub-Tab 191Figure 6-17 Remote IP Config Tab: Static Routes Sub-Tab 192Figure 6-18 Add Static Route dialog Box 192Figure 6-19 Deactivating a Remote 193Figure 6-20 Remote IP Config Tab: Port Forwarding Sub-Tab 194Figure 6-21 Add Port Forwarding Dialog Box 194Figure 6-22 Remote IP Config Tab: GRE Tunnels Sub-Tab 195Figure 6-23 GRE Tunnel Dialog Box 195Figure 6-24 Remote IP Config Tab: Multicast Group Sub-Tab 196Figure 6-25 Persistent Multicast Group Dialog Box 196Figure 6-26 Adding a Layer 3 SVN 197Figure 6-27 Layer 3 Tab with Default VLAN Selected 199Figure 6-28 Layer 3 Tab with User SVN Selected 200Figure 6-29 Remote Switch Tab 202Figure 6-30 SVN/VLAN ID Assignment 203Figure 6-31 Dedicating a Port to a VLAN 204Figure 6-32 Switch Tab with Dedicated VLAN 204Figure 6-33 Reconfiguring a Port with Assigned VLANs as a Trunk 205Figure 6-34 Selecting the Same Switch Setting for All Ports 205

Figure 6-36 Ports Tab 207Figure 6-37 Port Configuration Pane 208Figure 6-38 VLAN Configuration Pane 210Figure 6-39 Assign VLANs Pop-Up Window 211Figure 6-40 Remote QoS Tab 213Figure 6-41 Remote QoS Tab: QoS Profiles 214Figure 6-42 Remote QoS Tab: Selecting a Filter Profile 214Figure 6-43 Remote QoS Tab: QoS Profile Select Dialog Box 215Figure 6-44 Remote QoS Tab: Multiple Service Profiles Assigned 216Figure 6-45 Selecting an Upstream Remote Profile for an SCPC Remote 217Figure 6-46 Remote QoS Tab: Upstream and Downstream Rate Shaping 217Figure 6-47 Configuring Active, Idle and Dormant States 219Figure 6-48 Configuring Remote Adaptive Parameters 221Figure 6-49 Remote QoS Tab: EIR and MODCOD Parameters 222Figure 6-50 Remote QoS Tab: Downstream Distributor 223Figure 6-51 Remote Geo Location Tab: Settings for Stationary Remotes 224Figure 6-52 Remote Geo Location Tab: Settings for Mobile Remotes 224Figure 6-53 Remote VSAT Tab 227Figure 6-54 Remote VSAT Tab with SeaTel ABS Fields 229Figure 6-55 LNB Dialog Box: Selecting DC Voltage 230Figure 6-56 LNB Dialog Box: Enabling 22 kHz Tone 230Figure 6-57 Remote VSAT-2 Tab 232Figure 6-58 QoS Application: Multicast Fast Path Stream Number 234Figure 6-59 Remote L2oS Tab 235Figure 6-60 Adding Layer 2 SVN 237Figure 6-61 CE Tag Transparent SVNs 237Figure 6-62 Remote MAC Address Aging Timeout 239Figure 6-63 L2oS Advanced Header Compression 239Figure 6-64 Layer 2 Tab 241Figure 6-65 Adding Layer 2 SVN 243Figure 6-66 CE Tag Transparent SVNs 243Figure 6-67 Mesh Receiver Tab 245Figure 6-68 Mesh Mode Pull-Down Menu 246Figure 6-69 Pool License Properties Tab 247Figure 6-70 Pool License Info Window 249Figure 6-71 Roaming Dialog Box 251Figure 6-72 Roaming Properties Update Dialog Box 252Figure 6-73 Modifying Shared Parameters of All Roaming Remote Instances 253Figure 6-74 iBuilder View Menu: Collapse Details Hierarchy 254Figure 6-75 iBuilder Details View with Collapsed Hierarchy 254Figure 6-76 Modifying Shared Parameters of Multiple Roaming Remotes Instances 255

Figure 6-77 Add Multiple Roaming Remotes Dialog Box 256Figure 6-78 Add Roaming Remotes to Networks Dialog Box 257Figure 6-79 Using the Console beamselector Command 258Figure 6-80 Compression Dialog Box 259Figure 6-81 Enabling L2TP Payload Compression 261Figure 7-1 Group QoS Hierarchy 267Figure 7-2 Application Service Group vs Remote Service Group 269Figure 7-3 Application Service Group Subtree 272Figure 7-4 Remote Service Group Subtree 273Figure 7-5 SCPC Remote Upstream QoS Tree 274Figure 7-6 Remote Based Mode vs Application Based Mode 275Figure 7-7 Selecting the QoS Mode 277Figure 7-8 Selecting the Group QoS View 280Figure 7-9 Group QoS: Group View 281Figure 7-10 Group QoS: Service Profile View 282Figure 7-11 Group QoS: Service Profile-Remote View 283Figure 7-12 Remote Profile View 284Figure 7-13 Group QoS: Remote View 285Figure 7-14 Configured vs Effective MIR and CIR before Estimation 286Figure 7-15 MODCOD Distribution Calculator 287Figure 7-16 Calculating Estimated Information Rate 288Figure 7-17 Calculating Information Rate Distribution 288Figure 7-18 Configured vs Effective MIR and CIR after Estimation 289Figure 7-19 Effective MIR and CIR in the Group View 289Figure 7-20 Competing Service Groups without Allocation Fairness Relative to CIR 290Figure 7-21 Results of Selecting Allocation Fairness Relative to CIR on Parent 291Figure 7-22 Configured vs Effective Cost 291Figure 7-23 Results of Selecting Allocation Fairness Relative to Nominal MODCOD 292Figure 7-24 Selecting Allocation Fairness Relative to Nominal MODCOD 294Figure 7-25 Bandwidth Group Dialog Box 295Figure 7-26 New Bandwidth Group in Group QoS Tree 296Figure 7-27 Service Group Dialog Box 297Figure 7-28 New Application Service Group Inserted Into a Bandwidth Group 298Figure 7-29 QoS Application Dialog Box 299Figure 7-30 Selecting a User Multicast MODCOD 300Figure 7-31 New Application Inserted Into an Application Service Group 301Figure 7-32 QoS Service Profile Dialog Box 303Figure 7-33 Application Properties Dialog Box 305Figure 7-34 Multiple Service Profiles Assigned to a Single Remote 306Figure 7-35 Moving Remotes Between QoS Service Profiles 308

Figure 7-37 Overriding Application Properties on Individual Remotes 311Figure 7-38 Example Downstream Multicast Application Profile and Rule 312Figure 7-39 QoS Application Dialog Box: Selecting Multicast Fast Path 312Figure 7-40 Selecting a Fast Path Application Profile for a Multicast Application 313Figure 7-41 Opening the Multicast Service Profile View 314Figure 7-42 Inserting a Multicast Service Profile into the Multicast Service Group 314Figure 7-43 Selecting a Fast Path Application for a Multicast Service Profile 315Figure 7-44 Assigning a Multicast Fast Path Service Profile to Remotes 315Figure 7-45 Remote Profiles Folder in iBuilder Tree 316Figure 7-46 Remote Profile Dialog Box 317Figure 7-47 Adding a Remote Profile 319Figure 7-48 Application Dialog Box 320Figure 7-49 Rearranging Applications 321Figure 7-50 Inserting an Application Profile into an Application 321Figure 7-51 Rearranging Application Profiles 321Figure 7-52 Assigning a Remote Service Group on the Remote QoS Tab 322Figure 7-53 Moving Remotes Between Remote Service Groups 324Figure 7-54 Assigning Remote Profiles in the Remote Profile View 325Figure 7-55 Dragging a Remote Between Remote Profiles 325Figure 7-56 Determining Virtual Remote Numbers for Remote Applications 326Figure 7-57 Defining the Full Trigger CIR Custom Key 327Figure 7-58 Creating a QoS Group Profile 330Figure 7-59 Viewing Properties of QoS Group Members 331Figure 7-60 iBuilder Tree: QoS Group Profile Folders 331Figure 7-61 Copying a QoS Group Profile 332Figure 7-62 Modifying a QoS Group Profile 333Figure 7-63 Selecting a QoS Group Profile to Apply 335Figure 7-64 Viewing Properties of QoS Group Members 336Figure 7-65 QoS Folders in iBuilder Tree 337Figure 7-66 Preconfigured Downstream Filter Folders 337Figure 7-67 New Profile in iBuilder Tree 338Figure 7-68 Clone As Dialog Box 339Figure 7-69 Application Profile Dialog Box 340Figure 7-70 Add Service Level Dialog Box 341Figure 7-71 Service Profile Rules Pane 342Figure 7-72 Filter Profile Dialog Box 343Figure 7-73 Add Filter Dialog Box 344Figure 7-74 Application Profile Rules Pane 345Figure 7-75 Selecting and Clearing the Show Protocols Name Check Box 345Figure 7-76 Adding a Rule to a Profile 346Figure 7-77 Configuring an IPv6 Packet Classifier (L2oS Only) 347

Figure 8-1 Chassis Dialog Box: New 20-Slot Chassis 353Figure 8-2 Chassis Dialog Box: 20-Slot Chassis with Licensed Slots 353Figure 8-3 Chassis Dialog Box: Selecting Assign Hub 353Figure 8-4 Assigning a Line Card to a Chassis Slot 354Figure 8-5 Chassis Dialog Box: Four-Slot Chassis 355Figure 8-6 Chassis Dialog Box: Four-Slot Chassis with Licensed Slots 356Figure 8-7 Turning On/Off the 10 MHz Reference on a Four-Slot Chassis 357Figure 8-8 Sharing a Hub Chassis Among Multiple Network Management Systems 358Figure 8-9 Determining a Server MAC Address 360Figure 8-10 para_cfg.opt with Licensed Chassis 361Figure 8-11 para_cfg.opt Reconfigured to Share Slots 1 and 2 361Figure 8-12 Locating the Chassis IP Address in para_cfg.opt 364Figure 9-1 Activating a Remote 365Figure 9-2 Moving a Remote Between Networks or Inroute Groups 367Figure 9-3 Moving a Remote from an Inroute Group to an SCPC Line Card 369Figure 10-1 Changes Pending Icons 372Figure 10-2 Viewing and Deleting Remotes 373Figure 10-3 Options File Viewed in Notepad 374Figure 10-4 Multiple Configurations Retrieve Dialog Box 375Figure 10-5 Save As Dialog Box 376Figure 10-6 Comparing the Active and Latest Configurations 377Figure 10-7 Comparing Configurations: Differences Only 378Figure 10-8 Automated Configuration Downloader Dialog Box 379Figure 10-9 Viewing the Download Status 380Figure 10-10 Global NMS Options Files 386Figure 11-1 Multicast Download Dialog Box 389Figure 11-2 Package Section 390Figure 11-3 Modems Section 391Figure 11-4 Download Parameters Section (Remote Groups) 393Figure 11-5 TCP Download Dialog Box 396Figure 11-6 Selection Section 397Figure 11-7 Targets Section 398Figure 11-8 Options Section 400Figure 11-9 Revision Server Duty Cycle 402Figure 11-10 Revision Server Dialog Box 404Figure 11-11 Revision Server Realtime Display Menu 405Figure 11-12 Revision Server: Stop All 406Figure 11-13 Revision Server: Start Highlighted 406Figure 11-14 Revision Server: Stop Highlighted 407Figure 11-15 Selecting Revision Server Status from the View Menu 407

Figure 11-17 Revision Server Details Display 409Figure 12-1 Chassis Dialog Box 413Figure 12-2 Tera Terminal Serial Port Setup Dialog Box 414Figure 12-3 laninfo Command Output 414Figure 12-4 iSite Main Screen 416Figure 12-5 Creating a New Element in the iSite Tree 416Figure 12-6 iSite Login Dialog Box 417Figure 12-7 Download Package Dialog Box 418Figure 12-8 Line Card Packages 419Figure 12-9 Assigning the Downstream Carrier Power 422Figure 13-1 Group Dialog Box 426Figure 13-2 Group Dialog Box: Modifying a User Group 427Figure 13-3 Setting a VNO Element to Visible with Create Permission 428Figure 13-4 Setting a VNO Element to Visible Only 428Figure 13-5 Setting a VNO Element to Owned 429Figure 13-6 Setting Rate Limits for User Groups 429Figure 13-7 Making an Element Visible to Multiple VNOs 430Figure 13-8 Setting Element Permissions for a VNO 431Figure 13-9 Selecting a New VNO Owner for an Element 431Figure 13-10 VNO Full View: Owned Slots vs Visible Slots 432Figure 13-11 HNO and VNO Views of Chassis Modify Screen 433Figure 13-12 Chassis Modify: Attempting to Assign an Occupied Slot 434Figure 13-13 Granting Chassis Rights to a VNO 435Figure 13-14 Expanded Chassis in VNO Tree 435Figure 13-15 Granting Control of Chassis Slots to a VNO 436Figure 13-16 VNO View of Manage Line Card Redundancy Screen 436Figure 13-17 VNO Full View: SCPC Return Channels Shared by two VNOs 437Figure 13-18 Setting Ownership of an SCPC Return Channel 438Figure 13-19 Line Card Dialog Box: VNO User Selecting Configure Carriers 439Figure 13-20 VNO with Network Visibility and GQoS Node Ownership 440Figure 13-21 VNO Network Menu with Owned GQoS Nodes but No Network Access 441Figure 13-22 VNO with Network Write Access and GQoS Node Ownership 441Figure 13-23 VNO Network Menu with Owned GQoS Nodes and Write Access to Network 442Figure 13-24 VNO Ownership of Partial Bandwidth Pool 442Figure 13-25 VNO View of Partially-Owned Bandwidth Pool 443Figure 13-26 Request Property Access for GQoS Nodes 444Figure 13-27 Group Dialog Box: Viewing GQoS Nodes 445Figure 13-28 Selecting VNO Permissions for GQoS Nodes 446Figure 13-29 A Visible Bandwidth Group 446Figure 13-30 An Owned Service Group 446Figure 13-31 VNO View of the Group QoS Tree 447

Figure 13-32 Setting VNO Visibility for a QoS Profile 448Figure 13-33 Enabling the Create Permission on a QoS Folder for a VNO User Group 449Figure 13-34 Enabling the Write Permission for a QoS Profile 450Figure 13-35 User Dialog Box: Adding a User 451Figure 13-36 Change Password Dialog Box 451Figure 13-37 User Dialog Box: Cloning a User 453Figure 13-38 Active Users Pane 455Figure 14 Opening the Active Users Pane from the View Menu 455Figure 15 User Account Options from the Active Users Pane 455Figure 13-1 Change Password Dialog Box 456Figure 13-2 Detected Default Password Dialog Box 456Figure 13-3 Message Displayed if Another User Has Modified the Configuration 460Figure 14-1 Configuring the Adaptive Parameters for a Remote 463Figure 14-2 Configuring an Upstream TDMA Carrier as Adaptive 464Figure 14-3 Selecting the Payload Block Size for Adaptive and Static Carriers 464Figure 14-4 Enabling Superburst for TDMA Upstream Carrier 464Figure 14-5 Removing Existing Carriers from an Inroute Group 466Figure 14-6 Replacing an Upstream Carrier on a Single Channel Line Card 466Figure 14-7 Selecting Configure Carriers on a Multichannel Line Card 466Figure 14-8 Replacing Upstream Carriers on a Multichannel Line Card 467Figure 14-9 Assigning the New Upstream Carrier to the Inroute Group 467Figure 14-10 Changing the MODCOD of an Adaptive Carrier for an IGC 468Figure 14-11 Setting the Adaptive Parameters of an Inroute Group 469Figure 14-12 Adding an IGC 469Figure 14-13 Configuring Adaptive MODCODs for Remaining IGCs 469Figure 14-14 Configuring Adaptive UCP Parameters 470Figure 14-15 Checking the Remote TDMA Initial Power 471Figure 14-16 Checking and Modifying the Remote TDMA Maximum Power 472Figure 14-17 Clicking the Carrier Grooming (Debug Mode) Check Box 474Figure 14-18 Lock to Inroute for Carrier Grooming 475Figure 14-19 Unlock the Remotes? Dialog Box 475Figure 15-1 Elements of a TRANSEC Network 479Figure 15-2 Enabling TRANSEC for an Existing Network 480Figure 15-3 Automated Configuration Downloader Dialog Box 481Figure A-1 Sample Distributed NMS Configuration 486Figure A-2 Upstream Application Dialog Box 496Figure A-3 Edit Rule Dialog Box 497Figure B-1 Logging On to the NMS Server 504Figure B-2 Initial CA Foundry Menu 504Figure B-3 Exiting the CA Foundry 504

Figure B-5 Configuring the New Certificate Authority 505Figure B-6 Logging On to a Certificate Authority 506Figure B-7 CA Foundry Status Line 506Figure B-8 Certificate Authority Connected to a Host 507Figure B-9 Warning Message when Disabling Authentication 508Figure B-10 Flushing a Host 510Figure B-11 CA Foundry Issuing a New X.509 Certificate 510Figure B-12 Determining the Derived ID in iBuilder 511Figure B-13 Determining Certificates Issued by a CA 511Figure B-14 Listing of Issued Certificates 511Figure B-15 Revoking a Certificate 512Figure B-16 Updating the Chain of Trust 512Figure C-1 getGACCkey Command Example 514Figure C-2 Changing the DCC Key Update Frequency 516Figure C-3 Viewing the ACC Key Data Structure on the Protocol Processor 518Figure C-4 Creating a Secure Connection to a Remote Modem 519Figure C-5 Viewing the Key Roll Data Structure on a Remote Modem 520Figure C-6 ACC Keys After Successful Key Update 520Figure C-7 ACC Keys with Remote Not Updated 520Figure C-8 Determining the Network ID and Protocol Processor ID in iBuilder 521Figure C-9 Identifying the Multicast Blade for a Network 522Figure D-10 Sample GKD Network 525Figure D-11 Verifying that the GKD Package is Installed on a Server 526Figure D-12 Security Folder 527Figure D-13 Creating a New Certificate Authority 527Figure D-14 Certificate Authority Dialog Box 528Figure D-15 GKD Information Tab 529Figure D-16 Created GKD Clusters 529Figure D-17 GKD Node Information Tab 530Figure D-18 GKD Nodes 531Figure D-19 GKD Node Options File with GKD Node Definitions 533Figure D-20 Checking the Status of the GKD Service 534Figure D-21 GKD Cluster Pull-Down Menu 535Figure D-22 Admin Password of Protocol Processor 537Figure D-23 Admin Password in Protocol Processor Options File 537Figure D-24 GKD Node Information Tab 538Figure D-25 kd status Command Examples 539Figure D-26 ks status Command Examples 540Figure D-27 kd clients Command Example 540Figure D-28 kd params Command Example 540Figure D-29 kd keyroll next_update Command Example 541

Figure D-30 Multicast FastPath Encryption Enabled 544Figure D-31 Network Information Tab 544Figure E-1 Two Versions of map.conf 548Figure E-2 OpenAMIP Reflector Definition 551Figure E-3 Gain Dialog Box 552Figure E-4 Remote VSAT Tab Default Fields 553Figure E-5 Selecting a Remote Reflector for ABS 554Figure E-6 Remote Antenna Settings with General ABS Fields 554Figure E-7 OpenAMIP, SeaTel and Orbit SBC Antenna Parameters 555Figure E-8 Changing a Remote’s net_state_timeout 557Figure E-9 latlong Command Example 562Figure E-10 tlev Command Example 563Figure E-11 antenna debug Command Example 564Figure E-12 beamselector list Command Example 566Figure E-13 beamselector switch Command Example 566Figure F-1 Setting the Maximum Speed for Remotes in an Inroute Group 569Figure F-2 Remote Geo Location Tab: Selecting Avionics for COTM Type 570Figure F-3 Determining a Remote’s Inroute ID 573Figure F-4 Determining FEC Blocks per Frame 573Figure G-5 Selecting Protocol Processor Stack to Modify 582Figure G-6 Protocol Processor Custom Tab Pane 582Figure G-7 Hub Side Beam Switch Custom Keys in Different PP Stacks 583Figure G-8 Selecting Protocol Processor Stack to Modify 586Figure G-9 Protocol Processor Custom Tab Pane 587Figure G-10 Hub Side Beam Switch Custom Keys in Different PP Stacks 588Figure G-11 Selecting Protocol Processor Stack to Modify 589Figure G-12 Protocol Processor Custom Tab Pane 589Figure G-13 Selecting Protocol Processor Stack to Modify 591Figure G-14 Protocol Processor Custom Tab Pane 591Figure G-15 Hub Side Beam Switch Custom Keys in Different PP Stacks 592

Table 2-1 Values for allow_default_passwords 17Table 2-1 Toolbar Icons and Functions 32Table 2-2 Configuration States 47Table 5-1 Supported Line Cards 128Table 5-2 Rx-Only Line Card Operating Modes 134Table 5-3 Example: Calculating Operational SNR Thresholds 169Table 6-1 Supported Satellite Routers 174Table 6-1 Availability of Remote QoS Parameters by Service Group Type and Mode 218Table 6-2 Custom Keys for a Stacked LNB Type 230Table 13-1 User Types and Access Privileges 457Table 13-2 Custom Privileges 458Table E-1 Net State Timer Custom Keys 558Table F-1 Minimum Symbol Rates for Upstream Carriers 572Table F-2 Sample rx_acqrange Custom Key Settings 572Table F-3 Guard Bands for SCPC Return Channels 574

Tables

About This Guide

Purpose

The iBuilder User Guide provides detailed instructions for configuring iDirect networks using

the iBuilder client application of the iDirect Network Management System (NMS) For details

on monitoring iDirect networks, see the iMonitor User Guide.

Intended Audience

The iBuilder User Guide is intended for network operators, network architects, and other

personnel who operate or monitor iDirect networks It is not intended for end users or field installers

Contents Of This Guide

This document contains the following major sections:

• The iVantage Network Management System

• iDirect System Overview

• Overview of the Network Management System for iBuilder

• Defining Hub RFT Components and the Satellite

• Defining Network Components

• Defining Networks, Line Cards, and Inroute Groups

• Configuring Remotes

• Configuring Quality of Service for iDirect Networks

• Configuring a Hub Chassis

• Controlling Remotes

• Retrieving and Applying Saved and Active Configurations

• Upgrading Software and Firmware

• Commissioning a Hub Line Card

• Managing User Accounts and User Groups

Document Conventions

• Converting to Adaptive TDMA

• Converting a Network to TRANSEC

• Configuring a Distributed NMS Server

• Using the iDirect CA Foundry

• Managing TRANSEC Keys

• Configuring Networks for Automatic Beam Selection

• COTM Settings and Custom Keys

• Remote Locking

• Configuring Remote and PP Signaled Beam Switching

Document Conventions

This section illustrates and describes the conventions used throughout this document

Convention Description Example

Command Used when the user is required to

type a command at a command line prompt or in a console

Type the command:

Reference Used when referring to text that appears on the screen on a

Graphical User Interface (GUI)

Used when specifying names of commands, menus, folders, tabs, dialogs, list boxes, and options

1 To add a remote to an inroute group, right-click the Inroute Group and select Add Remote

The Remote dialog box has a number of

user-selectable tabs across the top The Information

tab is visible when the dialog box opens

Hyperlink Used to show all hyperlinked text

within a document or external links such as web page URLs

For instructions on adding a line card to the network tree, see Adding a Line Cardon page 108

WARNING: A warning highlights an essential operating or maintenance procedure,

practice, condition, or statement which, if not strictly observed, could result in injury, death, or long term health hazards

CAUTION: A caution highlights an essential operating or maintenance procedure,

practice, condition, or statement which, if not strictly observed, could result in damage to, or destruction of, equipment or a condition that adversely affects system operation

Getting Help

Getting Help

The iDirect Technical Assistance Center (iDirect TAC) and the iDirect Government Technical Assistance Center (iDirectGov TAC) are available to provide assistance 24 hours a day, 365 days a year Software user guides, installation procedures, FAQs, and other documents that support iDirect and iDirectGov products are available on the respective TAC Web site:

• Access the iDirect TAC Web site at http://tac.idirect.net

• Access the iDirectGov TAC Web site at http://tac.idirectgov.com

The iDirect TAC may be contacted by telephone or email:

• iDirect: techpubs@idirect.net

• iDirect Government: techpubs@idirectgov.com

For sales or product purchasing information contact iDirect Corporate Sales at the following telephone number or email address:

• iDX Release Notes

• iDX Software Installation Guide or Network Upgrade Procedure Guide

• iDX iMonitor User Guide

• iDX Technical Reference Guide

• iDX Installation and Commissioning Guide for Remote Satellite Routers

• iDX Features and Chassis Licensing Guide

NOTE: A note is a statement or other notification that adds, emphasizes, or

clarifies essential information of special importance or interest

• iDX Software Installation Checklist/Software Upgrade Survey

• iDX Link Budget Analysis Guide

• Terminal WUI User Guide

• Hub Line Card Specifications Guide

• iDirect Hardware Matrix

• iDirect Software Features Matrix

• NMS Redundancy and Failover

• Satellite Router Installation and Commissioning Guide

• SatManage Integration and Configuration Guide

• Software Installation Guide for New Hubs

• TRANSEC User Guide

• Virtual Server Configuration Guide

• Technical Note on Setting Up Defense and Universal Line Cards

The iVantage Network Management System

iBuilder is a component of the iDirect iVantage Network Management System (NMS) The iVantage NMS is a complete suite of tools for configuring, monitoring, and controlling iDirect satellite networks

The iVantage NMS consists of the following components:

easily add components to your network, change your current configuration, and download configuration and software to network elements The iBuilder Revision Server provides automated management of software and firmware upgrades for your remote modems The iBuilder Group QoS (GQoS) user interface allows advanced network operators a high degree of flexibility in creating subnetworks and groups of remotes with various levels of

service tailored to their network requirements The iBuilder User Guide provides detailed

instructions for using iBuilder to configure and manage your network

historical performance of the network Among its many capabilities, iMonitor allows you

to analyze bandwidth usage; view remote status; view network statistics; monitor

performance of networks, sub-networks and individual network elements; and manage alarms, warnings and network events Alarms, warnings and statistics can be forwarded as SNMP traps All events and performance statistics are automatically archived Data

displayed on the iMonitor GUI can be exported directly into Excel for further analysis A

Network Probe allows detailed investigation of network issues The iMonitor User Guide

provides instructions for using iMonitor

features that aid in the remote commissioning process, including assistance for antenna pointing, antenna look angle calculation, and cross polarization An iSite API is available for custom development Remotes that support the iSite client do not support Web iSite

remote modems, including the Evolution X1, X7 and e150 Web iSite can be used with any supported Web browser; therefore, no client software is required Remotes that support Web iSite do not support the iSite GUI client discussed above

• A Virtual Network Operator (VNO) license enables network operators to view and

manage only their own networks and remotes, independent of other operators delivering services out of the same hub The VNO package makes it possible to scale investments to actual business growth, significantly reducing initial capital equipment expenses

Configuring VNOs is described in the iBuilder User Guide.

• A Customer Network Observer (CNO) license grants filtered read-only iMonitor access,

allowing customers real-time and historical views into their own network performance

while maintaining overall network privacy Configuring CNOs is described in the iBuilder

User Guide.