TechLibrary

ContentIndex

[+] Expand All

[-] Collapse All

TCA8000 and TCA8500 Timing Server Installation and Configuration Guide
- Copyright and Trademark Information
- Table of Contents
- List of Figures
- List of Tables
- About the TCA8000 and TCA8500 Timing Server
  - Documentation Conventions
  - Requesting Technical Support
- TCA8000 and TCA8500 Timing Server Overview
  - TCA8000 and TCA8500 Timing Server Description
    - TCA8000 and TCA8500 Timing Server Description
    - TCA8000 and TCA8500 Chassis Overview
- Installing and Setting Up a TCA8000 or TCA8500 Timing Server
  - Installing and Setting Up a TCA8000 or TCA8500 Timing Server
- Configuring and Upgrading the TCA8000 or TCA8500 Timing Server
  - Configuring a TCA8000 or TCA8500 Timing Server
    - TCA User Accounts Overview
      - Guidelines for User Account Management
    - Dynamic SSL Certificate Overview
    - Accessing the User Interface
    - Requirements for Using the Graphical User Interface
    - Accessing the Graphical User Interface
    - Changing/Resetting the Login Password for Admin User
    - Changing the IP Address
    - Setting Precision Time Protocol (PTP) Parameters
    - Setting NTP Parameters
    - Configuring Alarms
    - Configuring Traps
    - Managing TCA User Accounts
    - Changing the Login Password for Read/Write User
    - Configuring User Authentication through RADIUS
    - Configuring RADIUS Accounting
    - Specifying Recipients for Alarm E-Mail Notifications
      - Adding a User to the E-Mail List
      - Removing a User from the Alarm Event Recipient List
    - Resetting Factory Defaults
    - Stopping and Restarting the TCA8000 or TCA8500 Timing Server
  - Upgrading the TCA8000 and TCA8500 Software
- Understanding the TCA8000 and TCA8500 Graphical User Interface (GUI)
  - Understanding the TCA8000 and TCA8500 Login Page
  - Understanding the TCA8000 and TCA8500 System Status Page
    - Understanding System LEDs
      - Port LEDs
      - IEEE 1588-2008 Sync LED
    - Status Page Description
    - Accessing the Status Page
    - Understanding the Status Page
  - Understanding the TCA8000 and TCA8500 Config Page
    - Config Page Description
    - Accessing the Config Page
    - Understanding the Config Page
  - Understanding the TCA8000 and TCA8500 Admin Page
    - Admin Page Description
    - Accessing the Admin Page
    - Understanding the Admin Page
  - Understanding the TCA8000 and TCA8500 Log Page
    - Log Page Description
    - Accessing the Log Page
    - Understanding the Log Page
- Troubleshooting a TCA8000 or TCA8500 Timing Server
  - Troubleshooting a TCA8000 or TCA8500 Timing Server
    - Event States and Alarm Types
    - Troubleshooting the TCA8000 or TCA8500 Timing Server Using the Event Log
- Appendixes
  - Using Telnet with the TCA8000 and TCA8500 Timing Servers
    - Accessing the Timing Server Using the CLI
    - Changing the IP Address of the Timing Server using the CLI
    - Resetting the Passwords of Both Admin User Account and Enable Mode to Factory Defaults
    - Using the CLI to View Status and Configuration Parameters
      - Options That You Can View in the CLI
      - Viewing an Option in the CLI
    - Using the CLI to Configure Timing Server Parameters
      - Elements that You Can Configure in the CLI
      - Using the CLI to Configure the Timing Server
    - Accessing the Timing Server Using SSH
  - Using the CLI to Configure PTP and Network Interface Parameters
    - Server PTP Functions
    - PTP Profile Types
    - CLI Configuration / Status
    - Backup and Restore Commands—PTP
    - Sync Source Selection
      - Configuration Commands
      - Status Commands
    - Ethernet Port Network Configuration
      - Configuration Commands
      - Status Commands
    - VLAN Port Association (optional)
    - Static Route IP (optional)
  - Using the CLI to Configure NTP Parameters
    - NTP Modes
    - Enabling the NTP Support in the Timing Server using the CLI
    - NTP Association Configuration or Status
      - Configuration Commands
      - Status Commands
    - MD5 Key List Configuration or Status
      - Configuration Commands
      - Status Commands
    - Restart and Stop Commands—NTP
  - Using the CLI to Configure User Authentication and RADIUS Accounting
    - User Authentication
      - Configuration Commands
      - Status Commands
    - RADIUS Accounting
      - Configuration Commands
      - Status Commands
  - Specifications
  - Agency Compliance
    - Agency Compliance
  - Cable Specification
    - Console Cable Specification
  - Warranty and Support
- Index
  - Index

admin page
accessing
alarm pane
config pane
description
password pane
service pane
understanding
upgrade pane
agency compliance
alarm-cut-off command
alarms
configuring
event states
types
antenna
mounting
mounting conditions    1, 2
mounting requirements

backup scp command
backup tftp command
backup-unicast scp command
backup-unicast tftp command

clear alarm command
clear all-unicast-entry command
clear authlog command
clear daemon log command
clear eventlog command
clear md5-key-entry command
clear ptp-stat command
clear syslog command
CLI    1
configuring the Timing Server using
options    1
viewing
using to change the IP address
using to view configuration
using to view status
commands
alarm-cut-off
backup scp
backup tftp
backup-unicast scp
backup-unicast tftp
clear alarm
clear authlog
clear daemon log
clear eventlog
clear md5-key-entry
clear ptp-stat
clear syslog
config 1/5MHz
config accounting
config accounting-level
config accounting-server add
config accounting-server del
config alarm-email-receiver
config alarm-profile
config antenna-cable-delay-compensation
config antenna-voltage
config auth-order
config change-password
config cli-banner-file
config cli-banner-text
config cli-timeout
config datetime
config dns0
config dns1
config domain
config dst
config e1 output loopback
config e1 output port
config enable-password
config eth0 auto-nego
config eth0 duplex
config eth0 ip
config eth0 ip-mode
config eth0 speed
config eth1 auto-nego
config eth1 duplex
config eth1 ip
config eth1 ip-mode
config eth1 speed
config gps anti-jamming
config holdover-state
config hostname
config irig-b
config language
config lcd-config
config ntp add broadcast
config ntp add manycast_server
config ntp del
config ntp generate-md5-key-list
config ntp reload-md5-key-list
config password
config protocol-support
config ptp add server
config ptp grandmaster
config ptp start-announce
config radius-server add
config radius-server del
config snmp contact
config snmp readonly-community
config snmp readwrite-community
config snmp-trap add
config snmp-trap del
config snmp-v3user add
config snmp-v3user del
config snr
config ssl-cert
config ssl-key
config static-route add
config static-route del
config sync-src-priority
config sync-src-revertive
config telecom-standard
config timezone
config unsecured-communication-protocols
config user add
config user class
config user del
config user password
config web
config web-mode
config web-timeout
Disable
enable
exit
ftp
halt
help
history
logout
ping
quit
reboot
reset config
reset password
restart ntp
restart ptp
restore scp
restore tftp
restore-unicast scp
restore-unicast tftp
save active-md5-key-list scp
save active-md5-key-list tftp
save scp authlog
save scp daemonlog
save scp eventlog
save scp syslog
save tftp authlog
save tftp daemonlog
save tftp eventlog
save tftp syslog
scp
show accounting-level
show accounting-server
show accounting-status
show alarm all
show alarm E1
show alarm-email-receiver
show alarm-profile
show all-configuration
show auth-order
show authlog
show cli-banner
show daemonlog
show dst-config
show E1 config
show E1 status
show eventlog
show frequency
show gps
show holdover-state
show irig-b
show license
show network
show ntp config
show ntp current-active-md5-key-list
show ntp current-new-md5-key-list
show ntp status
show partition
show protocol-support
show ptp config
show ptp default-dataset
show ptp parent-dataset
show ptp stat
show ptp status
show radius-server
show session
show snmp
show snmp-trap
show snmp-v3 user
show sync-src-priority
show sync-src-revertive
show sysinfo
show syslog
show telecom-standard
show time
show timing-output
show user-history
show users
stop ntp
tftp
tftp license
upload-md5-key-list scp
upload-md5-key-list tftp
compliance
config 1/5MHz command
config accounting
config accounting-level
config accounting-server add
config accounting-server del
config alarm-email-receiver command
config alarm-profile command
config antenna-cable-delay-compensation command
config antenna-voltage command
config auth-order
config change-password
config cli-banner-file
config cli-banner-text
config cli-timeout command
config datetime command
config dns0 command
config dns1 command
config domain command
config dst command
config e1 output loopback command
config e1 output port command
config enable-password command
config eth0 auto-nego command
config eth0 duplex command
config eth0 ip command
config eth0 ip-mode command
config eth0 speed command
config eth1 auto-nego command
config eth1 duplex command
config eth1 ip command
config eth1 ip-mode command
config eth1 speed command
config gps anti-jamming command
config holdover-state
config hostname command
config irig-b command
config language command
config lcd-config command
config ntp add broadcast command
config ntp add manycast_server command
config ntp del command
config ntp generate-md5-key-list command
config ntp reload-md5-key-list command
config page
accessing
description
E1 pane
MD5 pane
network pane
NTP pane
profile pane
PTP pane
RADIUS pane
SNMPv3 pane
timing pane
trap pane
understanding
Users pane
config password command
config protocol-support command
config ptp add server command
config ptp gm announce-receipt-timeout command
config ptp gm disable command
config ptp gm domain command
config ptp gm dscp command
config ptp gm enable command
config ptp gm priority1 command
config ptp gm priority2 command
config ptp gm profile command
config ptp gm two-step command
config ptp grandmaster command
config ptp start-announce command
config ptp unicast add command
config ptp unicast announce-int-range command
config ptp unicast continuous command
config ptp unicast del command
config ptp unicast delay-int-range command
config ptp unicast sync-int-range command
config radius-server add
config radius-server del
config snmp contact command
config snmp readonly-community command
config snmp readwrite-community command
config snmp-trap add command
config snmp-trap del command
config snmp-v3user add command
config snmp-v3user del command
config snr command
config ssl-cert command
config ssl-key command
config static-route add command
config static-route del command
config sync-src-priority command
config sync-src-revertive command
config telecom-standard command
config timezone command
config unsecured-communication-protocols command
config user add
config user class
config user del
config user password
config web command
config web-mode command
config web-timeout command
console cable
specifications
conventions
notice icons
customer support    1, 2
contacting JTAC

depth
dimensions
physical
Disable command
Dynamic SSL certificate
overview

e-mail lists
adding users
removing users
elements
configurable in the CLI
EMC testing
enable command
enable mode password
reset via CLI
reset via GUI
reset via hardware mechanism
environmental specifications
event log
troubleshooting using
event states
exit command

factory defaults
resetting
ftp command

graphical user interface
using

halt command
hardware
returning
height
help command
history command
humidity
operating

IEEE 1588-2008 SYNC LED
input voltage
installation instructions
Timing Server
installation requirements
IP address
assigning
changing (CLI)
changing (web)
reserving

knowledge base

log page
accessing
AuthLog Pane
Daemon Pane
description
EventLog Pane
SysLog Pane
understanding
login class
changing by Admin user
via GUI
login page
accessing
description
understanding
logout command

mounting conditions
minimal
optimal
mounting requirements

notice icons

parameters
configuring (CLI)
password
changing for Admin user
via CLI
via GUI    1, 2
changing for Read-Only user by Admin user
via GUI
changing for Read/Write user by Admin user
via GUI
changing for Read/Write user by Read/Write user
via GUI
reset for Admin user
via CLI
via GUI
via hardware mechanism
physical dimensions
ping command
port LEDs
power
consumption
specifications
PTP
setting parameters

quit command

reboot command
requirements
installing
mounting the antenna
upgrade
reset config command
reset password command
restart ntp command
restart ptp command
restore scp command
restore tftp command
restore-unicast scp command
restore-unicast tftp command
returns
RMA

safety testing
save active-md5-key-list scp command
save active-md5-key-list tftp command
save scp authlog command
save scp daemonlog command
save scp eventlog command
save scp syslog command
save tftp authlog command
save tftp daemonlog command
save tftp eventlog command
save tftp syslog command
scp command
show accounting-level
show accounting-server
show accounting-status
show alarm all command
show alarm E1 command
show alarm-email-receiver command
show alarm-profile command
show all-configuration command
show auth-order
show authlog command
show cli-banner command
show daemonlog command
show dst-config command
show E1 config command
show E1 status command
show eventlog command
show frequency command
show gps command
show holdover-state
show irig-b command
show license command
show network command
show ntp config command
show ntp current-active-md5-key-list command
show ntp current-new-md5-key-list command
show ntp status command
show partition command
show protocol-support command
show ptp config command
show ptp default-dataset command
show ptp parent-dataset command
show ptp stat command
show ptp status command
show radius-server
show session command
show snmp command
show snmp-trap command
show snmp-v3 user command
show sync-src-priority command
show sync-src-revertive
show sysinfo command
show syslog command
show telecom-standard command
show time command
show timing-output command
show user-history
show users
SNMPv3
creating users
specifying contacts
software
upgrading using the CLI
upgrading using the GUI
specifications
console cable
environmental
power
SSH
status page
accessing
alarm pane
description
E1 pane
GPS pane
NTP pane
PTP pane
system pane
timing pane
understanding
stop ntp command
support
support, technical     See technical support
system LEDs
understanding

technical support    1
contacting JTAC
telnet
temperature
operating
storage
tftp command
tftp license command
Timing Server
accessing using the CLI
description
installing
stopping and restarting
troubleshooting
unpacking
visually testing (with GPS)
traps
configuring
creating targets
deleting targets

unpacking the chassis
upgrading     See software
upload-md5-key-list scp
upload-md5-key-list tftp
user account
admin password changing
via CLI
via GUI    1, 2
admin password reset
via CLI
via GUI
via hardware mechanism
creating Read-Only user
creating Read/Write user
deleting Read-Only user
via GUI
deleting Read/Write user
via GUI
guidelines
management
modifying
overview
Read-Only user password changing by Admin user
via GUI
Read/Write user password changing by Admin user
via GUI
Read/Write user password changing by Read/Write user
via GUI
user interface
accessing
requirements for using

warranty
width

Download This Guide

Download this guide: TCA8000 and TCA8500 Timing Server Installation and Configuration Guide

Configuring User Authentication through RADIUS

The TCA 8000 and TCA 8500 Timing Servers support RADIUS server authentication, local authentication, or both based on the configured authentication order to authenticate the user logging in to the Timing Server.

When you configure the authentication order as RADIUS server authentication followed by the local authentication, the Timing Server passes the information about the logging user to the configured RADIUS servers for authentication. If any one of the RADIUS server successfully authenticates the user, then the Timing Server allows the user to login. If all the configured RADIUS servers fail to authenticate the user or configured RADIUS servers are not available, then the Timing Server performs the local authentication and allows the user to login after successful local authentication. The Timing Server blocks the logging user if both RADIUS and local authentication fails.

When you configure the authentication order as local authentication followed by the RADIUS server authentication, the Timing Server performs the local authentication to grant access to the logging user. If the local authentication fails to authenticate the user, then the Timing Server passes the information about the logging user to the configured RADIUS servers for authentication. If any one of the RADIUS server successfully authenticates the user, then the Timing Server allows the user to login. If all configured RADIUS servers fail to authenticate the user, then the Timing Server denies access to the logging user.

When you configure the authentication order as RADIUS server authentication only, the Timing Server passes the information about the logging user to the configured RADIUS servers for authentication. If any one of the RADIUS server successfully authenticates the user, then the Timing Server allows the user to login. If all configured RADIUS servers fail to authenticate the user, then the Timing Server denies access to the logging user. If all configured RADIUS servers are not available, then the Timing Server performs local authentication and allows the user to login after successful local authentication.

When you configure the authentication order as local authentication only, the Timing Server performs the local authentication to grant or deny access to the user logging in to the Timing Server.

Note:

The selection of RADIUS authentication server to authenticate user is based on the order in the RADIUS authentication server list.
The user authentication process is implemented only for the Access Request, Access Reject, and Access Accept messages.
The user authentication process is not supported for shell users.

The user authentication process protects the Timing Server from being accessed by unauthorized persons. The usage of RADIUS authentication servers provides the following advantages:

Management of multiple user credentials on remote machine for detailed logging.
Centralized user information and authentication process at one server.
No loss of user information due to Timing Server damage.

To configure user authentication process:

Click the Config tab.
Locate the RADIUS tab across the top tabs of the Config page. See Figure 19.
Figure 19: Timing Server Config Page—RADIUS Pane (Authentication)
Configure the RADIUS authentication server details.
Click the Save button to save the authentication server configuration.
Select the authentication order.
Click the Apply button to apply the configured authentication order.

The following sections describe RADIUS authentication server configuration and authentication order configuration:

Adding a New RADIUS Authentication Server Entry

To add a new RADIUS authentication server entry to the authentication server list:

Click the Config tab.
Locate the RADIUS tab across the top tabs of the Config page. See Figure 19.
In the Server IP field, enter the IP address of the RADIUS authentication server to be used for user authentication.
In the Port field, enter the port through which the specified RADIUS authentication server is contacted for user authentication.
In the Retry field, enter the number of attempts should be made for contacting the specified RADIUS authentication server.
In the Timeout field, enter the time in seconds till which the Timing Server waits for a response from the specified RADIUS authentication server.
In the Secret Word field, enter the password shared with the specified RADIUS authentication server.
Click the Save button to add the RADIUS authentication server entry in the RADIUS Authentication Servers window and memory.

Deleting a RADIUS Authentication Server Entry

To delete a RADIUS authentication server entry from the authentication server list:

Click the Config tab.
Locate the RADIUS tab across the top tabs of the Config page. See Figure 19.
In the RADIUS Authentication Servers window, click the RADIUS authentication server entry to be deleted.
Click the Delete button to remove the entry from the RADIUS Authentication Server window and memory.

Modifying RADIUS Authentication Server Entry Details

To modify the details of a RADIUS authentication server entry existing in the authentication server list:

Click the Config tab.
Locate the RADIUS tab across the top tabs of the Config page. See Figure 19.
In the RADIUS Authentication Servers window, select the RADIUS authentication server entry to be modified.
Click the Edit button to populate the values of the selected RADIUS authentication server entry in the Server IP, Port, Retry, Timeout, and Secret Word fields.
Modify the populated values.
Click the Save button to save the changes done in the selected RADIUS authentication server entry.

Configuring Authentication Order

To configure the authentication order:

Click the Config tab.
Locate the RADIUS tab across the top tabs of the Config page. See Figure 19.
In the first drop box, select the type of authentication to be performed initially. Select:
- radius—To authenticate the user using the configured RADIUS authentication servers.
- local—To authenticate the user using local settings.
In the second drop box, select the type of authentication to be performed on failure or unavailability of initial authentication. Select:
- radius—To authenticate the user using the configured RADIUS authentication servers.
- local—To authenticate the user using local settings.
Click the Apply button to save the authentication order.