Nortel Networks NN43001-563 Security passwords

86 System description

WARNING

The Media Card 32-port trunk card does not support Proﬁle 3.

Security passwords

When Telnetinginto the ELAN network interface or using the debug port,

a password must be entered when prompted. Two levels of passwords

are used to prevent unauthorized data access. Unauthorized data access

occurs when an unauthorized individual is able to viewor modify conﬁdential

data, such as employee lists, passwordlists, and electronic mail. This

information can be used to bypass Direct Inward System Access (DISA)

restrictions and avoid charges.

The following are the two levelsof passwords for IP Trunk 3.01 (and later):

•Administrator level

•Technicalsuppor t level

Administrator level

The Administrator level is the most basic levelof password. It provides

unrestricted access to all IP Trunkadministration options and to most of the

IP trunk card level administration options. It does not, however, allow any

type of low-level diagnosticsto be performed.

Technical support level

The Technicalsuppor t levelis for use by Nortel personnel only. Itallows

low-levelmessage monitoringand factory testing.

Nortel Communication Server 1000

IP TrunkFundamentals

NN43001-563 02.01 Standard

Release 5.5 21 December 2007

Copyright© 2007, Nor tel Networks

.

Contents

Main Page Contents New in this Release 15 How to Get Help 17 Overview of IP Trunk 3.01 19 System description 29 Page ITG engineering guidelines 87 Page TM 3.1 management and conguration of IP Trunk 3.01 (and later) 169 Install and congure IP Trunk 3.01 (and later) node 177 Page Provisioning IP Trunk3.01 (and later) in TM 3.1 281 TM 3.1 OA and M using TM 3.1 applications 343 OA and M using the ITG shell CLI and overlays 367 Maintenance 389 Appendix A Patches and advisements 431 Appendix B Cable description and NT8D81BA cable replacement 435 Appendix C Environmental and electrical regulatory data 451 Page Page New in this Release There have been no updates to the document in this release. Other changes Page How to Get Help Getting help from the Nortel web site Getting help over the telephone from a Nortel Solutions Center Getting help from a specialist by using an Express Routing Code Getting help through a Nortel distributor or re-seller Overview of IP Trunk 3.01 Introduction Page Page Directly-routed calls Gatekeeper-routed calls Startup and registration Page IP Trunk 3.01 (and later) and CS 1000S/CS 1000M Page Loss plans and pad values Codec selection IP Trunk 3.01 (and later) requirements Package requirements TM 3.1 Interoperability with the ITG 8-port trunk card Telephonecalls can be made between IP Trunk 3.01 (and later) and ITG Trunk2.x. System description Page IP Trunk 3.01 (and later) application System requirements Hardware components for IP Trunk 3.01 (and later) Page Page Ordering rules and guidelines Ordering rules for an IP Trunk 3.01 (and later) node Ordering rules for IP Trunk3.01 (and later) node expansion Sparing ratios for IP Trunk 3.01 (and later) components IP trunk card description 8051 XAController rmware Card roles Follower Active Leader Backup Leader D-channel IP gateway Page Card combinations Interactions among card functions Active Leader and Follower card interaction Active Leader and Backup Leader interaction Active Leader/Backup Leader and DCHIP card interaction ITG-Pentium 24-port trunk card (NT0961AA) Faceplate indicators, controls, and interfaces Card Status LED Ethernet status LEDs Reset switch PC Card socket Maintenance display Page Media Card 32-port trunk card (NTVQ01BB) NTVQ01BB Hardware Assembly description Faceplate indicators and interfaces Status LED Reset button PC Card slot Ethernet activity LEDs Maintenance display RS-232 maintenance port Backplane interfaces Installation guidelines Software delivery Card upgrades Replacing a CompactFlash PC Card (C:/ drive) Page Page Software upgrade Media Card application identication labels Interoperability with earlier versions of ITG Trunk Fax Tone Detection Conguration ISDN Signaling Link Page Page Inter-card signaling paths Dialing plans Multi-node conguration North American dialing plan Flexible Numbering Plan Electronic Switched Network (ESN5) network signaling Echo cancellation Echo canceller tail delay Page Speech Activity Detection DTMF Through Dial Quality of Service Quality of Service parameters Packet loss Packet delay Delay variation (jitter) Latency Bandwidth Network performance utilities Packet InterNet Groper (PING) Traceroute E-Model End-to-end latency Equipment Impairment factor Fallback to alternate facilities Triggering fallbackto alternate trunk facilities Page Fallback in IP Trunk3.01 (and later) IP Peer and Qos Return to the IP network Type of Service Page Fax support Page Remote Access Per-call statistics support using RADIUS Client Conguration Messaging Start record End record SNMP MIB MIB-2 support IP Trunk 3.01 (and later) SNMP agent Codec proles G.711 G.729AB G.729B G.723.1 (5.3 kbit/s or 6.3 kbit/s) Security passwords Administrator level Technical support level ITG engineering guidelines Page Introduction Audience Equipment requirements Page Scope Network engineering guidelines overview Page Page IP Trunk 3.01 (and later) trafc engineering Estimate voice trafc calculations Page Page Page Calculate the number of IP Trunk 3.01 (and later) ports required Page Calculate number of IP trunk cards required Leader and DCHIP card standard conguration rules Card role DCHIP card role Leader card role Single card role Backup Leader/Follower role Factors that effect the real-time capacity Host module type The number of ports congured on the Leader card, codec selection, and voice sample size Size of the IP Trunk 3.01 (and later) network Endpoint type The Average Hold Time (AHT) and distribution of incoming calls ITG-Pentium 24-Port trunk card Leader 0 and DCHIP card real-time capacity Page Media Card 32-port trunk card Leader 0 and DCHIP card real-time capacity Page Page Calculate Ethernet and WAN bandwidth usage Page Page Silence Suppression engineering considerations Fax engineering considerations Trunk Anti-Tromboning(TAT) and TrunkRoute Optimization (TRO) considerations TATenhancement TATas a method of Improving Voice Quality in a VoIP network TATcall Scenario TATversus TRO WAN route bandwidth engineering Page Page Assess WAN link resources Link utilization Estimate network loading caused by IP Trunk3.01 (and later) trafc Route Link Trafc Estimation Page Enough capacity Insufcient link capacity Other intranet resource considerations Implement QoS in IP networks Trafc mix TCP trafc behavior IP Trunk 3.01(and later) DiffSer v support forIP QoS Queue management Queueing delay Class-based Queueing Buffer management and WRED Use of Frame Relay and ATM services Internet Protocols and ports used by IP Trunk 3.01 (and later) IP Trunk 3.01 (and later) management protocols IP Trunk 3.01 (and later) management LAN ports IP Trunk 3.01 (and later) H.323 VoiceGateway Protocols IP Trunk 3.01 (and later) VoiceGateway Protocols Port numbers used by IP Trunk 3.01 (and later) QoS fallback thresholds and IP Trunk 3.01 (and later) Fine-tune network QoS Further network analysis Components of delay Propagation delay Serialization delay Queuing delay Routing and hop count IP Trunk 3.01 (and later) system delay Other delay components Reduce link delay Reduce hop count Adjust jitter buffer size Reduce packet loss Routing issues Network modeling Time-of-Day voice routing Measure intranet QoS QoS evaluation process overview Set QoS expectations Page Page Page Obtain QoS measurement tools Measure end-to-end network delay Page Measure end-to-end packet loss Adjust PING measurements One-way as compared to roundtrip Adjustment caused by IP Trunk3.01 (and later) processing Late packets Network delay and packet loss evaluation example Other measurement considerations Estimate voice quality Page Page Sample scenarios Page Does the intranet meet expected IP Trunk 3.01 (and later) QoS? IP Trunk 3.01 (and later) LAN installation and conguration Basic setup of the IP Trunk 3.01 (and later) system IP trunk card connections 10/100BaseT Ethernet ports RS-232 serial ports Congure a system with separate subnets for voice and management Subnet congurations Selecting public or private IP addresses Private IP addresses Public IP addresses Single subnet option for voice and management Multiple IP Trunk 3.01 (andlater) nodes on the same ELAN and TLAN segments General LAN considerations ELAN and TLAN network interface half- or full-duplex operation TLAN subnet design Congure the TLAN subnet IP router Priority routing for voice packets Setting up the ELAN subnet How to avoid system interruption Duplex mismatch I/O lter connector IP Trunk 3.01 (and later) DSP prole settings Codec types Payload size Jitter buffer parameters (voice playoutdelay) Silence Suppression parameters (Voice Activity Detection) Disable Silence Suppression at tandem nodes Fallback threshold Setting the QoS threshold for fallback routing Post-installation network measurements Set ITG QoS objectives Intranet QoS monitoring SNMP network management IP Trunk 3.01 (and later) network inventoryand conguration User feedback TM 3.1 management and conguration of IP Trunk 3.01 (and later) Introduction TM 3.1 ITG Engineering rules TM 3.1 network setup guidelines TM 3.1 remote access conguration Page TM 3.1 PC description TM 3.1 PC hardware and software requirements Hard drive requirements Page Page Install and congure IP Trunk 3.01 (and later) node Page Introduction Before you begin Installation procedure summary Page ESN installation summary Create the IP Trunk 3.01 (and later) Installation Summary Sheet Channel Identier planning Preferred ISL channel numbering Single card, sequential numbering, no gaps ITG-Pentium24-por t trunk card Single card, sequential numbering, no gaps Media Card 32 port trunk card Page Twocards, sequential numbering, gap left for expansion Page Incorrect ISL channel numbering plans Gaps in ISL channel numbering sequence Decreasing channel numbering sequence Overlapping channel numbers Install and cable IP Trunk 3.01 (and later) cards Card installation procedure Page Page Install NTCW84JA Large System I/O Panel 50-Pin lter adapter Remove existing I/O panel lter adapter Install NTMF94EA and NTCW84KA cables Install the NTCW84KA cable (for DCHIP cards) Install the NTMF94EA cable (for non-DCHIP cards) Install shielded TLAN network interface cable For DCHIP cards For non-DCHIP cards Install shielded ELAN network interface cable For DCHIP cards For non-DCHIP cards D-channel cabling for the NT0961AA ITG-Pentium 24-Port trunk card Required cables and lters for Large Systems Congure NT6D80 MSDL switches Install lter and NTND26 cable (for MSDL and DCHIP cards in same Large System equipment row) Page Install lter and NTND26 cable (for MSDL and DCHIP cards in different Large System equipment rows) Small System cable installation Install the serial cable Cabling for the Media Card 32-port trunk card ELAN and TLAN network interfaces Page ITG Card ELAN/TLAN Adapter (L-adapter) Page Page Page RS-232 maintenance port NTMF29BA DCHIP cable DCHIP cable routing, Large Systems NTMF29BA/NTND26AA cable routing NTMF04BA MSDL extension cable DCHIP Cable Routing Meridian 1 Option 11C Cabinet/CS 1000M Cabinet NTWE04AC/AD SDI/DCH Meridian 1 Option 11C Cabinet/CS 1000M Cabinet extension cable NTAK19BAfour-port SDI/DCH cable Other components Media Card 32-port trunk card modem connection Congure IP Trunk 3.01 (and later) data Congure the ISL D-channel on the system for the DCHIP card forIP Trunk 3.01 (and later) Page Use LD 17 to congure the ISL D-channel for the DCHIP card in Small Systems. Page Congure ISDN feature in Customer Data Block Congure IP Trunk 3.01 (and later) TIE trunk routes Page Page Page Congure Media Card 32-port and ITG-Pentium 24-port trunk cards and units for IP Trunk Route Page Page Congure dialing plans within the corporate network Make the IP Trunk 3.01 (and later) the rst-choice,least-cost entry in the Route List Block Turnon Step Back on Congestion for the IP Trunk 3.0 (and later) trunk route Turn off IP Trunk3.01 (and later) route during peak trafc periods on the IP data network ESN5 network signaling Special dial 0 ESN translations Use IP Trunk 3.01 (and later) route as rst choice for Group 3 fax Use the traditional PSTN for general modem trafc IP Trunk3.01 (and later) must have SBOC=RRA for QoS fallback to work. Disable the Media Card 32-port and ITG-Pentium 24-port trunk cards Congure IP Trunk 3.01 (and later) data in TM 3.1 Add an IP Trunk 3.01 (and later) node in TM 3.1 manually Add an IP Trunk 3.01 (and later) node and congure general node properties Single vs. separate TLAN and ELAN subnets Congure Network Connections Congure card properties Page Page Page Congure DSP proles for the IP Trunk 3.01 (and later) node Page Page Change default DiffServ/ToS value for Control and Voice Congure SNMP Traps/Routing and IP addresses tab Page Page Congure Accounting server Control node access with SNMP community name strings Exit node property conguration session Create the IP Trunk 3.01 (and later) node dialing plan using TM 3.1 Page Congure Digits dialed tab Page Page Retrieve the IP Trunk3.01 (and later) node dialing plan using TM 3.1 Page Transmit IP trunk card conguration data fromTM 3.1 to the IP trunk cards Before conguration data is transmitted Congure the Leader 0 IP address Page Backup Leader installation for IP Trunk3.01 (and later) Page Transmitthe node properties, card properties and dialing plan to Leader 0 Page Verify installation and conguration Observe IP Trunk 3.01 (and later) status in TM 3.1 Page Transmitcard properties and dialing plan to Leader 1 and Follower cards Congure date and time for the IP Trunk 3.01 (andlater) node Change the default ITG shell password to maintain access security Change default ESN5 prex for non-ESN5 IP telephony gateways Check and download IP trunk card software in TM 3.1 Page Transmit new software to the IP trunk cards Page Upgrade the DCHIP PC Card Congure TM 3.1 Alarm Management to receive SNMP traps from the IP trunk cards Page Page Make test calls to the remote nodes (ITG Trunk or IP Trunk) Provisioning IP Trunk 3.01 (and later) in TM 3.1 Overview Trunk3.01 (and later) application. Add a site and system Add a site Page Change an existing site Page Delete a site Page Page Add a system Page Page Page Page Page Page Change an existing system Page Page Delete a system Page Add an IP Trunk 3.01 (and later) node Page Page Page Page Page Page Page Page Page Edit a node Page Page Page Page Delete a node Page Dene the dialing plan information Non-Gatekeeper-resolved (local) dialing plan Destination node protocol Quality of Service Dialing plan types Page Page Page Page Page Page Page Page Page Page Page Page Complex dialing plans Gatekeeper-resolved endpoints Zones Page Page Use Gatekeeper Zone from TM 3.1 Navigator option Use Independent Gatekeeper option Page Page Page Page TM 3.1 OA and M using TM 3.1 applications Introduction TM 3.1 OA and M procedure summary Delete a node Delete an IP trunk card Database locking ITG Card Properties window ITG Card Properties Maintenance window Congure date and time for the IP Trunk 3.01 (and later) node ITG Card Properties Conguration window DSP maintenance window D-channel maintenance Transmit conguration data Page Page Add an IP Trunk 3.01 (and later) node on TM 3.1 by retrievingan existing node Retrieve and add an IP Trunk 3.01 (and later) node for administration purposes Page Retrieve and add an IP Trunk 3.01 (and later) node formaintenance and diagnostic purposes Conguration audit Retrieve IP Trunk 3.01 (and later) conguration information from the IP Trunk 3.0 (and later) node Schedule and generate and view IP Trunk3.01 (and later) OM repor ts Page Additional administrative functions MAT Installation MAT User administration and security Backup and restore operations Alarm Notication System commands LD 32 Disable the indicated IP trunk card Todisable the indicated IP trunk card in LD 32, use the following command: Disable the indicated IP trunk card when idle Todisable the indicated IP trunk card when idle in LD 32, use the following Enable an indicated IP trunk card Disable an indicated IP trunk card port Enable an indicated IP trunk card port Display IP trunk card ID information Display IP trunk card status Page Page OA and M using the ITG shell CLI and overlays Introduction ITG Shell OA and M procedure summary Access the ITG shell through a maintenance port or Telnet Connect a PC to the card maintenance port Telnet to an IP trunk card through the TM 3.1 PC Change the default ITG shell password to maintain access security Reset the default ITG shell password Page Download the ITG operational measurements through the ITG shell Reset the operational measurements Display the number of DSPs Display IP Trunk 3.01 (and later) node Properties Display IP Trunk 3.01 (and later) Gatekeeper status Transfer les throughthe Command Line Interface Software update and le transfer commands Software upgrade Generic le transfer: Conguration le transfer OM trace and log les commands Upgrade IP trunk card software using FTP Upgrade IP trunk card software by PC Card Upgrade IP trunk card software through an FTP host Backup and restore from the CLI Backup from the CLI Restore from the CLI Recover the SNMP community names IP Trunk 3.01 (and later) conguration commands Download the IP Trunk 3.01 (and later) error log System commands LD 32 Page Disable the indicated IP trunk card Todisable the indicated IP trunk card in LD 32, use the following command: Disable the indicated IP trunk card when idle Todisable the indicated IP trunk card when idle in LD 32, use the following Enable an indicated IP trunk card Enable an indicated IP trunk card port Display IP trunk card ID information Display IP trunk card status Display IP trunk card port status Page Maintenance Introduction IP Trunk 3.01 (and later) IP trunk card alarms Page Page Page Page System level maintenance Access the IP trunk card Telnet access Serial access IP trunk card LD commands Page Identify IP Trunk3.01 (and later) trunk routes and IP trunk cards in the system IP trunk card ELAN network interface MAC address and IP address Print the IP Trunk 3.01 (and later) trunk route and trunk designators TM 3.1 maintenance commands Multi-purpose Serial Data Link (MSDL) commands Simple Network Management Protocol (SNMP) Error traps Table59 "Error events" (page 399) shows the error events that cause the SNMP agent to issue a trap. Other traps TRACE and ALARM/LOG Call Tracing (TRACEFile Command) ITG shell command set Page Page Page Page Page Page IP trunk card self-tests Card LAN BIOS self-test Base code self-test Field-Programmable Gate Array (FPGA) testing Outgoing calls attempted/completed mismatch IP Trunk 3.01 (and later) upgrades Application upgrade Maintenance or bug x upgrade Patching tool Page Page Page Patch Directories Flash storage upgrades Software upgrade mechanisms Upgrade software using TM 3.1 Page Replace an IP trunk card Page Page Determine IP trunk card software release Transmit card properties and dialing plan Backup and restore procedures IP trunk card TM 3.1 Command Line Interface Fault clearance procedures DSP failure Card failure DCH failure DCH link failure PC Card failure DCHIP card failure Power loss Media Card 32-port trunk card faceplate maintenance display codes Page ITG-Pentium 24-port trunk card faceplate maintenance display codes Page Page System performance under heavy load Message: PRI241 Normal cause Normal resolutions Page Page Appendix A Patches and advisements Introduction IP Trunk 3.00.53 patches MPLR17662 MPLR17346 IP Trunk 3.01.22 patches MPLR18142 MPLR18157 Interoperability with IP Trunk 3.01 (MPLR17662 patch) Page Page Appendix B Cable description and NT8D81BA cable replacement Introduction NTMF94EA ELAN, TLAN and Serial Port cable NTCW84KA ELAN, TLAN, DCH and serial cable Page NTAG81CAFaceplate Maintenance cable NTAG81BAMaintenance Extender cable NTCW84EA DCH PC Card pigtail cable Page NTMF04BA MSDL extension cable NTCW84LA and NTCW84MA upgrade cables Page Prevent ground loops on connection to external customer LAN equipment Replace cable NT8D81BA with NT8D81AA Page Tools list Remove the NT8D81BA cable Install NTCW84JA lter and NT8D81AA cable Page Appendix C Environmental and electrical regulatory data Environmental specications Mechanical conditions Electrical regulatory standards Safety Electromagnetic Compatibility (EMC) Page Page Page Appendix D Subnet mask conversion from CIDR to dotted decimal format Page Appendix E CLI commands Page Appendix F Congure a Netgear RM356 modem router for remote access Introduction Security features of the RM356 modem router Install the RM356 modem router Congure the TM 3.1 PC to communicate with a remote system site through a modem router Congure the RM356 modem router through the manager menu Page Page Page RM356 modem router manager menu (application notes on the ELAN subnet installation) Page Page Page Page Enter Menu Selection Number: 1 Appendix G Upgrade an ITG Trunk 1.0 node to support ISDN signaling trunks Upgrade procedure summary Before you begin Page Install the DCHIP hardware upgrade kit Install the DCHIP I/O Panel breakout cable from the upgrade kit Upgrade the ITG 8-port trunk card ITG basic trunk software to ITG/ISL trunk software Step 1 - Remove ITG Trunk 1.0 conguration les Page Step 2 - TransmitITG Trunk 2.0 software to the ITG 8-port trunk cards Page Remove ITG Trunk 1.0 conguration data from Meridian 1 Congure the Meridian 1 ITG/ISL trunk data Upgrade considerations Page Verify ROM-BIOS version Upgrade Troubleshooting TM 3.1 cannot refresh view (card not responding) How to upgrade software using the ITG shell Page Index Symbols/Numerics A B C E F G H I J L M N O S T U V W Page Nortel Communication Server 1000 IP Trunk Fundamentals