d5 Ueq User Doc 3 0 1 Std(Arris Ipqam d5用户手册)

D5 Universal Edge QAM
User Documentation
Release 3.0.1
Standard
July 22, 2010
2003-2010 ARRIS Group, Inc.
All rights reserved.
Copyright and Trademark Information
ARRIS D5 Universal Edge QAM
The capabilities, system requirements and/or compatibility with third-party products described
herein are subject to change without notice. ARRIS, the ARRIS logo, Auspice, C3, C4, C4c,
Cadant, C-COR, CHP Max, CHP Max5000, ConvergeMedia, Cornerstone, CORWave,
CXM, D5, Digicon, ENCORE, Flex Max, HEMi, Keystone, MONARCH, MOXI, n5,
nABLE, nVision, OpsLogic, OpsLogic Service Visibility Portal, PLEXiS, PowerSense,
QUARTET, Regal, ServAssure, Service Visibility Portal, TeleWire Supply, TLX,
Touchstone, EGT VIPr, VoiceAssure, VSM, and WorkAssure are all trademarks of ARRIS
Group, Inc. Other trademarks and trade names may be used in this document to refer to either
the entities claiming the marks and the names of their products. ARRIS disclaims proprietary
interest in the marks and names of others. Copyright 2010 ARRIS Group, Inc. All rights
reserved. Reproduction in any manner whatsoever without the express written permission of
ARRIS Group, Inc. is strictly forbidden. For more information, contact ARRIS.
STANDARD LICENSE AGREEMENT AND LIMITED WARRANTY
This Standard License Agreement and Limited Warranty (Agreement) applies to all ARRIS manu-
factured or otherwise ARRIS provided products (Products) and the corresponding current and
subsequently provided versions of software or firmware, if any, whether embedded in the Products
or used in conjunction with the Products, (Software). The Product, without the Software, is
referred to in this Agreement as the (Hardware). The Software and Hardware are ARRIS Products
and may be referred to in this Agreement as the (System).
If you (You or Purchaser) and ARRIS Group, Inc. (ARRIS) have entered into a separate written
agreement, then, inconsistent terms between this Agreement and the separate agreement shall be
governed by such separate agreement.
If you do not agree to be bound by this Agreement, please return the Products to the Party from
whom You acquired the Products. Use of the Products shall constitute acceptance of the terms
hereof.
1. License Terms
Subject to the terms herein, ARRIS grants You a royalty-free, non-exclusive, non-transferable,
non-sublicensable license to use the Software with the Products, in binary object code form only.
You may use third party software products or modules supplied by ARRIS solely with the System,
unless the licensing terms of the third party software specify otherwise. You may not disclose the
results of Software performance benchmarks to any third party without ARRIS prior written
consent. All rights not specifically granted to You herein are retained by ARRIS.
2. Restrictions
You and/or any third party agree not to (i) make any copies of the Software, (ii) modify,
decompile, disassemble, separate, reverse engineer or otherwise attempt to derive any source
code from the Software; (iii) transfer the Software to any third party without ARRIS written
consent; (iv) export the Software or any of its underlying technology in contravention of U.S. and
foreign export laws and regulations, or (v) if Products are included, use the Software other than in
connection with the System.
3. Use
The right to use the Software, or any individual feature thereof, may be restricted by a measure of
usage. An expansion beyond a commercially reasonable usage level may require payment of an
additional fee to ARRIS.
4. Software Developed at Private Expense
The Software provided under this Agreement is commercial computer software developed
exclusively at private expense, and in all respects are proprietary data belonging solely to ARRIS
and/or it licensors.
5. Limitations on Liability
NEITHER ARRIS NOR ITS LICENSORS SHALL BE LIABLE FOR INDIRECT, INCIDENTAL, PUNITIVE,
CONSEQUENTIAL, EXEMPLARY, OR SPECIAL DAMAGES UNDER ANY THEORY OF LIABILITY,
WHETHER ALLEGED AS A BREACH OF CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT
LIABILITY OR OTHERWISE AND REGARDLESS OF WHETHER YOU, ANY OTHER SOFTWARE USER,
OR ANY THIRD PARTY SUFFERED SUCH DAMAGES, EVEN IF ARRIS AND/OR ITS LICENSORS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT WILL ARRIS
TOTAL LIABILITY TO YOU OR ANY THIRD PARTY ARISING OUT OF OR PURSUANT TO THIS
AGREEMENT EXCEED THE AMOUNT PAID BY PURCHASER TO ARRIS FOR THE SOFTWARE AND/
OR SYSTEM.
6. Term & Termination
This Agreement takes effect upon Your acceptance of the terms hereof or Your first use of the
Software and will remain in force until terminated in accordance hereunder. ARRIS may terminate
this Agreement upon fifteen (15) days prior written notice upon Your material breach of this
Agreement if such breach is not cured within such fifteen (15) day period. Notwithstanding the
foregoing, this Agreement shall terminate immediately upon Your breach of any of the provisions
of Section 2 above.
7. Ownership
Title, ownership rights, and all intellectual property rights in and to the Software and/or System
and any accompanying materials or documentation, and any copy of the foregoing, shall remain
the sole and exclusive property of ARRIS and/or its licensors. You agree to abide by copyright laws
and all other applicable laws, and acknowledge that the Software contains valuable confidential
information and trade secrets of ARRIS and/or its licensors.
8. Your Indemnification to ARRIS
You agree to defend, indemnify and hold ARRIS harmless from and against any costs, losses,
liabilities and expenses (including attorneys fees) arising out of or relating to third party claims
arising out of or related to Your use of the Software and/or System in contravention to the terms
of this Agreement, including without limitation, any and all claims, actions, suits, or proceedings
alleging fraud, breach of security, non-compliance with laws, breach of contract or negligence.
9. Patent I ndemnification
9.1 ARRIS will indemnify, defend and hold You harmless against damages, liabilities and costs,
excluding consequential and exemplary damages finally awarded against You and will, at
ARRIS expense, defend any claim, suit or proceeding (Claim) brought against You insofar as
such Claim is based on an allegation that the Products as provided to You directly infringe a
United States patent or copyright. ARRIS will pay those costs and damages, including settle-
ment costs awarded or agreed-upon, as applicable, as the result of the Claim, provided (i) You
promptly notify ARRIS of the Claim (ii) You give ARRIS all applicable evidence in Your posses-
sion, custody or control, (iii) You give ARRIS reasonable assistance in and sole control of the
defense and all negotiations for its settlement or compromise, and (iv) You have paid all fees
due to ARRIS under this Agreement and continue to pay all such fees as such become due.
9.2 In the event of an infringement allegation for which ARRIS is obligated to indemnify You,
ARRIS may at its discretion: (i) obtain a license that allows You to continue to use the accused
Products, (ii) replace or modify the accused Products with changes that reasonably meet the
ARRIS specification, so as to be non-infringing, or (iii) if (i) and (ii) are not commercially rea-
sonable, repurchase ARRIS provided Products at its depreciated value based on a three-year
amortization rate. If ARRIS provides any one of the options set forth in clauses (i) through (iii)
above, ARRIS indemnity obligation under this Agreement shall be entirely fulfilled. ARRIS lia-
bility for patent infringement indemnification in this section shall not exceed the amount You
paid for the Products finally found to infringe a valid US patent.
10. Limited Warranty
IF YOU ACQUIRED THE PRODUCTS FROM ANYONE OTHER THAN ARRIS YOU DO NOT RECEIVE
ANY OF THE WARRANTIES DIRECTLY FROM ARRIS. YOUR EXCLUSIVE WARRANTY, IF ANY,
COMES FROM THE PARTY FROM WHOM YOU ACQUIRED THE PRODUCTS: IN WHICH CASE THE
REMAINDER OF THIS DOCUMENT, EXCEPT FOR THE ARRIS TOUCHSTONE PRODUCTS SAFETY
INFORMATION, DOES NOT APPLY TO YOU.
11. Software Warranty
ARRIS warrants to the original purchaser that for ninety (90) days from the ship date of the
original ARRIS branded Software (the Software Warranty Period), the Software will perform in
substantial conformance with the technical specifications for such Software set forth in the
Documentation. Your sole and exclusive remedy, and ARRIS sole and exclusive liability under this
Section 11 (Software Warranty) shall be, at ARRIS option: (i) to use commercially reasonable
efforts to correct any reproducible errors that You identify in writing during the Software Warranty
Period which renders the Software non-conforming, (ii) to replace the Software with functionally
equivalent software or (iii) to accept Your return of the Software, if applicable. ARRIS does not
warrant that the Software will work in combination with any hardware or application software
products provided by third parties not supplied or approved by ARRIS, that the operation of the
Software will be uninterrupted or error free, or that all defects in the Software can be corrected.
ARRIS shall not have any obligation or liability with respect to this Section 11 for any errors or any
defects in the Software upon expiration of the Software Warranty Period.
12. Hardware Warranty
12.1 ARRIS warrants to the original Purchaser of the hardware that under normal use and ser-
vice, for twelve (12) months from the ship date (the Hardware Warranty Period) of the Hard-
ware, it will be free from defects in material and workmanship. Your sole and exclusive remedy
and ARRIS sole and exclusive liability under this Section 12 shall be, at ARRIS option: (i) to
use commercially reasonable efforts to correct any reproducible Hardware errors that You iden-
tify in writing during the Hardware Warranty Period which renders the Hardware non-con-
forming, (ii) to replace the Hardware or (iii) accept return of the Hardware from Purchaser.
ARRIS shall not be responsible for any of Your or third party software, firmware, information
or memory data contained in, stored on, or integrated with any Hardware Products returned to
ARRIS pursuant to any Warranty provided under this Agreement. Warranty for separately iden-
tified third party supplier hardware products included as part of the Product shall be only that
warranty which is provided directly from the third party supplier.
12.2 ARRIS does not warrant (1) physical damage to the surface of the products, including
cracks or scratches on the casing; (2) damage caused by misuse, neglect, improper installation
or testing, unauthorized attempts to open, repair or modify the products, or any other cause
beyond the range of the intended use; (3) damage caused by accident, fire, power changes,
other hazards, or acts of God.
12.3 Battery Pack. If Your product has a battery pack, ARRIS warrants that the battery pack
will be free from defects in workmanship and materials, under normal use, for twelve (12)
months from its ship date. This warranty is void if the ARRIS battery pack is used in any other
vendors equipment.
13. Warranty Claims
To make a return under the Warranty above, You must contact the ARRIS Repair Services center
within the applicable warranty period, in writing, by sending an E-mail to support@arrisi.com to
obtain an ARRIS Return Material Authorization number (RMA). The authorized RMA number You
receive from ARRIS must be marked on the outside package and sent prepaid and packaged
appropriately for safe shipment. ARRIS will use commercially reasonable efforts to ship any
repaired or replaced Product to You, at ARRIS expense, not later than thirty (30) days after ARRIS
receives the defective Product. ARRIS warrants the repaired or replaced Hardware or Software for
the longer of the remainder of the unexpired applicable Warranty Period or 90 days.
Notwithstanding the above, if any return is due to errors or defects for which ARRIS is not
responsible or not otherwise covered by the Warranty, You shall be liable for and reimburse ARRIS
for shipping and related expenses.
14. Disclaimer of Warranty
EXCEPT AS AGREED TO IN A SEPARATE WRITING BETWEEN THE PARTIES, THESE WARRANTIES
ARE IN LIEU OF ALL OTHER WARRANTIES WITH RESPECT TO THE SOFTWARE AND/OR SYSTEM
DELIVERED TO YOU HEREUNDER, WHETHER STATUTORY, BY OPERATION OF LAW, EXPRESS OR
IMPLIED, INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTY OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, TITLE AND ANY WARRANTIES
ARISING OUT OF USAGE OR TRADE. THIS WARRANTY IS APPLICABLE SOLELY TO YOU AND NOT
TO ANY SUCCESSOR IN INTEREST OR ANY OTHER THIRD PARTY. NO WAIVER, ALTERATION, OR
MODIFICATION OF THIS WARRANTY SHALL BE BINDING AGAINST ARRIS UNLESS IN WRIT-ING
AS A SEPARATE AMENDMENT HERETO AND SIGNED BY AN ARRIS AUTHORIZED EXECUTIVE.
15. Warranty Limitations
ARRIS shall be relieved of all obligations and liability under the Warranty provisions set forth
herein, if:
a The Hardware or Software is operated with, or the error or defect is due to, any accessory,
equipment, software or part not approved or sold by ARRIS; or
b The Product is operated with a battery pack not sold or approved by ARRIS; or
c The Hardware or Software was not installed, operated and maintained in accordance with
ARRIS instructions and Documentation; or
d The Hardware or Software has been repaired, altered or modified by someone other than
ARRIS; or
e You do not notify ARRIS in writing of the error or defect within the applicable Warranty Period
with sufficient information for ARRIS to identify and reproduce such error or defect, or fail to
return the defective Hardware or Software according to the terms of this Agreement; or
f ARRIS demonstrates that the alleged error or defect in the Software or Hardware does not exist
or was caused by Your or any third partys misuse, neglect, improper installation or testing, or
negligent repair or any other cause beyond the range of the intended use, or by accident, fire,
lightening or other hazard or act of God.
16. Miscellaneous
16.1 If any term, condition, or provision in this Agreement is found to be invalid, unlawful or
unenforceable to any extent, the remaining terms, conditions and provisions will continue to be
valid and enforceable to the fullest extent permitted by law.
16.2 You may not assign or transfer this Agreement nor any rights hereunder, in whole or in
part, whether voluntary or by operation of law without ARRIS prior written consent. Subject to
the foregoing, this Agreement will be binding upon and will inure to the benefit of the parties
and their respective successors and assigns.
16.3 This Agreement (including any addenda hereto signed by both parties) represents the
entire agreement of the parties with respect to the subject matter of this Agreement and super-
sedes all previous communications, representations, understandings and agreements, either
oral or written, between the parties with respect to said subject matter.
16.4 This Agreement may not be amended, except in writing, signed by both parties. No terms,
provisions or conditions of any purchase order, acknowledgment or other business form that
You may use in connection with the acquisition or licensing of the Software will have any effect
on the rights, duties or obligations of the parties under, or otherwise modify, this Agreement,
regardless of any failure of ARRIS to object to such terms, provisions or conditions.
16.5 The laws of the State of Georgia, USA shall govern and construe this Agreement. Any suit
brought in connection with this Agreement shall be subject to the exclusive jurisdiction of the
State Court of Georgia or the Federal Courts for the Northern District of Georgia and You hereby
agree and submit to the personal jurisdiction and venue thereof.
17. Safety I nformation for ARRIS Touchstone Products
ARRIS telephony modems and cable modems comply with the applicable requirements for
performance, construction, labeling, and information when used as outlined in this Section 17:
17.1 Caution: Only a professional installer may connect the telephony modem to the homes
existing telephone wiring. Physical connections to the previous telephone provider must be
removed and the wiring must be checked; there must not be any voltages. Cancellation of tele-
phone service is not sufficient to ensure there is no power to the telephony modem. Failure to
do so may result in loss of service and/or permanent damage to the telephony modem.
17.2 Do not use the product near water (e.g., wet basement, bathtub, sink or near a swimming
pool), to avoid risk of electrocution.
17.3 Avoid using and/or connecting the equipment during an electrical storm, to avoid risk of
electrocution.
17.4 Do not locate the product within 6 feet (2 m) of a flame or ignition source, to avoid
damage or injury from battery explosion, or heat damage.
17.5 Use only the power supply and/or power cord included with the Product. Install the
Product near and easily accessible to the power outlet. Ground the RF drop cables shield at the
building/residence either close to the point of entrance or at the point of attachment. Grounding
as close as practical to the building/residence AC ground is required to minimize grounding con-
nector length and thereby limit the potential voltage differences between the cable TV coaxial
cable and other grounding system. Refer to the individual countrys National Electric Code for
further details.
17.6 In areas of high AC power surge events or poor AC power grounding situations and areas
prone to lightning strikes additional AC power surge protection may be required on the AC, RF,
Ethernet, USB and phone lines.
17.7 If connecting the telephony modem or cable modem to a local computer through the
Ethernet or USB cable the computer must be properly grounded to the building/residence AC
ground network. All plug-in cards within the computer must be properly installed and grounded
to the computer frame per the manufacturers specifications.
D5 UEQ
Release 3.0.1 ARRIS PROPRIETARY All Rights Reserved 1
Features and Fixes for Release 3.0.1
(3.0.1) Added Appendix B - Upgrade Procedures B-1
(3.0.1) Added Appendix C - Downgrade Procedures C-1
(3.0.1) Appendix B - Added Release 3.0.1 to the Overview section. B-1
(3.0.1) Chapter 1 - List of new features/enhancements. 1-5
(3.0.1) Chapter 1 - Updated the Technical Support contact number for the
J apan-Tokyo office. 1-7
(3.0.1) Chapter 2 - Added note regarding linearity below 91 MHz on the DPM. 2-4
(3.0.1) Chapter 2 - Added Table 2-9 - Software Functionality Cross Reference 2-6
(3.0.1) Chapter 3 - Removed alarm contacts and increased Mgt Port in Figure 3-1 3-2
(3.0.1) Chapter 3 - Added section on Demodulator support on the Quad-Port QAM
module (QPM 8DX4) 3-8
(3.0.1) Chapter 3 - SI-Data insertion/removal and SPTS stream replacement handling
Backup/redundancy Configuration simplicity 3-14
(3.0.1) Chapter 3 - Updated GigE MAC Redundancy with extra redundant backup port,
FE01, information. Also, added cross-reference to 4+1 GE MAC Redundancy
section for detailed information. 3-13
(3.0.1) Chapter 4 - Added additional functionality of Fast Ethernet Management
Interface (FE01). 4-12
(3.0.1) Chapter 4 - Added additional functionality of Fast Ethernet Management
Interface (FE02). 4-12
(3.0.1) Chapter 4 - Added information on the new Fan Converter Module (FMOD). 4-7
(3.0.1) Chapter 4 - Added new figure on 8 QAM channel per RF port 4-19
(3.0.1) Chapter 4 - Added note to Chapter 4 regarding replacing QPM QAMs with
DPM QAMs and removing unused QAM ports from the configuration script. 4-17
(3.0.1) Chapter 4 - Added section on demodulator features. 4-17
(3.0.1) Chapter 4 - Added section on Dual Interleavers per RF Port. 4-18
(3.0.1) Chapter 4 - Added statements regarding the redundant GE port options up to
4+1 to the WAN module features. 4-12
(3.0.1) Chapter 4 - Added the Fan Converter Module (FMOD) to list of supported
module types. 4-4
(3.0.1) Chapter 4 - Reworded the Dual WAN section for clarification. 4-13
(3.0.1) Chapter 4 - Updated Figure 4-3 to show PSU1 and PSU2 DC terminal
designation and not plug. 4-3
(3.0.1) Chapter 4 - Updated wording and graphic for new Fan Converter Module (FMOD1). 4-3
(3.0.1) Chapter 5 - Added FMOD reference toinstalled equipment 6-3
(3.0.1) Chapter 5 - Added graphic for location of mounting ears for flush and
mid-mount on D5 UEQ racking. 6-10
(3.0.1) Chapter 5 - Added mid-mount racking recommendation. 6-4
(3.0.1) Chapter 5 - Added Procedure 5-2 for mid-mounting the D5 UEQ 6-10
(3.0.1) Chapter 5 - Added RoHS Compliancy statement. 6-2
(3.0.1) Chapter 5 - Added section on DTI port/dongle installation. 6-16
(3.0.1) Chapter 5 - Added step to Procedure 5-10 to shutdown the QAM port/module
prior to connecting or disconnecting cables to avoid triggering fault detection
2 ARRIS PROPRIETARY All Rights Reserved J uly 22, 2010
D5 UEQ
feature which would shutdown the QAM. 6-25
(3.0.1) Chapter 5 - Updated table with approved SFP modules. 6-14
(3.0.1) Chapter 6 - Added procedure and graphic for ETH1/ETH2 cables. 6-24
(3.0.1) Chapter 7 - Added note explaining support for multiple sessions. 7-10
(3.0.1) Chapter 7 - Added statement regarding the use of ETH2 for management
access if you are planning to use ETH1 for gigabitEthernet MAC redundancy. 7-4
(3.0.1) Chapter 7 - Added Web Manager AAA Implementation for Release 3.0.1. 7-13
(3.0.1) Chapter 9 - Changed heading from DVP MPTS Pass-Through to MPTS
Pass-Through 9-13
(3.0.1) Chapter 12 - Added note to EMMG Configuration Table (Table 12-1)
regarding optional IP address behavior. 12-7
(3.0.1) Chapter 12 - Corrected Figure 12-2 12-21
(3.0.1) Chapter 13 - Added section on GQI/RPC GigE Load Balancing 13-22
(3.0.1) Chapter 13 - Changed heading to include Release 3.0.1 13-8
(3.0.1) Chapter 13 - Expanded GigabitEthernet MAC Redundancy section. 13-14
(3.0.1) Chapter 13 - Reworded first sentence for clarity. 13-8
(3.0.1) Chapter 14 - Added cross-reference to GigabitEthernet Mac Redundancy in
Chapter 13. 14-10
(3.0.1) Chapter 15 - Added HTTP interfaces for authorization. 15-1
(3.0.1) Chapter 15 - Added section on Global Enable Password on SecureID Systems 15-19
(3.0.1) Chapter 15 - Updated Table 15-1: Commands with Privilege Level 0 15-6
(3.0.1) Chapter 18 - Updated output for show logging history detail command 18-6
(3.0.1) Chapter 18 - Updated the section listing the MIBs supported by the WAN agent. 18-8
(3.0.1) CLI - Added note recommending setting the video timeout session close to
20 seconds for SDV services. 17-535
(3.0.1) CLI - Added note to video video-si-stream ghost-pid command regarding
explicit PID reserved range rule. 17-540
(3.0.1) CLI - [no] authorization exec {default | <input>} 17-22
(3.0.1) CLI - [no] debug module timerlib <1-6> <string> 17-106
(3.0.1) CLI - [no] enable authentication default 17-139
(3.0.1) CLI - [no] enable-login 17-140
(3.0.1) CLI - [no] enable-login 17-140
(3.0.1) CLI - [no] exception auto-reboot mon 17-146
(3.0.1) CLI - [no] exception auto-reboot 17-145
(3.0.1) CLI - [no] ip bundle fastethernet<0/1> 17-155
(3.0.1) CLI - [no] ip bundle gigabitethernet <0/1> 17-156
(3.0.1) CLI - [no] login authentication {default | <input>} 17-205
(3.0.1) CLI - [no] video pass-through mpts 17-498
(3.0.1) CLI - [no] video pcr-drift-correction 17-499
(3.0.1) CLI - [no] video revert-static-group <name> 17-509
(3.0.1) CLI - [no] video sdv alt-wildcard prog 17-514
(3.0.1) CLI - aaa authentication fail-message 17-7
(3.0.1) CLI - added additional parameters to the enable command. 17-138
(3.0.1) CLI - Added note If no bandwidth signalled in the SDV session create,
then the actual bandwidth displayed by the show video sdv session verbose
will appear as zero (0). to show video sdv command. 17-398
(3.0.1) CLI - Added note to tcp port command regarding the optional IP address
D5 UEQ
Release 3.0.1 ARRIS PROPRIETARY All Rights Reserved 3
behavior. 17-440
(3.0.1) CLI - Added note to udp port command regarding the optional IP address
behavior. 17-452
(3.0.1) CLI - Added optional parameter [remap-tsid] to the video src-ip video-si-stream
command. 17-533
(3.0.1) CLI - Added theforce-nit-entry option to the video generate-psi pat command. 17-483
(3.0.1) CLI - added the parameter [announce-messages] to the video sdv rpc command.17-519
(3.0.1) CLI - arp * * fastethernet 17-18
(3.0.1) CLI - arp * * gigabitethernet 17-19
(3.0.1) CLI - corrected syntax for video sdv rpc qam-model command. 17-520
(3.0.1) CLI - diagnostics su qam <1-6> do 17-126
(3.0.1) CLI - diagnostics su qam <1-6> show 17-127
(3.0.1) CLI - Ghost-PID range was improved to allow the full range of DVB PIDs to
be included. New range for ghost-pids are from 1 to 8191 in the video
video-si-stream ghost-pid command. 17-540
(3.0.1) CLI - ip http authentication aaa login-authentication [no] 17-161
(3.0.1) CLI - logging override event * trap [none] 17-193
(3.0.1) CLI - logging override event * trap none 17-194
(3.0.1) CLI - show aaa line http [<0-3>] [<0-3>] 17-258
(3.0.1) CLI - show interfaces qam * video ghost-pid 17-328
(3.0.1) CLI - show video ghost-pid 17-386
(3.0.1) CLI - show video sdv load-balance [verbose] 17-399
(3.0.1) CLI - video dest-ip - changed PIDs range from 16-8191 to now allow PIDs
from 1 to 8191 to be filtered. 17-466
(3.0.1) CLI - video ghost-pid 17-485
(3.0.1) CLI - video sdv interface gigabitethernet 0/1 [primary | secondary | none] 17-516
(3.0.1) CLI - video sdv policy-load-balance forced [no] 17-518
(3.0.1) CLI - video src-ip - changed PIDs range from 16-8191 to now allow PIDs
(3.0.1) CLI - video udp - changed PIDs range from 16-8191 to now allow PIDs
(3.0.1) PD152457 - Added note on what is causing D5 UEQ to close all SDV sessions
and not being able to recover. 11-4
(3.0.1) PD154619 - Added note to tcp port command regarding the optional IP
address behavior. 17-440
(3.0.1) PD154619 - Added note to udp port command regarding the optional IP
address behavior. 17-452
(3.0.1) PD154928 - Reworded definition of first-available parameter of video sdv
session setup-policy command for clarity. 17-522
(3.0.1) PD155173- Corrected MPTS configuration command 9-14
(3.0.1) PD155421 - Added step to Procedure 5-10 to shutdown the QAM port/module
prior to connecting or disconnecting cables to avoid triggering fault detection
feature which would shutdown the QAM. 6-25
(3.0.1) PD155438 - Added note recommending setting the video timeout session
close to 20 seconds for SDV services. 17-535
(3.0.1) PD156359 - Added note to Chapter 4 regarding replacing QPM QAMs with
DPM QAMs and removing unused QAM ports from the configuration script. 4-17
4 ARRIS PROPRIETARY All Rights Reserved J uly 22, 2010
D5 UEQ
(3.0.1) PD156577 - Added note If no bandwidth signalled in the SDV session create,
then the actual bandwidth displayed by the show video sdv session verbose
will appear as zero (0). to show video sdv command. 17-398
(3.0.1) PD156691 - Added note explaining support for multiple sessions. 7-10
(3.0.1) PD157022 - Added 4+1 to the GigabitEthernet Redundancy specification in
Table 2-3. 2-3
(3.0.1) PD157025 - Made changes in documentation from 4DX2 QAM module in hex
mode to 6DX2 QAM module in hex mode. 2-4
(3.0.1) PD157026 - Reworded first two sentences on GigE MAC Redundancy for clarity. 3-13
(3.0.1) PD157028 - Added Octal to the statement in the Note. 11-4
(3.0.1) PD157029 - Corrected typo from RCP to RPC. 13-2
(3.0.1) PD157030 - Changed commands to reflect using the fastEthernet 0/1 rather than
gigiabitEthernet 0/4 as the spare port for the IP bundle. 13-22
(3.0.1) PD157032 - Corrected number of QAM channels now available on a WAM
card and fully loaded D5 UEQ. 13-2
J uly 22, 2010 1
List of Figures
3 Product Overview
Figure 3-1: D5 UEQ Logical Overview 3-2
Figure 3-2: Setting RF Center Frequency on the Dual-Port QAM Module
(DPM 4DX2) in Quad Mode 3-6
Figure 3-3: RF Center Frequencies on the Dual-Port QAM Module (DPM 6DX2)
in Hex Mode 3-7
Figure 3-4: RF Center Frequencies on the Quad-Port QAM Module (QPM 8DX4) 3-8
Figure 3-5: DVB SimulCrypt 3-17
4 System Components
Figure 4-1: D5 UEQ Front Panel Face Plate 4-2
Figure 4-2: D5 UEQ Front Chassis 4-3
Figure 4-3: D5 UEQ Rear Chassis View with QPMs and Dual WAN 4-3
Figure 4-4: D5 UEQ Rear Chassis View (DPM 6DX2 based Rear view) 4-4
Figure 4-5: D5 UEQ Module Assignments 4-5
Figure 4-6: D5 UEQ Airflow direction 4-6
Figure 4-7: Location of D5 UEQ Power Supply Units 4-8
Figure 4-8: Example of the 780280 AC PSU 4-9
Figure 4-9: Example of the 780281 DC PSU 4-9
2 Release 3.0.1
List of Figures
Figure 4-10: 716630 - AC PSU, Telkoor (two styles) 4-10
Figure 4-11: 722058 - AC PSU, Power-One 4-10
Figure 4-12: Wide Area Network Card (WAN V4) 4-11
Figure 4-13: QAM Modules 4-13
Figure 4-14: Dual-Port QAM Module (DPM 4DX2) in Quad Mode Bonded Channels 4-16
Figure 4-15: Dual-Port QAM Module (DPM 6DX2) in Hex Mode Bonded Channels 4-16
Figure 4-16: Quad-Port QAM Module (QPM 8DX4) Bonded Channels 4-17
Figure 4-17: 8 QAM Channel per RF Port 4-19
Figure 4-18: Chassis Monitor Module (MON) 4-20
Figure 4-19: MON Auto Shutdown Recovery Button 4-21
5 Dual WAN
Figure 5-1: QAM Provisioning Warning 5-4
Figure 5-2: Show Interface Warning 5-5
6 Installing the D5 UEQ
Figure 6-1: Open Rack Configuration and Components 6-6
Figure 6-2: Decision Tree Summary for Rack Types 6-9
Figure 6-3: Location of Mounting Ears 6-10
Figure 6-4: Location of M4 Grounding Studs 6-11
Figure 6-5: Securing the Grounding Wire 6-12
Figure 6-6: Slot Numbering Order 6-12
Figure 6-7: Example of Fiber Optic and Copper SFPs 6-13
Figure 6-8: Installing the SPF 6-15
Figure 6-9: Fiber Optic Cable Connector 6-16
Figure 6-10: Dual DTI Adapter 6-17
Figure 6-11: DTI Port Pinout 6-18
Figure 6-12: D5 UEQ AC Power Connection Panels 6-20
Figure 6-13: Connector Pin and Locations 6-22
Figure 6-14: Terminal Block Wiring for DC PSU 6-23
ARRI S D5 Universal Edge QAM
J uly 22, 2010 3
Figure 6-15: FastEthernet cabling 6-24
Figure 6-16: Cable Management 6-26
7 Initial System Configuration
Figure 7-1: RJ -45-to-DB9 Cable and Pin-out 7-2
Figure 7-2: Web Browser 7-12
Figure 7-3: AAA Default Login Page (Radius example) 7-14
Figure 7-4: AAA Login Prompt (Radius example) 7-14
Figure 7-5: AAA Password Prompt (Radius example) 7-15
Figure 7-6: Successful AAA Login (Radius example) 7-15
Figure 7-7: Failed AAA Login Attempt (Radius example) 7-16
Figure 7-8: Web Manager Device Status 7-16
Figure 7-9: Web Manager Main Menu Components 7-17
Figure 7-10: Web Manager Drop-down Navigation Menus 7-17
Figure 7-11: D5 System Summary/Home Page 7-18
Figure 7-12: CLI Account Screen 7-20
Figure 7-13: SNMP Configuration Screen 7-21
Figure 7-14: GigabitEthernet Configuration Screen 7-23
Figure 7-15: Initial QAM Configuration Screen 7-26
Figure 7-16: QAM Configuration Screen 7-27
Figure 7-17: Ethernet Configuration Screen 7-30
8 Video on Demand
Figure 8-1: VoD Server, Multiple MPEG TS over UDP to STB 8-2
Figure 8-2: NSG Port Mapping Scheme 8-6
9 Digital Video Broadcast
Figure 9-1: Example of DVB Hierarchy 9-2
Figure 9-2: D5 UEQ MPTS Pass-Through 9-13
4 Release 3.0.1
List of Figures
10 IGMP Client
Figure 10-1: ASM Example - Directly Connected to a Video Server 10-3
Figure 10-2: SSM Example - Directly Connected to a Video Server 10-4
Figure 10-3: ASM Example - Connected to an IGMP-enabled Switch or Router 10-6
Figure 10-4: SSM Example - Connected to an IGMP-enabled Switch or Router 10-8
11 Switched Digital Video
Figure 11-1: Switched Digital Architecture Example 11-2
12 Conditional Access
Figure 12-1: D5 UEQ in a Conditional Access System 12-2
Figure 12-2: D5 UEQ in a Simulcrypt Environment 12-21
13 Redundancy
Figure 13-1: Example of HOT/WARM Redundancy 13-3
Figure 13-2: Example of HOT/HOT Redundancy 13-4
Figure 13-3: Example of 1:1 QAM Sparing 13-8
Figure 13-4: Example of 2:1 QAM Sparing (Option 1) 13-9
Figure 13-5: Example of 2:1 QAM Sparing (Option 2) 13-9
Figure 13-6: Example of 5:1 QAM Sparing 13-9
Figure 13-7: GE MAC Redundancy Normal Mode, External View 13-18
Figure 13-8: Failover using GE MAC redundancy, GE0/1 moved to GE0/4 13-20
Figure 13-9: Expanded GE MAC Redundancy, Failover Scenario 13-21
Figure 13-10: Expanded GE MAC Redundancy, External View 13-21
Figure 13-11: GigE Link Trunking Redundancy Example 13-32
14 M-CMTS Support
Figure 1: Example of the D5 UEQ in an M-CMTS Configuration 14-2
15 Security
Figure 15-1: Full AAA Security Model 15-2
J uly 22, 2010 5
Figure 15-2: Radius Authentication Model on the D5 UEQ 15-3
19 Service Procedures
Figure 19-1: Front Panel 19-2
Figure 19-2: Power Supply Units 1 and 2 (AC or DC Power) 19-3
Figure 19-3: PMOD 1 and 2 19-4
Figure 19-4: PMOD Thumb Lock and Lock Screws 19-4
Figure 19-5: Location of Fuses 19-6
Figure 19-6: D5 UEQ Fan Tray Assembly 19-7
Figure 19-7: Avoiding Damage to the D5 UEQ 19-8
Figure 19-8: Fan Tray Locking Device 19-8
Figure 19-9: Removing WAN or QAM Modules 19-9
Figure 19-10: MON Card and Locking Screw 19-10
Figure 19-11: Compact Flash Card 19-14
Figure 19-12: Compact Flash Release Button 19-15
6 Release 3.0.1
List of Figures
J uly 22, 2010 1
Contents
Features and Fixes for Release 3.0.1
List of Figures
Contents
1 About This Manual
Purpose 1-1
Intended Audience 1-2
Prerequisite Skill and Knowledge 1-2
System Features 1-3
Conventions Used in this Document 1-6
Admonishments 1-6
Textual Conventions 1-6
How to Contact Us 1-7
2 Specifications
Environmental Characteristics 2-2
Electrical 2-2
WAN Module 2-3
PSU Redundancy 2-3
QAM Module 2-4
Quad-Port QAM Module
(QPM 8DX4) 2-5
MPEG Processing 2-5
2 Release 3.0.1
Contents
Control Interfaces 2-6
Software Functionality Cross Reference 2-6
General 2-7
3 Product Overview
Product Overview 3-1
Transport Stream Processing 3-2
Internal Operations 3-2
Module Identification 3-3
Environment Monitoring 3-3
Image Management - Compact Flash 3-3
External Interfaces 3-4
Protocols 3-4
Edge QAM 3-5
Video/UDP/MPEG Management 3-5
QAM/RF Management 3-5
GigE Link Trunking Redundancy 3-12
GigE MAC Redundancy 3-13
IGMP Client v1, v2, v3 3-13
Digital Video Broadcasting 3-14
Content Protection 3-14
Privacy Mode 3-15
DVB SimulCrypt 3-15
DVB PSI/SI Processing 3-16
DVB SimulCrypt User Interface 3-17
Web Manager 3-17
Application Manager 3-18
4 System Components
System Overview 4-2
Front Panel 4-2
Hardware Locations 4-3
Hardware Functions 4-4
EMI Shielding 4-5
Blanking Plates 4-6
J uly 22, 2010 3
Fan Tray 4-6
D5 UEQ Airflow 4-6
Power Converter Module (PMOD) 4-7
Fan Converter Module (FMOD) 4-7
Power Supply Unit (PSU) 4-8
Wide Area Network Module (WAN) 4-11
Dual WAN 4-13
Quadrature Amplitude Modulation Module (QAM) 4-13
Demodulator Features 4-17
Dual Interleavers per RF Port 4-18
Chassis Monitoring Module (MON) 4-20
5 Dual WAN
Overview 5-1
Configuration Management 5-2
QAM Management 5-4
WAN Synchronization in Dual WAN Configuration 5-5
Dual WAN Configuration 5-6
Web Manager Support for the Dual WAN 5-7
Application Manager Support 5-7
Feature Compatibility 5-8
System Commissioning 5-8
6 Installing the D5 UEQ
Safety Measures 6-2
FCC Statement 6-2
RoHS Compliancy 6-2
Unpacking and Inspecting the D5 UEQ 6-2
Visual Inspection 6-3
Main Hardware Components 6-4
Racking Recommendations 6-4
Recommended Rack-type for the D5 UEQ 6-5
Considerations for Shared-racks and Cabinets 6-7
Grounding 6-11
4 Release 3.0.1
Contents
Inserting QAM and WAN Modules 6-12
Slot Requirements 6-12
Fiber Optic Small Form Factor Pluggable (SFP) Card 6-13
Dual DOCSIS Timing Interface (DTI) 6-16
Power Considerations 6-18
Connecting Cables 6-19
AC Power Cables 6-19
DC Power Cables 6-21
Management Connections 6-24
Video Connections 6-24
RF Connections 6-25
Cable Management 6-25
7 Initial System Configuration
Configuration Overview 7-1
Configuring the D5 UEQ with CLI 7-2
Setup-Mode Configuration Script 7-2
Serial Port Connection for the D5 UEQ Configuration 7-2
Initial Configuration for WAN and QAM Modules 7-3
General Configuration 7-4
Ethernet Port Configuration 7-4
Gigabit Ethernet Port Configuration 7-6
Dual WAN Configuration 7-7
QAM Configuration 7-7
Configuring SNMP Service 7-9
Configuring the D5 UEQ with the Web Manager 7-10
Overview 7-10
Setting up the D5 UEQ 7-11
Web Manager AAA Implementation 7-13
Web Manager Toolbars 7-16
Setting up a Host Name 7-19
Configuring a CLI Account 7-19
Configuring SNMP 7-21
Enabling a GigabitEthernet Interface 7-22
Configuring a QAM Module 7-24
Enabling the Dual WAN 7-28
J uly 22, 2010 5
Enabling an Ethernet Interface 7-29
Logging Out of the Web Manager 7-31
8 Video on Demand
Video on Demand 8-1
UDP Port Management 8-2
Overview 9-1
Handling SI Table Streams, Injection and Configuration 9-2
SI Table Editing with the PSI Wizard 9-6
PSIG<>Configuration & Monitoring 9-7
PSI Table Auto-Generation 9-9
SPTS Pass-Through 9-11
MPTS Pass-Through 9-13
Filtering MPTS in Non Pass-Through Mode 9-14
Handling Pre-scrambled Content 9-15
Video Session PSI Show Command 9-16
10 IGMP Client
Overview 10-1
IGMP Client in the Network 10-3
Directly Connected to a Video Server(s) 10-3
Connected to IGMP Enabled Switch/Router 10-6
Limitations 10-9
IGMP CLI Commands 10-10
IGMP Show Commands 10-10
Example IGMP Configurations 10-13
Overview 11-1
Switched Digital Architecture 11-2
Setting up SDV on the D5 UEQ 11-2
SDV Load Balancing 11-4
6 Release 3.0.1
Contents
Conditional Access 12-2
EMMG Configuration 12-4
ECMG Configuration 12-8
EIS Configuration 12-12
Redundancy Group Configuration 12-14
Channel Container Configuration 12-15
SCG Configuration 12-15
CAS (P)SIG Configuration 12-18
DVB Simulcrypt Configuration 12-20
13 Redundancy
Multicast Redundancy 13-1
HOT/WARM Redundancy 13-2
HOT/HOT Redundancy 13-3
Redundant Stream Groups 13-5
QAM Redundancy 13-8
Release 3.0 and 3.0.1 13-8
Release 2.6 and earlier 13-8
Failover Procedure 13-11
Failback procedure 13-12
GigabitEthernet (GE) MAC Redundancy 13-14
Expanded Operation in Release 3.0.1 13-17
GQI/RPC GigE Load Balancing 13-22
Release 3.0.0 Operation 13-23
Release 3.0.1 Behavior 13-24
Load Balancing Support 13-25
HOT/HOT and HOT/WARM Support 13-25
HOT/WARM Link Redundancy 13-26
Forced Load Balancing 13-26
Support for 2+ Gbps SDV Tier 13-26
CLI Support 13-27
Overview of Options Release 3.0.0 to 3.0.1 13-28
GigE Link Trunking Redundancy 13-31
14 M-CMTS Support
J uly 22, 2010 7
Overview 14-1
System Overview 14-2
DEPI DMPT Mode 14-3
DEPI L2TP Control Plane 14-4
Primary/Secondary Downstreams 14-4
UDP/IP and L2TPv3 14-5
Downstream Channel Configuration 14-5
Configuration Examples 14-6
Status commands 14-14
Dual DOCSIS Timing Interface (DTI) 14-14
Operational Parameters/Limitations 14-18
15 Security
Overview 15-1
TACACS+ Authentication 15-4
Radius 15-7
Setting up RADIUS 15-7
AAA Configuration 15-10
16 CLI Overview
Accessing the D5 UEQ 16-2
CLI Command Modes 16-2
Command Completion and Parameter Prompting 16-5
Keyboard Shortcuts 16-6
NO Commands 16-8
Local Authorization 16-8
CLI Output Filtering 16-10
Filtering Previous Lines 16-11
Including Matching Lines 16-11
Excluding Matching Lines 16-11
CLI Syntax Conventions 16-12
17 CLI Command Descriptions
List of CLI Commands
8 Release 3.0.1
Contents
18 System Monitoring
Introduction 18-1
How Event Messages are Generated 18-2
How Event Messages are Routed 18-2
Priority-based Event Routing 18-2
Event Management Subsystems 18-3
Support for Alarms 18-4
Event Management CLI 18-4
Displaying Logging Information 18-4
Displaying Logging History 18-5
About Centralized Management 18-7
SNMP MIBs Used for Monitoring 18-7
MIB Overview 18-8
SNMP Traps and Notifications 18-11
19 Service Procedures
Removing Power Before Servicing 19-2
Front Panel Removal and Replacement 19-2
Replacing a Power Supply (PSU) 19-3
Power Converter Module Installation/Replacement 19-4
Replacing Fuses 19-5
Fan Tray Replacement 19-7
Replacing Modules 19-9
MON Module Replacement 19-10
Reconfiguring the MON to Boot from Image on Compact Flash 19-10
Compact Flash Card 19-14
A D5 UEQ Event Logs
Event Logs A-1
B D5 UEQ Upgrade Procedures
Overview B-1
J uly 22, 2010 9
Upgrade Preparations B-2
Performing the Software Upgrade via CLI B-3
Performing the Software Upgrade via the Web Manager B-5
C D5 UEQ Downgrade Procedures
Reverting to Prior Software Load C-1
Downgrading to pre-3.0 Release Software Loads C-1
GL Glossary
Comments & Feedback Form
10 Release 3.0.1
Contents
Release 3.0.1 ARRIS PROPRIETARY All Rights Reserved 1-41
1. About This Manual
Topics Page
Purpose 1
I ntended Audience 2
Prerequisite Skill and Knowledge 2
System Features 3
Conventions Used in this Document 6
How to Contact Us 7
Purpose
This document provides a comprehensive view of the ARRIS D5
Universal Edge QAM (D5 UEQ) including reference and procedural infor-
mation required to manage and control the D5 UEQ in support of the
Digital Video Broadcast (DVB) standard and Video on Demand (VoD)
services.
1-2 ARRIS PROPRIETARY All Rights Reserved J uly 22, 2010
1 About This Manual
Intended Audience
This document is intended for cable operators and system administrators
who will configure and operate the D5 UEQ. It is designed to give the
reader a general overview of configuration options for the D5 UEQ. It is
assumed that the reader is familiar with day-to-day operations and main-
tenance functions in TCP/IP networks and hybrid fiber/coax (HFC) cable
networks.
Prerequisite Skill and Knowledge
This document serves as an introduction to the D5 UEQ for all administra-
tors and users of cable modem termination systems. Ideally, users of this
documentation and equipment should have a basic knowledge of the
following:
RF measuring equipment
Provisioning servers
Command Line Interface (CLI)
RF cable plant and operating methods
System Features
Release 2.1 The D5 UEQ Release 2.1 features include:
Simultaneous delivery of MPEG-2TS/DVB-C traffic
Support of Annex A, B, and C for digital video applications
Four RF QAM channel bonding
48 6 MHz or 8 MHz downstream links
Integrated downstream multiplexer and block converted QAM chan-
nels
Eight slot modular architecture
Rear panel loaded modules
Hot-swappable modules
Multiple management interfaces
Secure Shell (SSH) support
Telnet
IGMPv1,v2 support
Four electrical or optical GigE connection interfaces via removable SFP
(WAN)
Redundant AC/DC PSUs
Front panel RS-232, |0|0| interface, CLI interface port
Front panel LCD display with keypad
Field upgradeable / configurable
DVB SI processing
Broadcast digital programming support
SimulCrypt / Conditional Access System (CAS)
(P)SI/SI table injection
Multicast support
CAS broadcast support
Nodal Element Manager (Web interface - J ava Desktop interface)
1 About This Manual
Switched Digital Video (SDV)
IGMPv3
Gigabit Ethernet 2+2 redundancy
Dynamic Host Configuration Protocol (DHCP)
MAC address change procedures
Startup configuration tool updated
D5 Nodal Manager update
- Web Tool Manager
- DVB-S1 configuration and generation tool
All functionality included in Release 2.0 and 2.1
Real-Time Streaming Protocol (RTSP) support
DOCSIS 3.0 DRFI support
Privacy Mode support
Dual-Port QAM Module (DPM 4DX2) in Hex Mode
Control plane redundancy (Hot/Hot)
Batch Configuration Tool (BCT) extension to the D5 Application
Manager
M-CMTS MPT and DMPT/L2TPv3 support
RADIUS [Authentication]
TACACS [Authentication]
Web Manager GUI and CLI updates for above
TACACS+ Authorization & RADIUS Access Challenge enhancements
QAM Redundancy
IGMP Stream Redundancy enhancement
Support for Annex A profile on 6MHz channels
Support for 6MHz bonded Annex B channels, with 8MHz channel
spacing
D5 UEQ CLI video and audio scramble options
Support for additional M-OSSI MIBS for M-CMTS/DOCSIS 3.0
MCMTS DOCSIS debug feature
Support for 1Gb Flash and Long Haul CWDM SFP support
CLI updates for above.
Quad-Port QAM Module (QPM 8DX4)
600W PSU support in the existing chassis
Dual 4GbE WAN Operation (8 Gb/sec total ingress)
QAM port to GigabitEthernet port provisioning
CLI updates for above.
Release 3.0.1 The D5 UEQ Release 3.0.1 features include:
Dual port QAM with dual WAN operation
GigabitEthernet load balancing in SDV RPC mode
Upgraded SDV protocol handling
Improved PID filtering and management in DVB applications
MAC redundancy from gigabitEthernet interface
Dual Interleavers per RF port for QPM module
QPM demodulator functionality
Enhancements include:
- Support for up to 1488 SDV sessions per WAN module (2976 for
a dual-WAN setup)
- Improved MPTS pass-thru handling/null dropping
- Modification of the AAA support, allowing direct enable access to
the D5 UEQ
- Additional SFP devices
- Fully ROHs compliant
1 About This Manual
Conventions Used in this Document
This section presents the textual conventions used in this documentation
set.
Admonishments
There are three levels of admonishments used in this documentation. The
first is a simple note.
NOTE
Notes are intended to highlight additional references or general
information related to a procedure, product, or system.
The international symbols, Caution and Warning, appear in this book when
you must perform procedures involving risk.
CAUTI ON
Cautions indicate risk of dropping traffic, losing data, or damaging
equipment. Read the accompanying instructions and proceed with
caution.
WARNI NG
The warning symbol represents a risk of bodily injury or serious damage
to the equipment. Before you work on any equipment, be aware of the
hazards involved with electrical circuitry and fiber optics and follow
standard procedures for preventing accidents and serious damage.
Textual Conventions
The conventions used in this guide are shown in the following table:
Table 1-1: Examples of Textual Conventions
Type of text Description Example
CLI commands and other user
input
Monospaced bold
(courier)
assign slot <1-6> type WAN <7-8>
Names of chapters and
manuals
Italicized text chapter 1, About This Manual
Menu selections Plain-faced text bold From the File>Set-up menu choose
How to Contact Us
Product I nformation and
Support
Please direct your ARRIS D5 UEQ technical support requests to
ask.arrisi.com.
The Technical Support Contact information is summarized in the following
table. Contact information is also available from our Web site at
http://www.arrisi.com/contact_us/support/index.asp.
System responses and screen
display
Monospaced f ont
( cour i er )
Ti me si nce t he D5 UEQ was l ast boot ed:
12 days, 2: 8: 14 <hr : mi n: sec>
Table 1-1: Examples of Textual Conventions
Type of text Description Example
D5 UEQ Support Information
NORTH AMERI CA
E-mail techsupport.na@arrisi.com
Telephone
1+888 221 9797 (US toll free)
1+678 473 5656 (Worldwide)
Latin America
E-mail techsupport.cala@arrisi.com
Telephone +56 2 678 4500
Hours
9 am to 6 pm (09:00 to 18:00)
(Santiago, Chile local time)
EUROPE
E-mail techsupport.europe@arrisi.com
Telephone
+31 20 311 2525
(English, Spanish, French and German)
Hours 08:30 to 17:30 pm CET
J APAN - Tokyo
E-mail techsupport.japan@arrisi.com
Telephone +81 (0) 3 5461-7320
Hours
9:30 am to 6 pm (09:30 to 18:00)
(Tokyo local time)
Asia
E-mail techsupport.asia@arrisi.com
Telephone +82 2 2183 2371
1 About This Manual
Emergency support is available after normal business hours via the listed
contact information. Additional contact information can be obtained from
the ARRIS web page at http://www.arrisi.com and clicking on the link to
the Customer Center.
Training I nformation ARRIS Training is the authorized organization for training on voice, data,
and provisioning products. Web-based, instructor-led, and customized
courses are available at our U.S. training center in Atlanta. On-site training
is available.To obtain pricing for on-site training and other training infor-
mation, visit our web site:
http://www.arrisi.com
Comments on this Document Our goal has been to create a document that best fits your needs. We are
interested in your suggestions for improving this document. Please use the
form at the back of this book to address any comments or questions you
may have regarding this documentation.
Hours 9:30 am to 6 pm (09:30 to 18:00) (Seoul local time)
Korea
E-mail techsupport.korea@arrisi.com
Telephone +82 2 2183 2371
Hours 9:30 am to 6 pm (09:30 to 18:00) (Seoul local time)
D5 UEQ Support Information
2. Specifications
Topics Page
Environmental Characteristics 2
Electrical 2
WAN Module 3
PSU Redundancy 3
QAM Module 4
Quad-Port QAM Module (QPM 8DX4) 5
MPEG Processing 5
Control I nterfaces 6
General 7
The following are specifications for the D5 UEQ.
2 Specifications
Environmental Characteristics
Table 2-1: Environmental Characteristics
Electrical
Table 2-2: Electrical Specifications
Characteristic Ranges
Operating Temperature Range F (C)
32 to 122
(0 to 50)
Storage Temperature Range F (C)
40 to 158
(40 to 70)
Relative Humidity (non-condensing) Up to 90%
Dimensions (H x W x D) in inches
in centimeters (cm)
3.5" x 19" x 24"
(8.9 x 48 x 61)
Extension from 19 rack:
Front
Rear
2 (5.08cm)
23 (58.42cm)
Recommended minimum rack clearance:
Rear
Side
16 (40.64cm)
2 (5.08cm)
Weight of
Fully loaded chassis
WAN card
QAM cards
Power Supply Unit
Power Module
50 lbs (22.7 kg)
1-1/4 lbs (0.56kg)
1-3/4 lbs (0.79kg)
3-3/4 lbs (1.70kg)
1-1/4 lbs (0.56kg)
Input Voltage AC 90-256 VAC, 50-60 Hz
Input Voltage DC 42 to 56 Vdc
Maximum Power Consumption
AC - 420 watts (DPM cards)
AC - 550 watts (QPM cards)
DC - 400 watts (DPM cards)
DC - 520watts (QPM cards)
WAN Module
Table 2-3: WAN Module Specifications
PSU Redundancy
Table 2-4: PSU Redundancy
Standard Gigabit Ethernet input
interfaces
up to 8 (4 per WAN module)
Maximum aggregate input rate 4.0 Gbps
Gigabit Ethernet Redundancy 2X (1+1), 2+1, 3+1, 4+1
DOCSIS Timing Interface
Onboard DTI-clock SATA connector
(per CableLabs ATP requirement)
UDP encapsulated packets 1 to 7
External Interfaces
Optical SFP or 1000BaseT options
(IEEE802.3z or IEEE802.3ab)
IP Unicast and Multicast IGMPv2/3
PSU Slot 1 PSU Slot 2 Redundancy
AC PSU Vacant No Redundancy
DC PSU Vacant No Redundancy
AC PSU AC PSU
PSU Redundancy plus potential
Power source redundancy
DC PSU DC PSU
PSU Redundancy plus potential
Power source redundancy
AC PSU DC PSU
PSU Redundancy (high capacity
chassis only)
DC PSU AC PSU
PSU Redundancy (high capacity
chassis only)
2 Specifications
QAM Module
Table 2-5: Dual-Port QAM Module (DPM 6DX2) Specifications
NOTE
When setting a center frequency below 91MHz, the following message
appears: Frequencies below 91MHz may impair RF signal quality. This
refers to the 2nd order harmonic distortion. 2nd harmonics appear at two
times the carrier frequency. For example, if the carrier frequency is
90MHz, then the 2nd harmonic would appear at 180MHz. 2nd harmonics
below 91MHz can measure up to 3dB higher than the DRFI specification
of -63dBc. The signal quality of the output carrier itself is not affected.
Two External F type
female connectors
75 ohm (ISO-169-24)
Six block-converted
adjacent channels per RF
output port
Two RF output ports per module for a total
of 12 downstream channels per QAM
Frequency range 57-867 MHz (see Note below)
Minimum Frequency Step 10 Hz
Modulation Type 64 QAM, 256 QAM
Power per channel
single carrier - 52 to 60 dBmV
dual carrier - 48 to 56 dBmV
quad carrier - 44 to 55 dBmV
hex carrier (Annex B only)- 42 to 53 dBmV
Power Level resolution 0.2 dB steps
Output Return loss
active channel 88-750MHz - > 14 dB
active channel 750-870MHz - > 13 dB
inactive channel - >12 dB
MER
> 43 dB (equalized)
> 35 dB (unequalized)
Annex A, B, C
(QPM 8DX4)
Table 2-6: Quad-Port QPM Module (QPM 8DX4) Specifications
MPEG Processing
Table 2-7: MPEG Processing Specifications
Four External F type
female connectors
75 ohm (ISO-169-24)
Eight block-converted
adjacent channels per RF
output port
Four RF output ports per module for a total
of 32 downstream channels per QAM
Center Frequency range 54 MHz - 1002 MHz
Minimum Frequency Step 62.5kHz
Modulation Type 64 QAM, 256 QAM
Power per channel
single carrier - 52 to 60 dBmV
dual carrier - 48 to 56 dBmV
hex carrier (Annex B only) - 42 to 50 dBmV
octal carrier - 41 to 49 dBmV
Extended power levels
hex carrier - 44 to 53 dBmV
octal carrier - 41 to 51 dBmV
Power Level resolution 15 dB in 0.1 dB steps
Output Return loss (in
channel)
> 15 dB
MER
> 46 dB (equalized)
> 40 dB (unequalized)
Annex A, B, C
One WAN can receive up to 1488 MPEG2 SPTS input streams (RFC768)
A full system can generate up to 192 MPTS in Annex B and 144 MPTS in
Annex A using all QPM 8DX4 modules.
Open-standards Switched Digital Video support (SDV)
MPTS and SPTS pass-thru
PID filtering/remapping when required
2 Specifications
Control I nterfaces
Table 2-8: Control I nterfaces
Software Functionality Cross Reference
Table 2-9: Software Functionality
Stream Replication of multicast streams
Support for up to 63 SPTS per QAM channel
Variable bit rate (VBR) of an input stream supported is 4:1 (max.)
Input jitter up to 500 msec
Re-multiplexing/routing of any input stream to any output within each
WAN/assigned-QAMs domain
PCR de-jittering and restamping of input streams
PSI extraction, automatic generation and insertion as required
Program and elementary stream-level encryption
DVB-SI table handling from external SI generators
Two independent 10/100BaseTX per WAN for CAS and NMS
RS-232 serial port debug console connection
In-band or out-of-band management (Radius, TACACS+)
Ethernet test/loop port for external analysis of any MPTS
Comprehensive GUI-based, Bulk D5 Element Management System
Complete Web Browser tool for configuration and Ops management
Protocols SNMP, XML, HTTP, DTI, CLI (telnet/ssh, RS323), TFTP,
IGMPv2/v3(+SSM)
Embedded, late-stage QAM demod for RF real-time health reporting
Module Order Code
Product
Code
Prod.
Rev VOD
Broad
cast SDV
Modular
CMTS
Single
DTI
Dual
DTI
Privacy
Mode
Simul
crypt
RF Mode Annex
Quad Hex Octal A B C
WAN (LX80) 716657 WAN_4G2F BA Y Y N N N N N
WAN (LX100)722 012 WAN_4G2F CA Y Y Y Y Y N Y
WAN (Dual DTI) 728906 WAN_4G2F CB Y Y Y Y Y Y Y
DPM QAM (ENIG,
SX25/LX60)
716604 QAM_4DX2 AC Y Y Y N Y Y N N Y Y Y
General
Table 2-10: General
DPM QAM (DRFI)
Annex B only)
71936 QAM_6DX2 CB Y Y Y Y N Y Y N N Y N
DPM QAM (DRFI,
Universal
771080 QAM_6DX2 EB Y Y Y Y Y Y Y N Y Y Y
QPM QAM 780274 QAM_8DX2 BA Y Y Y Y Y Y Y Y Y Y Y
Module Order Code
Product
Code
Prod.
Rev VOD
Broad
cast SDV
Modular
CMTS
Single
DTI
Dual
DTI
Privacy
Mode
Simul
crypt
RF Mode Annex
Quad Hex Octal A B C
Field-upgradeable software download support (Compact Flash)
Front Panel LCD display - four line alpha-numeric with keypad control
Hot-swappable, field-upgradeable eight slot modular design
Redundancy: Power supplies, gigabitEthernet, Gigabit Module, Fans
Field Upgradeable: M-CMTS, DOCSIS 3.0, Broadcast Mode Pass-through
2 Specifications
3. Product Overview
Topics Page
Product Overview 1
Internal Operations 2
External I nterfaces 4
Edge QAM 5
Web Manager 17
Application Manager 18
The following describes the D5 UEQ operating modes.
Product Overview
The D5 UEQ is a two rack unit (RU), high-density Edge QAM. Its modular,
hot-swappable design supports a flexible system with built in compatibility,
redundancy and scalability for current and next generation services. This
overview describes the system interactions that comprise a basic D5 UEQ
Edge QAM.
3 Product Overview
Transport Stream Processing
The D5 UEQ processes MPEG over IP streams received over Gigabit
Ethernet (GigE) connections. From these GigE connections, the D5 UEQ
extracts MPEG Transport Streams (TS) that are subsequently multiplexed
onto individual QAM channels and upconverted to desired RF frequencies
for delivery.
Figure 3-1: D5 UEQ Logical Overview
I nternal Operations
The D5 UEQ provides flexible control interfaces, via the Command Line
Interface (CLI), the Web Manager, and the Simple Network Management
Protocol (SNMP). These interfaces support configuration and reporting of
all aspects of the D5 UEQ.
The CLI is the primary user interface. It can be accessed via the CLI port
or Telnet. The Web Manager and SNMP are secondary user interfaces.
Although not all CLI commands are duplicated in the Web Manager, most
operations can be performed.
CA Port, (100 BT)
Mgt Port, (100,1000 BT)
Test Output, (100 BT)
WAN
(Quad
GigE)
Serial/Console Port
Downstream RF
Carriers
D5 Universal
Edge QAM
Flash Card
OAM&P The WAN module provides OAM&P (Operations, Administration, Mainte-
nance and Provisions) functions for chassis management, environment
controls, Ethernet connectivity, MPEG, and QAM multiplexing functionality.
Module I dentification
The D5 UEQ utilizes the Chassis Monitor Module (MON) to retrieve factory
configured information from modules installed within the chassis. This
information is gathered via the EEPROM on a per module basis for identi-
fication. The EEPROM information includes:
Product Code - Name for a type of card (e.g. WAN module D5_4G2F)
Product Version - Version for a type of card (e.g. AA)
Serial Number - Unique code for a specific card (of the chassis, for the
Midplane EEPROM)
Manufacturing Date - Date indicating start of warranty period
Assembly Code - Engineering code uniquely identifying a specific
assembly, example ARCT00012
Assembly Revision Code - Engineering code that uniquely identifies a
specific version of an assembly, example = A.
Environment Monitoring
Environment monitoring (e.g. power, thermals, fan rotation) is handled by
the environment manager and logging system. The MON maintains envi-
ronment control and signals out-of-tolerance information internally and
then processes these events and updates appropriate SNMP MIB and
Syslog information. The events are also reported via Webserver to the
Application Manager status screens.
Some default limits and parameters may be adjusted via the CLI or Appli-
cation Manager.
Image Management - Compact Flash
The compact flash (CF) is the only bulk storage drive in the D5 UEQ. It
contains software images for all the available modules within the D5 UEQ.
It also contains the operating system and configuration files from which
the D5 UEQ boots. The CF is the location of non-volatile (NV) event infor-
mation.
At startup, the events in the NV log are read and then stored in the volatile
log (RAM on the WAN). If the MON is removed, the compact flash is not
accessible and events will no longer be saved to the NV log.
3 Product Overview
CAUTI ON
If the compact flash becomes full, the system will not boot up. If this
happens, clear out extraneous files to free up disk space (do not delete
the system or config files).
External I nterfaces
The D5 UEQ supports the following external interfaces and protocols:
Protocols
HTTP
SNMPv1, v2, v3
SSH
Telnet
FTP
TFTP
DHCP
IGMPv1, v2, v3
Interfaces Modules
# Per
Module Label Type Location Function
Downstream RF Connector QPM 4
RF1, RF2,
RF3, RF4
F Connector 75 Ohm Rear, Slot 1-6 RF to HFC Network
Downstream RF Connector
DPM
6DX2
2 RF1, RF2 F Connector 75 Ohm Rear, Slot 1-6 RF to HFC Network
GigE SFP Slot WAN 4 GigE 1-4 SFP Rear, Slot 7-8
Incoming Video over
IP Streams
Management Port WAN 1 ETH1
RJ 45, 10/100/1000
Base-T
Rear, Slot 7-8
SNMP/CLI
Management
Conditional Access Port WAN 1 ETH2 RJ 45, 10/100, Base T Rear, Slot 7-8
DVB Conditional
Access; SNMP/CLI
Management
Compact Flash MON 1
Compact
Flash
CF Type 1 MON Module
Removable Memory
Device
Serial Console Port Front 1 |0|0| RJ 45 Front Panel CLI via MON
Video Test Port Front 1 ,-'-, RJ 45, 10/100, Base T Front Panel
Test Port via MON
(Future)
DOCSIS Timing Interface WAN
1 (or 2 DTI per
WAN using DTI
dongle)
DTI CL RJ 45 Rear, Slot 7-8
DTI server connection
to provide third party
DOCSIS timing.
Edge QAM
Video/ UDP/ MPEG Management
The D5 UEQ system terminates MPEG video streams ingested over UDP IP
GigE ports. The D5 UEQ must associate UDP ports to QAM channels for
coherent mapping of MPEG traffic to QAM/RF outputs.
Most video servers reply on a static session resource philosophy that
provides the appropriate IP address and UDP port numbers to get a video
source to its final destination. In this model, the Session Resource
Manager (SRM) is configured manually without any protocols that nego-
tiate between the SRM and the Edge QAM devices. To simplify this config-
uration, blocks of UDP port numbers are associated (mapped) to the QAM
channels of the D5 UEQ.
Each QAM channel has a set of 127 default UDP ports mapped to them and
are directed to specific slots within the D5 UEQ (for more information, see
Chapter 8, Video on Demand).
QAM/ RF Management
Setting the frequency of the RF connector sets the center frequency of the
lowest QAM channel and the other QAM channels move accordingly. The
following diagram illustrates the frequencies where the QAM channels will
appear.
Dual-Port QAM Module (DPM
4DX2) in Quad Mode
The standard offsets are +6, +12 and +18MHz for Annex B or Annex C
and +8, +16, +24MHz for Annex A. These may be modified using the
channel-width and video symbol-rate commands
3 Product Overview
Each Dual-Port QAM Module (DPM 4DX2) in Quad Mode supports:
Two independent 75-OHM RF-connectors that carry four adjacent
QAM channels each
Maximum of eight QAM channels per module in ANNEX A/B/C modes
Total of 48 channels per chassis
RF port may run in single, dual or quad mode
Adjacent channels may be muted.
Figure 3-2: Setting RF Center Frequency on the Dual-Port QAM
Module (DPM 4DX2) in Quad Mode
Dual-Port QAM Module (DPM
6DX2) in Hex Mode
Each Dual-Port QAM Module (DPM 6DX2) in Hex Mode supports:
Two independent 75-OHM RF-connectors that carry six adjacent QAM
channels each
A maximum of twelve QAM channels per module in Annex B mode only
Annex A and C have a maximum of eight QAM channels per module
And a total of 72 channels per chassis
The RF ports may run in single dual quad or hex modes
Adjacent channels may be muted
CF (center frequency)
+ 6/+ 8M Hz
+12/+ 16M Hz
+ 18/+24M Hz
qam 1 qam 2 qam 4 qam 3
The following illustrates the center frequencies on the Dual-Port QAM
Module (DPM 6DX2) in Hex Mode:
Figure 3-3: RF Center Frequencies on the Dual-Port QAM Module
(DPM 6DX2) in Hex Mode
(QPM 8DX4)
Each Quad-Port QAM Module (QPM 8DX4) supports:
Four independent 75 ohm RF-connectors that carry eight adjacent
QAM channels each
Total of 32 QAM channels per module
Total of 192 QAM channels per full-fill chassis
Supports Annex A/B/C
RF port may run in single, dual, quad, hex, or octal mode
Simultaneous support of multiple services
- within a QAM carrier
- within a bonded QAM channel group
Arbitrary QAM channel muting allows non-continguous channel
assignments.
Configuring the frequency of the RF connectors sets the center frequency
of the lowest QPM channel with frequencies for the other QAM channels
moving accordingly.
QAM Channel Frequencies
1/1.2 1/1.3 1/1.4 1/1.5 1/1.6
qam2 qam3 qam4 qam5 qam6
+6/+8MHz
+12/+16MHz
+18/+24MHz
+24MHz
+30MHz
DS PHY/Upconverter DOCISIS DRFI (QAM) Module
RF1 RF2
QAM
Chan 2
QAM
Chan 3
QAM
Chan 4
QAM
Chan 5
QAM
Chan 1
QAM
Chan 6
QAM
Chan 2
QAM
Chan 3
QAM
Chan 4
QAM
Chan 5
QAM
Chan 1
QAM
Chan 6
QAM 1
1/1.1
qam1
3 Product Overview
The following illustrates the center frequencies on the Quad-Port QAM
Module (QPM 8DX4):.
Figure 3-4: RF Center Frequencies on the Quad-Port QAM Module
(QPM 8DX4)
Demodulator Support The Demodulator support added in release 3.0.1 allows the QPM module
to provide RF related performance statistics to the user, either through the
CLI, Web Manager or Application Manager.
There is a single demodulator circuit per QPM module, serving the full set
of 32 possible QAM channels on the module. The demodulator works in
conjunction with a silicon tuner and an RF switch that allows a single input
from the 4 unique RF outputs to be tuned and demodulated.
The demodulator allows for the monitoring of Bit Error Rate (BER), Signal
to Noise Ratio (SNR) and counts Forward Error Correction (FEC) informa-
tion. The monitoring/counting is performed on a periodic basis, where
configured QAM channels on any of the 4 RF ports can be monitored for a
maximum of 60 seconds before moving to the next QAM channel. Control
of the monitoring is enabled on a per QAM channel or per RF port basis,
and QAM channels can be included or excluded.
The demodulator also allows for the recovery of the QAM channel
MPEG2TS stream from the RF output. This MPEG2TS stream may be
snooped in the same way as the existing video snoop qam x/y.z post-
mux command operates, replacing post-mux with post-rf. The peri-
odic scanning of the QAM channels is halted when a post-rf snoop is
running on a specific QAM channel in the QPM.
QPM 1 DS PHY/Upconverter DOCISIS DRFI (QPM
RF1 RF2 RF3 RF4
1/1.1 1/1.4 1/1.3 1/1.2 1/1.51/1.61/1.71/1.8 1/3.1 1/4.1 1/2.11/2.21/2.3 1/2.41/2.51/2.61/2.71/2.8 1/3.2 1/3.8 1/3.7 1/3.6 1/3.5 1/3.4 1/3.3 1/4.8 1/4.7 1/4.6 1/4.5 1/4.4 1/4.3 1/4.2
1/1.2 1/1.3 1/1.4 1/1.5 1/1.6
channel 2 channel 3 channel 4 channel 5 channel 6
+6/+8MHz
+12/+16MHz
+18/+24MHz
+24MHz
+30MHz
1/1.1
channel 1
1/1.7 1/1.8
channel 7 channel 8
+36MHz
+42MHz
QPM Channel Frequencies
Center
Frequency
To enable the demodulator function, the video monitoring rf-
channel scan command must be entered at the RF port or QAM channel
level. When executed at RF Port level, all active QAM channels are included
in the periodic scanning. To enable the demodulator for the entire module,
the video monitoring rf-signal scan command must be config-
ured on all four QPM RF ports.
To exclude a QAM channel from the scanning, use the [no] format of the
command.
The scanning algorithm demodulates every included QAM channel for a
period of 1 second before moving to the next available QAM channel. To
allow the demodulator to collect more statistics per QAM channel, the
delay parameter, for the video monitoring rf-signal command can be
used to extend the length of time, in milliseconds, the demodulator should
dwell on the QAM channel before proceeding to the next QAM channel.
The delay interval is called the scan window, and is used to collect the
post-FEC BER measurement. The maximum interval is 60000 milliseconds
(60 seconds). It is also possible to calculate the pre-FEC BER measurement
using the unerrored/corrected/uncorrected values retrieved from the
demodulated QAM RF signal.
In the case of monitoring a single QAM channel, it is possible to remove
all but one video monitoring rf-signal scan command. This causes the
scanning to remain on the same QAM channel, allowing the uninterrupted
collection of FEC codewords and allows for a longer BER measurement.
The FEC codeword related statistics are aggregating for the entire time the
demodulator is scanning QAM channels. To reset the codeword counts, the
QAM channel must be disabled from the demodulator and reenabled.
The D5 UEQ also provides an extension to the show interfaces qam X/Y.Z
command to monitor the results of the demodulated statistics gathering.
The following example shows how the output of this command might look:
D5(config)#show interfaces qam 3/2 stats
QAM 3/ 2. 1:
Channel RF out put i s l ockabl e
BER: 0. 0E- 08
FEC codewor ds:
466672 uner r or ed
0 cor r ect ed
0 uncor r ect abl es
SNR: ~39 dB
Cur r ent vi deo out put ut i l i zat i on: 0%,
bi t r at e: 0. 015040 Mbps, packet r at e: 10 pps
Aver age vi deo out put ut i l i zat i on: 0%,
3 Product Overview
For t he l ast 5 mi nut es:
Mi ni mumvi deo out put ut i l i zat i on: 0%,
Maxi mumvi deo out put ut i l i zat i on: 0%,
QAM 3/ 2. 2:
BER: 0. 0E- 08
FEC codewor ds:
465769 uner r or ed
0 cor r ect ed
SNR: ~37 dB
QAM 3/ 2. 3:
BER: 0. 0E- 08
FEC codewor ds:
443397 uner r or ed
0 cor r ect ed
SNR: ~39 dB
D5( conf i g) #show i nt qam3/ 2 st at s
QAM 3/ 2. 1:
BER: 0. 0E- 08
FEC codewor ds:
517174 uner r or ed
0 cor r ect ed
SNR: ~39 dB
QAM 3/ 2. 2:
BER: 0. 0E- 08
FEC codewor ds:
465769 uner r or ed
0 cor r ect ed
SNR: ~37 dB
QAM 3/ 2. 3:
BER: 0. 0E- 08
FEC codewor ds:
465682 uner r or ed
0 cor r ect ed
SNR: ~39 dB
3 Product Overview
QAM 3/ 2. 4:
BER: 0. 0E- 08
FEC codewor ds:
582218 uner r or ed
0 cor r ect ed
SNR: ~39 dB
D5( conf i g) #i nt qam3/ 2
GigE Link Trunking Redundancy
The D5 UEQ has several layers of internal redundancy and fault tolerance
including GigE link trunking redundancy.
Trunking allows multiple Ethernet links to be combined together to form a
single logical link, with a total bandwidth equivalent to the aggregate of all
the physical Ethernet links. In the case of the D5 UEQ, those logical links
are the GigE Small Form Factor Pluggable cards (SFPs). The single logical
GigE link of SFPs is treated as one interface and is normally configured with
a single IP address. This can then be used to perform loopback testing on
the interface. Any traffic sent by the sender to the destination IP address
is automatically load balanced over all of the physical SFPs in the trunk.
Redundancy is achieved by redirection of ingested traffic from a failed SFP
to one that is configured to support a failure. If the failure is resolved, the
D5 UEQ software will allow the reactivated SFP to work within the trunking
configuration again.
The D5 UEQ can combine up to four GigE SFP ports into a trunk to create
a single logical link capable of delivering 2.6 Gbps to the D5 UEQ.
GigE MAC Redundancy
GigabitEthernet MAC Redundancy is a feature developed on the D5 UEQ
to support configuring an unused gigabitEthernet port as a backup for
active gigabitEthernet ports. In Release 3.0.1, this feature further exploits
the use of one of the fastEthernet ports, 0/1, being configured as a redun-
dant backup port to support all four active gigabitEthernet SFP ports. The
MAC Redundancy feature is transparent to the services running on the D5
UEQ, meaning that it can be applied to VOD, SDV (RPC/NGOD), BCAST,
and DOCSIS/DEPI applications. Each of the four gigabitEthernet ports on
the D5 UEQ have full Ethernet MAC functionality. When a gigabitEthernet
port is used as a spare, it must be connected to the same switch/vlan as
the gigabitEthernet ports it is sparing for. The MAC redundancy feature is
configured through the use of the ip bundle gigabitethernet x/y
command entered on any active gigabitEthernet port. For detailed infor-
mation, please refer to the Expanded Operation in Release 3.0.1 section
on page 13-17.
IGMP Client v1, v2, v3
In certain topologies, it is not necessary to run a multicast routing protocol
because the D5 UEQ can be utilized to learn group membership informa-
tion and forward streams based upon that information. The Internet Group
Management Protocol (IGMP) is used for this purpose.
Multicast video traffic received by the D5 UEQ uses the same UDP port
mapping rules as unicast video traffic. These forwarding rules dictate
which QAM channels will receive video stream(s). Therefore, the same
multicast group address can be reused for multiple video streams once a
unique UDP destination port is used in each stream.
IGMP can be employed to the network architecture either by directly
connecting the D5 UEQ to a video server or remotely connecting via a
switch, series of switches, routers, or a combination thereof.
The IGMP client operates on either a gigabit subinterface or a loopback
subinterface that is a member of a trunk. It does not operate on any fast
Ethernet ports. IGMP interfaces are initiated when a port is configured in
a video mode, this includes when a loopback is added to a trunk. IGMP
3 Product Overview
interfaces are removed when a port is configured in a non video mode, this
includes when a loopback is removed from a trunk. There are a maximum
of 253 groups that can be configured on the D5 UEQ. A group can only be
configured against a single subinterface.
When a group is statically configured, the WANs switch is programmed to
allow packets destined to the multicast address to be passed whether
IGMP is enabled or disabled on that subinterface.
Digital Video Broadcasting
The D5 UEQ provides the normal DVB Broadcast table processing that
includes program and Packet Identifier (PID) filtering, remapping of PIDs
and Single Program Transport Stream (SPTS) multiplexing. It also
supports all the normal DVB SI (Service Information) tables. The ARRIS D5
Application Manager also provides the ability to create and inject Program
Specific Information (P)SI table via the DVB Program Specific Information
Generator (P)SIG interfaces. Some additional functions the D5 UEQ
provides:
Support for DVB-SI tables not just MPEG (P)SI
Controls automatic (P)SI table generation
Deterministic use of PIDs
Support of DVB-SimulCrypt pre-scrambled content
Support of DVB-SimulCrypt without the EIS<>SCS interface
Supports scrambling of multiple programs with one ECM stream
GUI interface (ARRIS D5 Web Manager) for editing SI tables (refer-
ence Application Manager)
SI-Data insertion/removal and SPTS stream replacement handling
Backup/redundancy
Configuration simplicity
Content Protection
The D5 UEQ employs standards-based digital TV solutions and works
closely with leading conditional access system (CAS) vendors to ensure
that content is securely distributed. The D5 UEQs SimulCrypt System solu-
tion is a simple, easy-to-manage, powerful implementation of today's DVB
encryption standards. It gives broadcasters significantly more flexibility in
delivering reliable inter-operability between complex, interrelated systems,
including set-top boxes (STBs), middleware, scheduling applications, CAS,
and compression equipment.
Privacy Mode
The application of Privacy-Mode technology enables the D5 UEQ device to
seamlessly integrate with more conditional access systems and set-top
boxes in addition to its existing DVB SimulCrypt support. The D5 UEQs
session- and tier-based encryption capability provides greater flexibility
than the common practice of pre-encrypting VOD content as well as
reducing the overall complexity, cost of implementing and managing a
Video on Demand service.
The Privacy Mode deliverable for the D5 UEQ covers a number of different
elements. The D5 UEQ is equipped with the correct scrambling technology
to enable incoming streams to be encrypted in real-time with the correct
CAS parameters. The D5 UEQ will dynamically retrieve the necessary
secure CAS information to support this real time scrambling. It does this
through a separate proxy application that is supplied as part of the D5
Application Manager platform. In a similar way to DVB SimulCrypt condi-
tional access systems, multiple D5 UEQs are expected to communicate via
the proxy application for this secure CAS information. The proxy applica-
tion is a secure application that is protected from unauthorized use and
must be unlocked before it can be used. It off loads any direct D5 UEQ
communication to the Privacy Mode ERS element and as such acts as the
central authority that enables Privacy Mode to operate on D5 UEQs.
DVB SimulCrypt
The Digital Video Broadcasting (DVB) SimulCrypt standard is the dominant
Conditional Access (CAS) standard deployed by European cable operators.
Its open nature allows various headend devices to work together
seamlessly to provide secure delivery of broadcast and event content to
cable customers.
The DVB SimulCrypt specification relies on a DVB common scrambling
algorithm for the encryption and decryption of MPEG information. A secure
system of Electronic Keys, Control Words (CW), Subscriber Management
Systems (SMS), Entitlement Control Messages (ECM), Entitlement
Management Messages (EMM) and external event scheduling systems are
used to protect content in the Multiple Service Operator (MSO) network.
The D5 UEQs SimulCrypt solution allows an Operator to support multiple
CAS solutions which gives them greater freedom and flexibility in the
implementation of content protection within their networks. It supports
the handling of vendor-specific pre-encrypted content and stream encryp-
tion by adding descriptor pointers and Program Identifiers (PIDS) into D5
UEQ Program Map Tables (PMT), Program Association Tables (PAT), and
Network Information Tables (NIT). The D5 UEQ accepts scrambling
session information, interfaces with ECM generators, creates, then
supplies CWs, and receives prepared ECM messages. It also ensures
3 Product Overview
synchronization of CWs and transmission time, for ECMs, and interfaces
with SMS systems so that it can forward EMM messages and Private Data
messages to subscriber STBs.
An example of this scrambling session begins when a signal is sent to the
D5 UEQ Edge QAM before the MPEG content is transmitted. This allows the
D5 UEQ to setup the necessary sessions needed to send CWs in exchange
for ECMs. The D5 UEQ schedules the transmission of ECMs with respect to
the receipt of MPEG content. It also coordinates timing for scrambling
MPEG content. The subscribers set top box (STB) then receives the ECMs
and uses service keys (SK) to descramble them and recover CWs. The
subscribers STB uses the CWs to then descramble the received MPEG
content.
DVB PSI/ SI Processing
The D5 UEQ PSI/SI processing ensures the integrity of video streams
received and forwarded to output QAM channels. PSI information
contained within PAT and PMT tables gets dynamically updated as a result
of SPTS multiplexing to output QAMs. Automatic program numbering for
received SPTS streams can be used, with the resultant PAT and PMTs
updated with the new numbering. PID filtering and remapping also results
in changes to these PSI tables. The D5 UEQ also creates CAT tables as
required for any EMMs that may be added to an output multiplex and
updates descriptors within PMT tables for any ECMs that may be present.
DVB SI information is also handled by the D5 UEQ, from updating of NIT
tables, to the handling of external configured SI information provisioned
on the D5 UEQ using the (P)SIG SimulCrypt interface from the D5 Appli-
cation Manager PSI/SI generator. The D5 UEQ also supports importing
Teleste CatVisor files for provisioning of PSI/SI information. The D5 UEQ
also supports the insertion of DVB SI information presented to it from an
Ortikon SI generator using a dedicated MPEG-2 TS stream; all partial SI
information is replaced with the dedicated received SI stream.
DVB SimulCrypt User Interface
CLI The D5 UEQ DVB SimulCrypt feature (Figure 3-5) contains extensive CLI
support to configure and monitor the operation of the major components
that comprise this feature. The different areas: EIS, ECMG, EMMG/PDG
(Private Data Group), Code Word Generator (CWG), Scrambler, and
Synchronizer all have CLI commands to control their operation.
Figure 3-5: DVB SimulCrypt
Web Manager
The ARRIS D5 UEQ Web Manager (Web Manager) is a comprehensive
graphical user interface (GUI) element manager that enables a user to
configure, monitor and troubleshoot an ARRIS D5 Universal Edge QAM.
The Web Manager is intuitive and powerful. It reports D5 UEQ inventory
via auto detection and allows GUI control over many commands found in
the CLI; thereby expediting and simplifying common configurations that
could take considerably longer utilizing the CLI exclusively.
The Web Manager focuses on a specific subset of features which allows an
operator to manage MPEG configuration, monitor bandwidth and perfor-
mance, monitor events in real-time and provision QAM modules.
D5 UEQ
EMMG
PDG
A
C
G
PSI/ SI
Generator
SCS
CWG
M
U
X
S
c
r
a
m
b
l
e
r
SI Tables
PSI Tables
Private Data
EMMs
AC
CW
CW
ECMs
E
C
M
s
C
W
A
C
E
C
M
G
Content
&
Tables
SCG
S
I
/
I
F
A
g
e
n
t
3 Product Overview
The Web Manager utilizes Hyper Text Markup Language (HTML), Dynamic
Hyper Text Markup Language (DHTML), J avaScript, and Cascading Style
Sheets (CSS).
NOTE
For detailed instructions, see the Configuring the D5 UEQ with the Web
Manager section on page 7-10
Application Manager
The ARRIS D5 Application Manager supports large-scale D5 UEQ deploy-
ments with management tools and surveillance.
The Application Manager automates the complete D5 UEQ management
life cycle ranging from discovery, simple logical interface configuration,
software deployment, QAM configuration on third party SDV Servers,
event management in a hybrid setup within the full NMS solution, privacy
mode encryption, to complex PSI/SI table editing & section provisioning
for broadcast support.
A suite of user-friendly, versatile and robust worksheets enable operators
to deploy network wide D5 UEQ configuration changes, rules and filters for
Broadcast, VOD, SDV and M-CMTS video applications.
A broad range of server functionality supports real-time communications
with D5 UEQs in the managed network and ensures the server performs
network facing tasks, such as topology, inventory, fault management
tasks, configuration tasks, status polling, performance management and
report generation seamlessly within its framework. The server provides the
communication link between multiple clients connected to it in a distrib-
uted setup where individual updates are broadcast to all registered clients.
Ancillary to the core batch configuration features, the Application Manager
will help in capacity planning with real-time QAM utilization triggered
events along with historical data, plus facilitate the edge of the network
event filtering, aggregation and forwarding to third party NMS systems.
Batch Configuration Tool
(BCT)
The Batch Configuration Tool (BCT) worksheets mask the associated video
application rules and policies with easy to use workflows with validation for
network wide D5 UEQ configuration.
Privacy Mode Encryption
Provisioning (This feature is
provided to U.S. operators
only.)
Motorola Privacy Mode encryption of Video on Demand (VoD) content can
be performed by D5 UEQs in the network. Application Manager provides a
secure method to provision Privacy Mode encryption across many D5
UEQs. The provisioning capability is granular enough to select the partic-
ular QAM channels and video streams to be encrypted.
Advanced Provisioning The Application Manager enables the user to bulk provision many D5 UEQs
from within the one work flow using the BCT. The tool configures input to
output interfaces, multi-cast setup, M-CMTS integration, ERM configura-
tion, video application, rules and filters for SDV, Broadcast and VOD,
redundancy, Motorola Privacy Mode Encryption and D5 UEQ user access.
Software Management The Application Manager provides graphical display of the software images
active on the population of discovered D5 UEQs. It provides the ability to
change boot configuration, image change control, multiple device
upgrades and automated configuration back-up per D5 UEQ.
PSI/ SI Editor The Application Manager PSI/SI Editor can edit the contents of PAT, PMT,
CAT, NIT, SDT (actual and other), TOT and TDT.
Network-Wide Fault
Management
The Application Manager comes with extensive monitoring capability of all
discovered D5 UEQs. The operator can monitor traps, event logs, transport
streams and individual programs.
The Application Manager provides hardware inventory, environmental
telemetry and software audit reports.
The Application Manager receives, correlates, and reports alarms, across
multiple D5 UEQ devices utilizing embedded trap/event filters, forwarding,
and aggregation algorithms.
Network Reports The Application Manager provides statistical data collections with triggers,
pre-configured by the user, to generate various reports. Network wide
reports cover inventory audits, software image audits and environmental
telemetry test point measurements.
SDV Third Party QAM
Configuration Support
The Application Manager supports a dedicated view for RPC/GQI and
NGOD/ERM configuration, session and stream view, SDV QAM Statistics
and export functionality that generates the third party QAM configuration
files that integrates with the CISCO USRM or BigBand SDV Server.
Embedded Help System The Help System is integrated into the Application Manager GUI. Guidance
on how to navigate and use the Application Manager tool set is only a few
mouse clicks away.
3 Product Overview
4. System Components
Topics Page
System Overview 2
Front Panel 2
Hardware Locations 3
Hardware Functions 4
EMI Shielding 5
D5 UEQ Airflow 6
Blanking Plates 6
Fan Tray 6
Power Converter Module (PMOD) 7
Fan Converter Module (FMOD) 7
Power Supply Unit (PSU) 8
Wide Area Network Module (WAN) 11
Dual WAN 13
Quadrature Amplitude Modulation Module (QAM) 13
Chassis Monitoring Module (MON) 20
4 System Components
System Overview
The ARRIS D5 UEQ Edge QAM is an MPEG-2 transport and digital video
over cable delivery system. It can be variably configured to meet any
users unique requirements. The following describes the D5 UEQ Edge
QAM components.
Front Panel
The front panel includes:
Four line, 20 character, read-only, LCD user information display
Five button keypad (up/down/left/right/enter)
RJ -45 local craft access port (CLI interface port)
RJ -45 10/100 Ethernet test port (reserved for future use)
Figure 4-1: D5 UEQ Front Panel Face Plate
The CLI interface port is the RS/232 connector (labeled |0|0|) on the front
of the D5 UEQ. It is the only direct physical connection for executing CLI
commands.
CLI sessions can also be setup via telnet, SSH over the IP network, or
launched from the Telnet DMTS icon (Navigation Window) in the D5 UEQ
Web Manager desktop client program. The maximum concurrent sessions
allowed are four telnet, four SSH and one front panel session.
The Ethernet video test port (right) is labeled with the standard Ethernet
network icon. It is reserved for future use.
The front panel display includes a LCD and LEDs that communicate
connection status to the user. The front panel also includes a simple
five-button keypad. This keypad is used by the operator to drive a simple,
read-only, user interface.
CLI Interface
Port RJ -45 10/ 100
Ethernet Test Port
(Reserved for
Future Use)
LCD User
Information Display
Read Only
4 Line, 20 Character
5 Button Keypad
(Up/Down/Left/Right/Enter)
Hardware Locations
Behind the front panel face plate to the left, is the fan tray (Figure 4-2).
To the right, are two PSU slots that can accept either AC or DC PSUs. Adja-
cent to the PSUs, on the left, are three slots. The bottom slot is dedicated
to the Chassis Monitor Module (MON). The upper two slots are dedicated
to the Power Converter Modules (PMOD1 and PMOD 2) or a combination
of a Power Converter Module (PMOD2) and a Fan Converter Module
(FMOD1).
Figure 4-2: D5 UEQ Front Chassis
On the rear of the D5 UEQ chassis are eight slots (Figure 4-3 and Figure
4-4) numbered from left to right in descending order. Slot numbers one
through six are for QAM modules. Slot number seven is for the WAN
module. If you plan to run in Dual WAN mode, use slot eight for the second
WAN card. If not, this slot should contain a blanking plate.
Figure 4-3: D5 UEQ Rear Chassis View with QPMs and Dual WAN
MON Module
PMOD Fan Tray
Power Plug
FMOD/PMOD Fan Tray
Power Plug
FMOD/PMOD 1
Fan Tray
PSU 1 PSU 2
PMOD 2
Compact
Flash Card
Fan Tray Mates
FMOD/PMOD 1 Here
for Power
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
O
O
S
P
O
W
E
R
O
O
S
P
O
W
E
R
O
O
S
P
O
W
E
R
A
R
R
I
S
A
R
R
I
S
A
R
R
I
S
D
5
Q
A
M
8
D
X
4
O
O
S
P
O
W
E
R
D
5
Q
A
M
8
D
X
4
O
O
S
P
O
W
E
R
D
5
Q
A
M
8
D
X
4
O
O
S
P
O
W
E
R
A
R
R
I
S
A
R
R
I
S
A
R
R
I
S
D
5 Q
A
M
8D
X
4
D
5 Q
A
M
8D
X
4
D
5 Q
A
M
8D
X
4
PSU1 DC
Terminal
QAM
RF1
Port
AC
PSU1
Plug
AC
PSU2
Plug
QAM
RF2
Port
PSU2
Fuse
PSU1
Fuse
DC
Grounding
Stud
QAM
RF3
Port
QAM
RF4
Port
Fast
Ethernet
Port (FE01)
DTI
Port
GbE
Ports
PSU2 DC
Terrminal
Fast
Ethernet
Port (FE02)
4 System Components
Figure 4-4: D5 UEQ Rear Chassis View (DPM 6DX2 based Rear
view)
NOTE
Execute the show linecard status command in the CLI or launch the
Line Card Status window from the Monitor drop down menu, in the D5
UEQ Web Manager to view the status of all modules within the unit.
Hardware Functions
There are six module types currently supported by the D5 UEQ (Figure
4-5):
Wide Area Network module (WAN) - handles the IP interfacing
and processing plus DOCSIS timing synchronization
DS PHY/ Upconverter DOCSI S DRFI -based QAM module
(QAM) - handles MPEG Multiplexing, channel coding, modulation,
channel bonding and RF upconversion
Chassis Monitor module (MON) - centralizes chassis monitoring,
chassis control, system non-volatile memory, and houses the bulk
storage Compact Flash (CF) card
Power Supply module (PSU) - nominally rated at 500W for systems
containing Dual-Port QAM Modules (DPM 4DX2) in Quad Mode, Dual-
Port QAM Modules (DPM 6DX2) in Hex Mode with a single WAN or
Conditional
Access
Port
Fast
Ethernet
Mgmt Port
DTI
Port
Reserved
for
Future Use
QAM
RF1
Port
AC
PSU1
Plug
GbE
Ports
AC
PSU2
Plug
QAM
RF2
Port
PSU2
Fuse
PSU1
Fuse
Reserved
for Future
DC
Grounding
Stud
DC PSU
1&2 Plug
600W for systems containing Quad-Port QAM Modules (QPM 8DX4)
and Dual WANs, to provide conditioned continuous voltage for the D5
UEQ chassis
Power Converter module (PMOD) - provides additional voltage
rails for the QAM module as well as power and a telemetry interface
to the fan tray.
Fan Converter module (FMOD) - provides an interface to the fan
tray as well as telemetry monitoring and alarms for individual fan revo-
lutions per minute (RPMs).
Figure 4-5: D5 UEQ Module Assignments
EMI Shielding
The chassis construction itself forms an EMI shield. Openings in the
chassis, such as front/rear slots are suitably gasketed so as to complete
the EMI seal as long as blanking plates are installed in those open spaces
that do not contain cards or modules.
QAM Module
slot #1
QAM Module
slot #4
QAM Module
slot #5
QAM Module
slot #6
QAM Module
slot #3
QAM Module
slot #2
M
i
d
p
l
a
n
e
WAN Module
WAN Module
8 Adjacent QAM Channels
4 System Components
Blanking Plates
Blanking plates serve three important functions. They prevent exposure to
hazardous voltages and currents inside the chassis; they inhibit electro-
magnetic interference (EMI) that might disrupt other equipment; and they
direct the flow of cooling air through the chassis.
CAUTI ON
It is critical that all blanking plates remain installed where there are no
modules so that air flow will circulate correctly.
Fan Tray
The fan tray is accessible after removing the front panel. Air vents are
located on the left and right sides of the chassis. It is critical that these
vents remain unobstructed after the chassis is mounted so the D5 UEQ
does not overheat.
D5 UEQ Airflow
The D5 UEQ operates with side-to-side cooling. Fans located on the left of
the unit (from the front fascia perspective) exhaust hot air from the D5
UEQ, pulling cool air from the right hand side of the unit. Markings on the
D5 UEQ indicate the direction of air flow.
Figure 4-6: D5 UEQ Airflow direction
The D5 UEQ requires side to side airflow of greater than 200 cubic-feet-
per-minute (CFM) aggregate, when measured in a cross-section along its
side profile. Airflow is then channeled appropriately at higher speed
through PSUs and line cards through the D5 UEQs integral fans.
Air Re-circulation Re-circulating air is a consideration for the installation of all equipment
whether it employs side-to-side or front-to-back cooling. Re-circulating air
from an equipments air exhaust to the air intake causes the equipment to
experience effective ambient temperatures elevated above those which it
would otherwise experience. This may lead to reduced MTBF for the equip-
ment if the resulting operating temperature of the equipment is higher
than normal. It may also limit the amount of equipment that can be
installed within a rack. Refer to Racking Recommendations on page 6-4 for
various racking configurations and recommendations.
Power Converter Module (PMOD)
The Power Converter Module (PMOD) generates power rails required by
the QAM module.
The D5 UEQ can support two PMODs running simultaneously in a load-
sharing configuration similar to the main PSUs. Either PMOD can supply
sufficient power for the entire chassis, though the lower unit must be in
place to provide power and monitoring signals to the fans.
Fan Converter Module (FMOD)
The Fan Converter Module (FMOD) provides an interface to the fan tray
for both power and monitoring individual fan speeds. The FMOD must be
inserted in the bottom PMOD slot since the fan tray only plugs into the
bottom slot. The FMOD is used instead of the PMOD in D5 UEQ systems
which are running exclusively with QPM QAM cards, i.e. no DPM QAM
cards.
If there are one or more DPM QAM cards in the D5 UEQ system, then it is
necessary to have a PMOD card (which can be inserted into the top PMOD
slot). This is required in order to supply the required voltage rails to the
DPM cards.
CAUTI ON
The chassis thermal monitoring protection system may shut down the D5
UEQ if the fan tray is unplugged for more than two minutes as the chassis
may reach the fatal temperature threshold limit.
4 System Components
The show lincard status command will show the Card Type as a
PMOD, but will indicate FMOD in the Product Code column, as shown in
the sample output below:
D5#show l i necar d st at us

Car d Admi n Oper Dupl ex Ser i al Pr oduct Pr oduct Pr ov
Type St at e St at e St at e Number Code Rev Type
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
MON I S C41530A50006 MON_8 AD MON
QAM 1 UP I S Si mpl ex C188A0G90174 QAM_6DX2 EB QAM
QAM 4 UP I S Si mpl ex C179A081E017 QAM_8DX4 BA QAM
WAN 7 I S C038B0B1B062 WAN_4G2F CA WAN
PMOD 1 I S C228B0D60013 FMOD AB PMOD
PMOD 2 I S C367B0D60117 PWR_CNV8 AB PMOD
PSU 1 I S PSU
PSU 2 I S AC- 0609005 PSU_AC AA PSU
CHAS I S T14900E3005 CHA_8 AA CHAS
Power Supply Unit (PSU)
The D5 UEQ operates on one or two redundant, load-sharing power supply
units (PSUs) (Figure 4-7). PSUs are available in AC or DC versions. Each
PSU can provide full load requirements at 1:1 optional redundancy (refer
to following section on AC PSU compatibility). The load share is nominally
at 50% during normal operation when both power supplies are utilized.
NOTE
If you are only running one Power Supply Unit, it must be installed in the
bottom slot (Slot 1).
Figure 4-7: Location of D5 UEQ Power Supply Units
PSU 1 PSU 2
High Capacity AC Chassis
Part Number 780276
In Release 3.0, the new high capacity AC Chassis will be shipped with one
of the AC PSUs (part number 780280) shown in Figure 4-8 below. If you
need to replace a single PSU or run redundant PSUs, you must use this
PSU.
Figure 4-8: Example of the 780280 AC PSU
High Capacity DC Chassis
Part Number 780277
The high capacity DC Chassis will be shipped with one of the DC PSUs (part
number 780281) shown in Figure 4-9 below. If you need to replace a single
PSU or run redundant PSUs, you must use this PSU.
Figure 4-9: Example of the 780281 DC PSU
Also new with the high capacity chassis, it will be possible to mix the
780280 AC PSU in a chassis with the 780281 DC PSU.
AC PSU Compatibility -
Release 2.6 or earlier ONLY
Please note the following compatibility rules when replacing or adding AC
PSUs to the earlier D5 UEQ Chassis.
The original AC chassis (Part Number 716625) has a Telkoor PSU with two
types of face plates depending on when it was shipped. The two face
plates, shown below, have the same part number. If you are running the
original D5 UEQ with only one PSU, it may be replaced with either of these
AC PSU. A redundant configuration in the original chassis requires that
both PSUs are the same part number. The newer AC PSU can be installed
in the original chassis but cannot be mixed with the original AC PSUs in a
redundant configuration.
P
O
W
E
R
A
L
A
R
M
P
O
W
E
R
A
L
A
R
M
780281 DC PSU, Telkoor High Capacity Chassis
4 System Components
CAUTI ON
If you plan to add a redundant PSUs, it must match the presently
installed PSU type. You cannot mix PSUs in the earlier chassis.
Figure 4-10: 716630 - AC PSU, Telkoor (two styles)
The AC Chassis (Part Number 722050) contains the PSU shown in Figure
4-11. If you need to replace a single PSU or run redundant PSUs in this
unit, they must be the 722058 AC PSU.
Figure 4-11: 722058 - AC PSU, Power-One
NOTE
If there is a PSU failure, the D5 UEQ logs this as a PSU removal event.
Equally, on insertion of a PSU, a log is generated of the insertion event.
If there is no physical removal of the PSU then a PSU removal event in a
load-sharing configuration would provide alarm capability to deal with the
PSU failure.
WARNI NG
The D5 UEQ is designed to automatically shut down on detection of
abnormal voltages on the internal rails. To recover from this shutdown
condition, the Auto Shutdown Recovery Button must be pressed on
the MON while the unit is installed in the chassis to enable the system to
P
O
W
E
R
A
L
A
R
M
P
O
W
E
R
A
L
A
R
M
F
a
u
l
t
I
n
p
u
t

O
K
reset and boot up (Figure 4-19, MON Auto Shutdown Recovery Button, on
page 4-21). This is a safety feature to ensure that the D5 UEQ does not
run with unsafe power conditions. The D5 UEQ checks for PSU over-
voltage and sets the system into such a shutdown state. It will not allow a
boot up if the PSU over-voltage condition continues after a reset.
Wide Area Network Module (WAN)
The WAN is the heart of the D5 UEQ. It provides many of the non-RF inter-
faces for the system, inter-module connectivity to the QAMs via a GigE
switch, and houses the DOCSIS Timing Interface (DTI).
Figure 4-12: Wide Area Network Card (WAN V4)
The WAN Module ingests video from multiple IP sources from the GigE
interfaces and primarily provides MPEG PID remapping and preparation for
processing in the QAM Module Video MUX processing.
DVB Conditional Access Key
Exchange Interface ETH2
(See * below)
Fast Ethernet Management
Interface ETH1
(See * below)
DTI Clock
Interface
Gigabit Ethernet
SFP Slots
*... In Release 3.0.1, ETH1 can be configured as a redundant gigabitEthernet port for any of the other
SFP GE ports. ETH2 must then be reconfigured with the ETH1 settings in order to provide the exact
functionality and maintain management access to the D5 UEQ.
4 System Components
The WAN module features include:
Four external, removable GigE small form factor pluggable (SFP)
modules (labeled GbE 1-4)
One external 100BaseT management interface (labeled ETH1). ETH1
can also be configured as a redundant gigabitEthernet port for any of
the other SFP GE ports.
One external 100BaseT DVB Conditional Access Key Exchange inter-
face support (labeled ETH2). If ETH1 is configured as a redundant GE
port, then ETH2 must be reconfigured with the ETH1 settings to main-
tain management access.
One DOCSIS DTI clock interface (labeled DTI CI). Note: using DTI
dongle/2 DTI per WAN,
Hardware support of MPEG-2 video transport over IP sessions
IP Unicast and Multicast (IGMPv1,v2,v3) support (defaults to IMGPv2)
GigabitEthernet I nterfaces
(GigE)
The WAN's internal switch fabric serves as the communication pipeline
between its four SFP GigE interfaces and the D5 UEQ's QAM modules. It
supports the ability to receive up to 1488 individual SPTSs simultaneously.
These are subsequently disseminated across up to 96 QAM channels (in
Annex B only) with a maximum of 63 programs per channel.
Each of the GigE interfaces can be configured for system management
though it is not a procedure recommended by ARRIS.
Fast Ethernet Management
I nterface (FE01)
The fastEthernet network management interface supports the ability to
remotely access the CLI via telnet or SSH. This interface is also used to
communicate via SNMP with external NMS and EMS systems. It can also
be used to download logging information to a remote Syslog server.
The fastEthernet port 0/1 can be used as a redundant GE port for any of
the four active SFP GE ports. The fastEthernet port, 0/1, is capable of
1Gbps operation,1000BT Copper mode only. The fastEthernet port 0/1
CANNOT be used as an active GE port (i.e., a video carrying port) because
it does not support the same configuration commands as GE ports, nor is
it mapped internally in the D5 UEQ to act as a video/depi port.
DVB Conditional Access Key
Exchange I nterface (FE02)
Supports the use of DVB SimulCrytp on ETH2. When the fastEthernet 0/1
port is used as a redundant GE port for the SFP GE ports, the fastEthernet
0/2 port must be reconfigured with the FE 0/1 settings (the NOC network
configuration) to maintain functionality. Failure to move the configuration
would result in loss of management access to the D5 UEQ.
Distributed Timing I nterface
(DTI )
Full hardware support.
Dual WAN
The support of dual WAN cards in the D5 UEQ chassis provides higher
WAN bandwidth capacity and accommodates the Quad-Port QAM Module
(QPM 8DX4). The QPM 8DX4 QAMs can be assigned to either WAN,
allowing the D5 UEQ to function as two logically-independent systems. The
addition of a second WAN module helps to accommodate the substantial
increase in required ingress. This additional WAN operates in slot 8 of the
D5 UEQ chassis.
Since the maximum bandwidth capacity of the each WAN module is 4
Gbps, the D5 UEQ should be configured with dual WANs when the total
bandwidth of the system, including Dual-Port QAM Module (DPM 4DX2) in
Quad Mode and Quad-Port QAM Modules (QPM 8DX4), is greater than 4
Gbps.
Quadrature Amplitude Modulation Module (QAM)
The Dual-Port QAM Module (DPM 4DX2) in Quad Mode and the Dual-Port
QAM Module (DPM 6DX2) in Hex Mode support the M-CMTS DRFI specifi-
cation for M-CMTS RF QAM modulation/upconversion, over the 54-867MHz
spectral range and 54-1GHz for the Quad-Port QAM Module (QPM 8DX4).
It ingests transport streams (TS) from the WAN, and modulates them onto
RF carriers that are then upconverted to their provisioned bandwidth allo-
cations and performs DVB scrambling when configured.
Figure 4-13: QAM Modules
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
O
O
S
P
O
W
E
R
O
O
S
P
O
W
E
R
O
O
S
P
O
W
E
R
A
R
R
I
S
A
R
R
I
S
A
R
R
I
S
D
5
Q
A
M
8
D
X
4
O
O
S
P
O
W
E
R
D
5
Q
A
M
8
D
X
4
O
O
S
P
O
W
E
R
D
5
Q
A
M
8
D
X
4
O
O
S
P
O
W
E
R
A
R
R
I
S
A
R
R
I
S
A
R
R
I
S
D
5
Q
A
M
8
D
X
4
D
5 Q
A
M
8D
X
4
D
5
Q
A
M
8
D
X
4
Power
RF Downstreams
4 System Components
The QAM module contains the upconversion and RF components of the
system. All the parameters associated with these components are
controlled on the WAN module then signaled to the QAM module. The
parameters that can be modified are:
format
annex
interleaver
frequency
symbol rate
power
spectral inversion
There can be up to six QAM modules in a D5 UEQ chassis. In a single Dual-
Port QAM Module (DPM 4DX2) in Quad Mode, there are eight QAM chan-
nels. When an RF port is configured in quad mode, there are four QAM
channels per RF connector, with two RF connectors per QAM (labeled RF1
and RF2) totaling 48 channels.
On a single Dual-Port QAM Module (DPM 6DX2) in Hex Mode, there are six
QAM channels per RF connector totaling twelve channels. When both RF
connectors are configured in hex (Annex B only), there are a total of 72
channels.
On the Quad-Port QAM Module (QPM 8DX4), the configuration of each
QAM channel on each RF output port is highly flexible. The number of QAM
output channels can be set independently for each RF port, ranging from
one QAM channel per port up to eight QAM channels per RF port totalling
32 QAM channels per module or 192 QAM channels per full-fill chassis.
The parameters format, annex, interleaver, frequency, symbol rate, power
and spectral inversion are associated to a port but configured on an RF
connector basis. The interface ranges are from one to two on a Dual-Port
QAM Module (DPM 4DX2) in Quad Mode and a Dual-Port QAM Module
(DPM 6DX2) in Hex Mode while the interface range on a Quad-Port QAM
Module (QPM 8DX4) ranges from one to four. The CLI command inter-
face qam 4/1.2 addresses the second QAM channel on the first RF
connector of the QAM module in slot four.
All QAM channels are set to quad mode and disabled by default before
being configured and enabled to ensure no interference in any existing
QAM channels.
The following tables describe the status of the LEDs on the Quad-Port QAM
Module (QPM 8DX4) under normal and failure conditions.
Table 4-1: QPM Status LEDs under Normal Conditions
Table 4-2: QPM Status LEDs under Failure Conditions
The status of QAM modules and their configuration parameters can be set
and read from the CLI HTTP interface to D5 UEQ Web Manager and SNMP
to the D5 UEQ Web Manager.
POWER
(Green LED)
OOS
(Red LED) Explanation
OFF ON Card is shut down (default state)
FLASHI NG FLASHING
LED is flashing alternatively. The card micro-controller is
being upgraded by software. The sequence should last no
more than 20 seconds (rev BB), two minutes (rev BA and
below)
ON ON
Card is booting up (downloading/ programming FPGA, etc.).
The sequence should last no more than 30 seconds.
ON OFF
Card is running normally, however RF signal may not be seen
if channels are muted which is the default value until
software tells otherwise.
FLASHI NG FLASHING
LEDs are flashing together. Card is being shutdown by
software. Sequence should last no more than two seconds
(time for rails to discharge).
POWER
(Green LED)
OOS
(Red LED) Explanation
OFF OFF
Card micro-controller has not been programmed, is
corrupted or has no power at all. Check micro internal LED
and programming and/ or 3.3V_UC rail.
FLASHI NG ON
Card micro-controller has detected a 'major' problem, board
cannot be powered up. Check PLLs, SPI bus, RF rails, etc.
FLASHI NG OFF
Card micro-controller has detected a 'minor' problem, board
can be powered up. Check PLL1 lock status, sensors, demod,
etc.
ON FLASHING
Card FPGAs could not be programmed successfully, DONE bit
is not asserted. Check NANDFLASH for corruption, FPGA bus,
etc.
OFF FLASHING
Card micro-controller has crashed. Check for brown-out
issues on 3.3V_UC rail, possible SD card corruption, bug in
firmware.
4 System Components
Each Dual-Port QAM Module (DPM 4DX2) in Quad Mode supports:
Two independent 75 ohm RF-connectors that carry four adjacent QAM
channels each
Total of eight QAM channels per module
Total of 48 channels per chassis in Annex A/B/C mode
RF port may run in single, dual or quad mode
RF muting
Figure 4-14: Dual-Port QAM Module (DPM 4DX2) in Quad Mode
Bonded Channels
Each Dual-Port QAM Module (DPM 6DX2) in Hex Mode supports:
Two independent 75 ohm RF-connectors that carry six adjacent QAM
channels each
Total of twelve QAM channels per module
Total of 72 channels per chassis in Annex B only
RF port may run in single, dual, quad or hex (Annex B only) mode
RF muting
Figure 4-15: Dual-Port QAM Module (DPM 6DX2) in Hex Mode
Bonded Channels
Each Quad-Port QAM Module (QPM 8DX4) supports:
Four independent 75 ohm RF-connectors that carry eight adjacent
QAM channels each
Total of 32 QAM channels per module
Total of 192 QAM channels per full-fill chassis
Supports Annex A/B/C
RF port may run in single, dual, quad, hex, or octal mode
Simultaneous support of multiple services
- within a QAM carrier
- within a bonded QAM channel group
Arbitrary QAM channel muting allows non-continguous channel
assignments.
Figure 4-16: Quad-Port QAM Module (QPM 8DX4) Bonded
Channels
NOTE
When replacing QPM QAMs with DPM QAMs, it is recommended that the
configuration for the unused QAM ports (ports 3 and 4) be removed to
avoid potential configuration issues (for instance, UDP port conflict).
To remove the configuration for ports 3 and 4, use the following
commands:
no interface qam 3/ 3
no interface qam 3/ 4
where x is the QAM slot number <1-6>.
Demodulator Features
Demodulator functionality is built into the QPM 8DX4 module and consists
of an RF switch that can tap any one of the four RF outputs on the QPM
8DX4 module and feed them into a 1GHz tuner. The tuner is associated
QPM1 DSPHY/UpconverterDOCISISDRFI(QPM)Module
RF1 RF2 RF3 RF4
1/1.1 1/1.4 1/1.3 1/1.2 1/1.51/1.61/1.71/1.8 1/3.1 1/4.1 1/2.11/2.21/2.31/2.41/2.51/2.61/2.71/2.8 1/3.2 1/3.8 1/3.7 1/3.6 1/3.5 1/3.4 1/3.3 1/4.8 1/4.7 1/4.6 1/4.5 1/4.4 1/4.3 1/4.2
4 System Components
with the demodulator IC that recovers the MPEG signal and collects various
RF-related statistics presented by the D5 UEQ, such as corrected/uncor-
rected FEC blocks, RF power levels and SNR information. The recovered
MPEG signal can also be directed through the QPM 8DX4 module FPGA and
transmitted as a UDP/IP stream to a remote video acquisition device. This
mode of MPEG streaming is known as post-rf snooping as opposed to the
existing post-mux snooping, however both follow the same type of
configuration and stream content in the same way to a remote UDP/IP
destination.
Each QPM demodulator operates over the full set of QAM channels, either
scanning all QAM channels periodically (staying on each QAM for a config-
urable amount of time) or programmed to stop on a single QAM channel
forever. The WAN module and each QPM 8DX4 module coordinate to
ensure the correct RF port is switched to the tuner and that the tuner
delivers the correct frequency to the demodulator every time a specific a
QAM channel is requested to be demodulated/monitored. The QPM 8DX4
module comprises of a local microcontroller, that directly controls the
demodulator, tuner and RF switch, and reads back information from the
demodulator IC, subsequently retrieved by the WAN module. The
retrieved information is recorded on a per QAM channel basis, and is avail-
able from the CLI, the WEB Manager and the Application Manager for
display purposes.
Dual Interleavers per RF Port
To operate a real QAM-sharing of services on a single F-connector, we
need to run both video applications and DOCSIS M-CMTS concurrently on
the same RF output. In order to run these services together, different
interleaver depths are required as the longer/deeper interleaver settings,
required for video to allow corrupted MPEG data to be corrected, nega-
tively impact the short interleave depths required for DOCSIS interactive
services to reduce the cable plant round-trip delays.
The D5 UEQ QPM module has been updated in Release 3.0.1 to allow the
operation of two independent interleavers per block of four QAM channels
on each RF port. This will enable QAM sharing to be deployed on the QPM,
with DOCSIS running over one block of four QAM channel blocks and video
running over the other block of four QAM channels.
The interleaver settings are applicable to a block of four QAM channels;
meaning channels numbered 1-4 can be configured with one interleaver
depth, while channels 5-8 can be configured with a different interleaver
depth.
In 8-channel mode (octal), the dual interleaver support allows the first four
ports to be configured with one interleaver setting and the second four
ports to be configured with a different setting.
In 6-channel mode (hex), the dual interleaver support allows the first four
ports to be configured with one interleaver setting and the last two ports
(ports 5 and 6) to be configured with a different setting.
In 4-channel mode (quad), only a single interleaver setting can be applied.
The following diagram details operation of dual interleaver for the different
channel modes available with the QPM modules (single and dual are not
shown).
Figure 4-17: 8 QAM Channel per RF Port
The CLI commands are defined to ensure that the selection of the inter-
leaver setting for each block of four channels will be unambiguous during
normal operation or through a reboot scenario. As the interleaver setting
is applied per block of four channels, the first channel of each block is used
to record the most recent interleaver value. When a user decides to
change the interleaver depth of any QAM channel within a block of four
QAM channels, the D5 UEQ records the change against the first channel of
that block.
For example, if a user modifies the interleaver setting to 128,1 on QAM
1/1.3, the interleaver would be reconfigured and the setting saved on QAM
1/1.1. The CLI will show the interleaver setting on QAM 1/1.3 with a
x/1.1 X/1.2 X/1.3 X/1.4 X/1.5 X/1.6 X/1.7
x/1.1 X/1.2 X/1.3 X/1.4
x/1.1 X/1.2 X/1.3 X/1.4
x/1.1 X/1.2 X/1.3 X/1.4
x/1.1 X/1.2 X/1.3 X/1.4
X/1.5 X/1.6 X/1.7
X/1.5 X/1.6 X/1.7
X/1.5 X/1.6 X/1.7
X/1.5 X/1.6 X/1.7
Interleaver Block #2 Interleaver Block #1
Channel Mode HEX
Channel Mode OCTAL
Channel Mode QUAD
128,1
128,1
128,1 32,4
32,4
NONE
4 System Components
comment (!) mark and the real interleaver setting on QAM 1/1.1 (without
the comment mark). In the case of configuring QAM 2/4.7 with a modified
interleaver setting, the D5 UEQ will mark QAM 2/4.7 with a comment mark
for the interleaver setting and set QAM 2/4.5 (first QAM in the block of
four) with the actual interleaver setting.
Chassis Monitoring Module (MON)
The Chassis Monitoring Module (MON) provides centralized monitoring and
control functions for the D5 UEQ chassis. It controls the front panel
display, the compact flash bulk storage file system and provides power and
telemetry connections for the front panel console ports.
Figure 4-18: Chassis Monitor Module (MON)
The MON is responsible for controlling the boot up of all the D5 UEQ cards.
It also monitors power, temperature and other important functions in the
D5 UEQ modules.
The MON controls the only physical serial interface (CLI port, see D5 UEQ
Front Chassis on page 4-3) on the D5 UEQ. The serial interface can be
used to access the D5 UEQ CLI.
The MON module drives the four line, 20 character display on the D5 UEQ
front panel (D5 UEQ Front Chassis on page 4-3). The LCD panel has an
associated keypad interface that allows users to navigate a simple read-
only menu system. The LCD displays information regarding faults or
alarms that have occurred on a per module basis in the system.
Mon Module
The MONs features include:
Managing card booting and initialization processes for all D5 UEQ
modules.
Detecting D5 UEQ module insertion and removal
Monitoring and reporting card thermal and power rail conditions
Monitoring and managing the PSU
Housing the MON module auto shutdown recovery button (Figure
4-19).
NOTE
Failure of the MON Module after system boot will not adversely affect
system video processing.
Auto Shutdown Recovery
Button
The Auto Shutdown Recovery button is used to power up the D5 UEQ after
the system has shutdown due to a fault (e.g. the D5 UEQ will shut itself
down automatically if the fan tray is removed from the chassis causing the
temperatures to rise above set thresholds). The D5 UEQ will not power
itself up afterwards even though the power cables are still connected. The
user has to press the Auto Shutdown Recovery button in order to bring the
D5 UEQ back up.
NOTE
The D5 UEQ system will only shut down the power supply as a last resort.
The thermal protection scheme is such that individual modules are shut
down if they reach a fatal temperature. The MON card is kept alive as
long as possible and would be the last module to shut down. If the
temperature continues to rise and the MON reaches its fatal temperature
threshold, then the PSU(s) is shut down using the inhibit relay and the
Auto Shutdown Recovery button is then required to recover. There is a
very low probability that the normally-closed electro-mechanical relay
which controls the Auto-Shutdown function may have been subject to
excessive mechanical shock duirng shipment. This may result in lack of
D5 UEQ power-up following out-of-boc set up. ARRIS recomments that a
4 System Components
user press the Auto Shutdown Recovery button to release the Auto-
Shutdown function in this event.
Figure 4-19: MON Auto Shutdown Recovery Button
Auto Shutdown
Recovery Button
5. Dual WAN
Topics Page
Overview 1
Configuration Management 2
Slot Assignments 2
QAM Management 4
WAN Synchronization in Dual WAN Configuration 5
Dual WAN Configuration 6
DTI Timing Support 8
SNMP Support 7
Feature Compatibility 8
Overview
The Dual WAN feature supports dual WAN cards in the D5 UEQ chassis to
provide higher WAN bandwidth capacity and to accommodate the Quad-
Port QAM Module (QPM 8DX4). QAMs can be assigned to either WAN,
allowing the D5 UEQ to function as two logically-independent systems.
5 Dual WAN
Figure 5-1 depicts a D5 UEQ chassis with QAMs 1, 2 and 4 assigned to
WAN 7. QAMs 3, 5 and 6 are assigned to WAN 8.
Table 5-1: Dual WAN Chassis
Table 5-2 illustrates the same D5 UEQ chassis separated into two logically-
independent systems.
Table 5-2: Dual WAN Logical Systems
The maximum bandwidth capacity of the each WAN module is 4 Gbps. The
bandwidth required by the QAMs is dependent on the annex, modulation
depth (64 or 256) and number of enabled channels.
The D5 UEQ should be configured with dual WANs when the total band-
width of the system, including Dual-Port QAM Module (DPM 4DX2) in Quad
Mode and Quad-Port QAM Modules (QPM 8DX4), is greater than 4 Gbps.
QAM cards should be divided between the WANs to ensure that both WANs
operate within the limits of their bandwidth capacity.
Configuration Management
The 3.0 release will utilize separate configuration data for WAN 7 and WAN
8. WAN 7 will continue to use the startup-configuration file contained in
the /update directory on the compact flash. WAN 8 will use a startup-
configuration file contained in the /update/wan2 directory.
Slot Assignments Ideally, slot assignment data would be stored in the startup-configuration
file. However, since two startup-configuration files could result in
conflicting data, a new file (/update/slotAssignments) has been
created to store slot assignments.
QAM 1 assigned to WAN 7 QAM 2 assigned to WAN 7
WAN 7 WAN 8
D5 UEQ System A D5 UEQ System B
QAM 1 QAM 2
QAM 4 QAM 3
QAM 5 QAM 6
WAN 7 WAN 8
The startup-configuration files for WAN 7 and WAN 8, as well as
the slotAssignments file, are concantenated in the showtech output
to reflect the configuration of the entire system.
When the Dual WAN feature is disabled, all slots are reassigned to WAN 7.
The Dual WAN feature is disabled by default and must be enabled before
slot assignments can be configured.
A QAM card must be shutdown before the slot can be re-assigned when
the QAM is equipped and the current slot owner (WAN) is in-service. When
WAN 8 is in-service, all equipped cards assigned to WAN 8 must be shut-
down before the Dual WAN feature can be disabled.
In the event that a WAN fails or is unequipped, the slots assigned to that
WAN can be re-assigned to the other WAN without putting the QAM cards
in the admin down state.
An unequipped slot does not need to be shutdown before assigning the
slot. Similarly, when WAN 8 has failed or is unequipped, the Dual WAN
feature can be disabled without putting the QAM cards assigned to WAN 8
in the admin down state.
Note that slot assignments are not autonomously redistributed due to the
failure or removal of a WAN card.
Hardware Mismatch Alarm A Hardware Mismatch alarm will be generated when a WAN card is present
in slot 8 and the Dual WAN feature is disabled. A WAN in slot 8 will be held
in reset until the feature is enabled.
A request to disable the Dual WAN feature will be rejected when the WAN
in slot 7 is not in-service (e.g., unequipped or failed).
5 Dual WAN
QAM Management
A QAM interface can be provisioned from either WAN, regardless of which
WAN the slot is assigned. However, changes are not synchronized across
the WANs.
A QAM interface configuration change made from a user-interface
provided by the slot owner takes effect immediately. A configuration
change made via an interface to the other WAN is saved as a pre-provi-
sioned configuration. The QAM is reconfigured accordingly if the slot is re-
assigned to that WAN.
When pre-configuring a QAM interface for a slot that is assigned to the
other WAN, a message is displayed indicating that the provisioning will be
applied when the slot is re-assigned to this WAN, as shown in Figure 5-1.
Figure 5-1: QAM Provisioning Warning
When displaying the attributes of a QAM interface for a slot that is
assigned to the other WAN, the output will indicate that the slot is assigned
to the other WAN, as shown in Figure 5-2.
Figure 5-2: Show I nterface Warning
WAN Synchronization in Dual WAN Configuration
The Dual WAN feature can be configured from either WAN. Dual WAN
configuration changes initiated at a particular WAN interface are
forwarded to the MON card. The MON card broadcasts the configuration
changes to both WANs to keep them synchronized.
Because of the dependence on the MON for synchronizing the WANs and
managing the slotAssignments file, Dual WAN configuration changes
cannot be made when the MON card is unequipped or communication
between the MON and WAN has failed.
The Dual WAN mode and slot assignments can be configured from a WAN
regardless of the state of the other WAN. A slot can be assigned to an
unequipped or failed WAN card. The WAN card will be updated with the
current Dual WAN configuration when put back into service.
CLI support A single CLI session will provide the interface for configuring the entire
system including QAMs assigned to either WAN.
5 Dual WAN
The 3.0 implementation will manage the D5 UEQ chassis as two logically-
independent systems. Therefore, commands executed on a CLI session
hosted by a particular WAN only apply to that WAN and its assigned slots.
There currently is no ability to toggle between WAN 7 and WAN 8 CLI
sessions.
Previously, the MON provided access to a CLI session hosted by WAN 7
(single-WAN system) and would display the WAN restart information on
the MON screen when the WAN rebooted. In a Dual WAN implementation,
the user will be able to select either WAN 7 or WAN 8 to host the CLI
session but the MON will no longer display the WAN restart information.
Dual WAN Configuration
The CLI provides an interface for configuring the Dual WAN feature and
displaying the current status. The feature can be enabled and disabled by
issuing the dualwan command and slot assignments are made using the
assign slot <1-6> wan <7-8> command.
Dual WAN CLI Commands The status of the feature and current slot assignments can be displayed
using the show linecard status verbose command. The show
linecard status verbose table does not list entries for unequipped
slots.
The output below displays the assignment of slot 6 to WAN 8 and the
status of the feature and all slot assignments.
D5#conf i gur e t er mi nal
D5( conf i g) #assi gn sl ot 6 wan 8
Sl ot 6 assi gned t o wan 8
d5#show l i necar d st at us ver bose
Dual WAN mode i s enabl ed
Car d Sl ot Admi n Oper Dupl ex Ser i al Pr oduct Pr od Pr ov
Type Owner St at e St at e St at e Number Code Rev Type
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
MON I S T119B0J 50007 MON_8 AE MON
QAM 1 WAN 8 UP I S Si mpl ex C119A081E015 QAM_8DX4 BA QAM
QAM 2 WAN 7 UP I S Si mpl ex C188A0G90108 QAM_6DX2 EB QAM
WAN 7 I S C308B0A1H029 WAN_4G2F CB WAN
WAN 8 I S C308B0A1H109 WAN_4G2F CB WAN
PMOD 1 I S T119B0D60022 PWR_CNV8 AB PMOD
PSU 2 I S PSU
Reloads Under the current, single-WAN implementation, the MON and WAN are
both restarted when a reload command is issued. Likewise, the Dual
WAN implementation of the CLI reload command will launch a full
system restart of the MON and both WAN cards.
The settings entered for saving the running configuration and performing
the power-on self-test (POST) when executing the reload command will
be applied to both WAN cards.
Single WAN Reboot In Release 3.0, the reboot command was introduced to reboot a single
WAN without performing a full system restart.
SNMP Support The SNMP interface supports querying the status of the feature and
current slot assignments. The interface also allows for enabling and
disabling the feature and configuring the slot assignments. The Dual WAN
feature must be enabled in order to set a slot assignment value, or the set
will fail.
The SNMP interface can query the provisioning information for all slots in
the chassis. Pre-provisioned slot information is returned for slots assigned
to the other WAN.
The d5SlotExtMIB.txt file contains the MIB definitions for the Dual WAN
feature. This MIB is an extension of the ARRIS D5 UEQ MIB. All Dual WAN
MIB values are read/write.
Face Plate Display The D5 UEQ faceplate will alternate the display of the WAN host names
and IP addresses on the main screen when the Dual WAN feature is
enabled.
The faceplate will also display the WAN assignment of the QAM slots when
the feature is enabled.
Web Manager Support for the Dual WAN
The Web Manager user interface will provide a configuration page to
support the assignment of slots and allow for the configuration of the Dual
WAN feature. The linecard status page will be updated to display the
assignments. For more details, please refer to the latest version of the
Web Manager Help file.
Application Manager Support
The Dual WAN chassis will be displayed as two separate control planes
from the D5AM perspective. Changes to the AM/BCT are expected to be
minimal, with most of the changes in the Software Management View.
5 Dual WAN
DTI Timing Support In a Dual WAN configuration, each WAN is supplied with a DOCSIS Timing
Interface (DTI) input to synchronize with the other WAN clock signal via a
QAM card. When Dual WAN is enabled, the WAN is able to adjust the
frequency of the input to the DTI client to keep it synchronized with the
other WAN.
The timing signal for the WAN and QAM cards comes from the DTI client
firmware in the IPPROC FPGA. Dual WAN timing synchronization requires
at least one QAM card be equipped, provisioned and operational so that
the WAN card (requiring clock synchronization) can access the clock differ-
ence in the QAM card. One of the WAN cards must be set as the timing
master when Dual WAN is enabled.
Feature Compatibility
The Dual WAN configuration is compatible with all D5 UEQ features. A slot
configured for QAM sparing can only protect QAMs assigned to the same
WAN.
Software Upgrades The default configuration of this feature provides for seamless upgrades.
The Dual WAN feature does not affect in-service systems upgraded to 3.0,
regardless of the WAN and QAM configuration.
Software Downgrades A Dual WAN system running a 3.0 configuration can be downgraded to a
pre-3.0 configuration using the normal procedure, with one exception. The
slotAssignments file should be deleted after performing the down-
grade. Otherwise, the Dual WAN configuration will be automatically
applied following a future upgrade to 3.0.
NOTE
The /update/wan2/startup-configuration is not used in pre-3.0
releases. Removing this file is optional.
Software loads prior to 3.0 do not support Dual WAN. Therefore, WAN 8
will be held in reset and all slots will be assigned to WAN 7 when a down-
grade is performed.
System Commissioning
Initial configuration of a D5 UEQ system can be performed using the CLI
set-up script. This script prompts the user for system information, such as
IP addresses, and interface configuration, such as annex and frequency.
An equivalent set-up page is provided by the Web Manager application as
well.
Commissioning of a Dual WAN system is performed by configuring WAN 7
and its associated slots. The Dual WAN feature is then enabled and slot
assignments are made. Finally, initial set-up should be performed on WAN
8 to configure the WAN and its associated slots.
Backup and Restore Both configuration files, /update/startup-configuration for WAN
7 and /update/wan2/startup-configuration for WAN8, must be
saved and restored to capture the full system configuration. Additionally,
the /update/slotAssignments file must also be saved and restored
when the Dual WAN feature is enable.
5 Dual WAN
6. Installing the D5 UEQ
Topics Page
Safety Measures 2
FCC Statement 2
Unpacking and I nspecting the D5 UEQ 2
Main Hardware Components 4
Racking Recommendations 4
Grounding 11
Inserting QAM and WAN Modules 12
Fiber Optic Small Form Factor Pluggable (SFP) Card 13
Power Considerations 18
Connecting Cables 19
These basic head-end installation procedures will allow the technician to
rack-mount, install and power up the D5 UEQ for normal operations.
6 I nstalling the D5 UEQ
Safety Measures
All D5 UEQ power and grounding wiring should be in accordance with
applicable local electric codes (for more details, refer to section Grounding
on page 6-11).
WARNI NG
Refer servicing to qualified service personnel. No user serviceable parts
inside. This equipment is intended for installation into restricted access
locations only.
Lightning and surge protection measures are assumed to have been
followed in the RF plant to which the D5 UEQ RF is connected.
Do not insert foreign objects into the vents or card slots.
FCC Statement
This device complies with part 15 of the FCC Rules. Any changes or modi-
fications not expressly approved by the guarantee of this device could void
the users authority to operate the equipment.
RoHS Compliancy
This product complies with directive 2002/95/EC of the European Parlia-
ment and of the Council of 27 J anuary 2003 on the restriction of the use
of certain hazardous substances (RoHS) in electrical and electronic equip-
ment.
Unpacking and I nspecting the D5 UEQ
The carton in which the D5 UEQ is shipped is specifically designed to
protect the equipment from damage. Unpack the equipment carefully to
ensure that no damage is done and that none of the contents are missing.
Save all shipping materials in case the product needs to be returned to the
manufacturer for repair or upgrade.
D5 UEQ Chassis Package The D5 UEQ chassis package will minimally contain the following items:
One D5 UEQ chassis
One RJ45-to-DB9 serial cable (for management access)
One ESD strap
D5 UEQ Quick Start Guide
Warranty & Software License Agreement
Along with the following installed equipment:
- One Chassis Monitoring module (MON)
- One fan tray
- One AC or DC Power Supply Unit (PSU) module
- One PSU blanking cover plate
- One Power Converter module (PMOD) or Fan Converter module
(FMOD)
- One PMOD blanking plate
- One D5 UEQ chassis front face plate
- One compact flash card
- Two front chassis mounting brackets with screws
- Eight rear blanking plates
- Two fuses
- DC power cable (721114 DC chassis only)
Optional I tems Optional or additional orderable items per the purchase order:
AC power cord (unless DC PSU is supplied)
Chassis rear mounting brackets with screws
One or two WAN module(s), or
One or two Dual DTI WAN module(s) with DTI Adapter(s)
One to six QAM module(s)
Power Converter Module (PMOD) or Fan Converter module (FMOD)
AC or DC Power Supply Unit(s) (PSU) (not installed)
SFP Module(s) - Optical or electrical GigE
D5 UEQ DC Power Adapter
D5 UEQ software CD
NOTE
ARRIS does not supply screws or associated cage nuts for mounting unit
to the rack.
Visual Inspection
Before powering it up the first time, perform a visual inspection of the
equipment as follows:
Look for the following potential problems:
- Physical damage to the chassis or components
- Loose or missing connectors or hardware
- Loose wires and power connections
If any of the above are found, do not attempt to power on the D5 UEQ.
Contact your ARRIS representative for instructions.
NOTE
If modules are pre-installed in the D5 UEQ, check their seating to verify
none are loose. Re-seat modules if necessary (refer to chapter 19,
Service Procedures).
Main Hardware Components
A fully populated chassis includes:
Two Wide Area Network modules (WANs)
Six QAM modules
Two power supply units (PSUs)
Two power modules (PMOD) or one fan converter module (FMOD) and
one power module (PMOD)
One compact flash card
One MON module
One fan tray
Racking Recommendations
The D5 UEQ can be installed in both open rack and enclosed cabinet
configurations and is designed for use in 19 inch racks or cabinets that are
more than 31.5 inches (800mm) deep and comply with the Electronics
Industries Association (EIA) 310D standards. The front panel of the D5
UEQ protrudes two inches from the front mounting bracket into the aisle.
The depth of the D5 UEQ from the mounting brackets to the tip of the F-
types is then 23.25 inches.
If your headend is equipped with telco racks which typically mid-mount
equipment as opposed to general racks that are used to mount equipment
at the front of the racks, the mounting ears supplied with the D5 UEQ
can be installed at the mid-mount location to allow the unit to be installed
in a telco rack. See Mounting the D5 UEQ in a 19-inch Rack on page 6-10
for details.
NOTE
ARRIS recommends the use of the rear-mount bracket kit (ARCT01138)
to provide rear-support for the D5 UEQ within a rack. This is supplied as a
standard accessory with each D5 UEQ.
Installation of the equipment in a rack should not restrict airflow. Air
cooling and exhaust is accomplished from the sides of the D5 UEQ (see
Figure 4-6, D5 UEQ Airflow direction, on page 4-6). A seven inch gap
between the left hand side (exhaust) of the D5 UEQ in Rack 1 and
ingest side of the D5 UEQ in Rack 2. This is the expected distance
between the equipment racked in most open frame 19 inch racks.
ARRIS recommends not having more than two adjacent (adjacent
being defined as racks with a seven inch gap as described above)
racks of D5 UEQs or similar side-cooled equipment.
Mount the D5 UEQ to prevent uneven mechanical loading on the
chassis. Improper mounting can cause premature structural failure
and potentially hazardous conditions.
Avoid having the outlet of any unit in an adjoining rack blowing into
fan inlets of the D5 UEQ.
When installed in a closed or multi-unit rack assembly, the operating
temperature inside the rack environment may be higher than ambient
temperature. Install the D5 UEQ in an environment where the ambient
temperatures are between 32 and 122 Fahrenheit (0 to 50
Celsius).
Although the D5 UEQ can be racked in an open rack with up to 13 D5
UEQs on a raised floor (more than 13 exceeds the 140lb/sq. ft. limit)
and up to 18 D5 UEQs on cement floors without issue (even with
thermal conditions of aisle temperature being 122 (50 Celsius),
ARRIS is limiting this to a recommendation of 10 stacked D5 UEQs in
both conditions to help with cable management, rack power schemes
and allowing for potentially other equipment in the rack such as
combiners or switches.
Recommended Rack-type for the D5 UEQ
ARRIS recommends the use of a dedicated open 19 inch rack (with no side
panels or front doors) with rear support columns for use with the D5 UEQ.
This configuration provides the best thermal environment and access for
installation, cabling and maintenance.
Figure 6-1: Open Rack Configuration and Components
Open Racks with side panels The recommended racking configura-
tion is defined as follows
- < 6 Rack spacing Maximum of ten D5 UEQs in the 19 inch rack
- > 6 Rack spacing Maximum 18 but recommended to remain
at ten D5 UEQs
It is also assumed that there is no top panel on these open racks to prevent
air re-circulation.
Dedicated Open Rack
Recommendations
A four poster vertical-mounting-flange whose distance from front
flange fascia to rear mount fascia is 600mm or more.
The use of the ARRIS rear-mount kit (part number ARCT01138) to
provide rear support of the chassis and cable weight. This bracket
accessory is designed to allow flexibility in the distance of the rear-
vertical-rack-flange from the front-vertical-rack-flange. The distance
of the D5 UEQ front mounting bracket to the rear of the D5 UEQ is
579mm. ARRIS recommends that the rear-vertical rack-flange is posi-
tioned approximately 570mm -0mm to +165mm back from the front-
vertical-rack-flanges.
Do not use front-vertical-rack-flanges which obscure the fans immedi-
ately behind the D5 UEQs front fascia.
A gap of 3.5 inches from the side panel of the D5 UEQ to the next adja-
cent equipment or rack-panel is sufficient to achieve air flow of
200cfm, although a 7 inch gap is preferred.
The D5 UEQ may be equally stacked with either a vertical spacing
between each or with no spacing. There is little thermal impact to
stacking D5 UEQs directly on top of each other with no vertical
spacing.
Considerations for Shared-racks and Cabinets
Other configurations such as a shared open rack, or a shared enclosed rack
(cabinet) may also be used, but involve wider considerations or restric-
tions, particularly with respect to avoidance of circulating airflow.
Shared Open Rack Front-to-back coolingOther equipment within a shared open rack
that utilized front-to-back cooling should have no thermal impact on the
D5 UEQ units provided the exhaust hot air is properly directed out of the
rack in accordance with standard equipment room recommendations.
Side-to-side coolingFor other equipment within a shared open rack
that utilizes side-to-side cooling, consideration of the relative direction of
air flow should be made. ARRIS does not recommend co-location within a
rack of D5 UEQs with other equipment where the side-to-side cooling is in
the opposite direction. This leads to the re-circulation of exhaust air which
in turn can lead to an unpredictable thermal environment.
ARRIS recommends no more than two open-racks of D5 UEQs are located
immediately adjacent to each other in the same cable headend since air
exhaust of one D5 UEQ rack will preheat the air by approximately 6-7C
which will then be ingested into the adjacent D5 UEQ rack. While compo-
nent failure will not occur with three racks side-by-side in this way in a
cable-headend ambient of 50C, a cumulative 6-7C increase per adjacent
rack in the operating temperature of third and subsequent racks would
result in a reduction of MTBF of D5 UEQs in these third and subsequent
racks. If additional open-racks of D5 UEQs are to be deployed in the same
cable-headend, care should be taken to locate those racks where a barrier
of cooled air comes between these and other D5 UEQs racks.
SpacingARRIS recommends a 1RU vertical spacing from other equip-
ment immediately above or below a D5 UEQ to ensure no conduction of
heat to or from the D5 UEQ to other such equipment.
Adjacent Racks Open racks When open racks equipped with D5 UEQ are installed next
to other open racks, the following points need to be considered:
No particular restrictions need apply where the adjacent rack(s) are
installed with equipment that utilizes front-to-back cooling.
Where adjacent racks(s) are installed with equipment that utilizes
side-to-side cooling, and this includes racks solely populated with D5
UEQs, then the exhaust air of one rack can act as the air input for the
next rack. In this case, ARRIS advises no more than two such adjacent
open racks of D5 UEQs where one rack can exhaust directly to the next
rack. Other groups of two such adjacent racks can be deployed in the
cable-headend when a cold-air barrier comes between groups. No
more than two racks of D5 UEQs should be placed adjacent to each
other.
Enclosed racks ARRIS does NOT recommend the use of a dedicated
enclosed rack or cabinet for use with the D5 UEQ.
WARNI NG
Deviation from these recommendations may result in a reduction of the
D5 UEQ operating performance.
The Figure 6-2, page 6-9 summarizes the limitations on the number of D5
UEQs which may be installed in various types of racks and cabinets, in
particular where side panels are required or other equipment is already
installed in the same rack or cabinet.
Figure 6-2: Decision Tree Summary for Rack Types
Rack Configuration Decision Tree D5 UEQ Recommendations
Max 18 D5 UEQ units
No vertical spacing between
D5 UEQ units.
If airflow direction is the same as D5 UEQ.
Max of 18 D5 UEQs (10 recommended).
Otherwise, NOT RECOMMENDED.
Max 18 D5 UEQ units
D5 UEQ units
(10 recommended)
Max 10 D5 UEQ units
D5 UEQ units
Max 18 D5 UEQ units
D5 UEQ units
(10 recommended)
Max 18 D5 UEQ units
No vertical spacing between D5 UEQ
units. If other equipment has side-side
cooling, ensure in same direction
as D5 UEQ.
(10 recommended)
If airflow direction is the same as D5 UEQs,
MAX of 18 D5 UEQs
as space allows. Otherwise,
(10 recommended)
NOT RECOMMENDED.
Max 18 D5 UEQ units .
No vertical spacing between D5 UEQ units.
Min. 1RU gp with non-D5 UEQ
equipment.
(10 recommended)
Max 10 D5 UEQ units
1RU gap with non-D5 UEQ equipment.
If other equipment has side-side
cooling, ensure in same
direction as D5 UEQ.
Max 18 D5 UEQ units
1RU gap with non-D5 UEQ equipment.
If other equipment has side-side
cooling, ensure in same
direction as D5 UEQ.
(10 recommended)
S
t
a
n
d

A
l
o
n
e

R
a
c
k
R
a
c
k

S
h
a
r
e
d

w
i
t
h

O
t
h
e
r

E
q
u
i
p
m
e
n
t
R
a
c
k

d
e
d
i
c
a
t
e
d

t
o

D
5

U
E
Q
s

o
n
l
y
S
t
a
n
d

A
l
o
n
e

R
a
c
k
A
d
j
a
c
e
n
t

R
a
c
k
(
s
)
R
a
c
k
(
s
)

A
d
j
a
c
e
n
t

O
p
e
n

R
a
c
k

a
v
a
i
l
a
b
l
e
?

(
R
E
C
O
M
M
E
N
D
E
D
)
Rack Spacing
< 6 inches
Adjacent rack with
side-to-side
airflow
A
d
j
a
c
e
n
t

r
a
c
k

w
i
t
h

s
i
d
e
-
w
a
l
l
s
A
d
j
a
c
e
n
t

r
a
c
k

w
i
t
h

N
O

s
i
d
e
-
w
a
l
l
s
Adjacent rack has
front->back-side
airflow
Adjacent rack has
other equipment
with side-to-side
airflow
Rack Spacing
> 6 inches
Rack Spacing
> 6 inches
Rack Spacing
< 6 inches
Adjacent rack has
other equipment
with front->back
airflow
A
d
j
a
c
e
n
t

r
a
c
k

h
a
s

s
i
d
e
-
w
a
l
l
s
A
d
j
a
c
e
n
t

r
a
c
k

o
p
e
n
-
s
i
d
e
d
Rack is dedicated to D5 UEQs?
Shared Rack
E
n
c
l
o
s
e
d

R
a
c
k
NOT RECOMMENDED
NOT RECOMMENDED
Procedure 6-1 Mounting the D5 UEQ in a 19-inch Rack
1 Mount the D5 UEQ in the rack and secure it using two screws on each side.
See Figure 6-3 for placement of mounting ears.
Figure 6-3: Location of Mounting Ears
The following installation considerations should also be noted:
a Place the D5 UEQ's as low as possible in the rack to provide access to
the lowest temperature air in the rack. This is the most efficient
cooling. This is a particularly important consideration where four or
more D5 UEQ's are installed in the same rack.
b The D5 UEQ system can be mounted using the front mounting ears
alone. However, for fully filled systems, additional rear support is
advisable. ARRIS provides an optional rear-mount racking accessory
(ARRIS part number ARCT01138). Users may also elect to mount the
D5 UEQ in a rack or framed mounted tray that will support the weight
of the unit. These trays are available from a number of rack hardware
vendor.
End of procedure
If your D5 UEQ shipment includes modules not installed at the factory,
refer to Inserting QAM and WAN Modules, page 6-12; otherwise, proceed
to Connecting Cables, page 6-19.
I nstall rack mounting
ears here for flush
mount
Install rack mounting
ears here for mid-mount
Grounding
Reliable grounding of rack mounted equipment must be maintained. See
Safety for common safety considerations. Also consider using direct
connections instead of power strips to branch circuits.
The shield of the coaxial cable must be connect to earth (grounded) at the
entrance to the building in accordance with applicable national electrical
installation codes.
In the U.S., this is required by NFPA 70 (National Electrical Code) Article
820 and by the Canadian Electric Code, CSA C22.1 No. 1. In the European
Union and in certain other countries, CATV installation equipotential
bonding requirements are specified in IEC 60728-11, Cable networks for
television signals, sound signals and interactive services, Part 11: Safety.
For safe operation, this equipment is intended to be installed in accordance
with the requirement of IEC 60728-11 for safe operation.
Grounding Stud Use the supplied M4 stud on the rear of the unit (see Figure 6-4, Location
of M4 Grounding Studs, on page 6-11). This stud can accept an M4 ring
crimp or a size #8 in diameter. The minimum permissible is a 12 AWG
ground cable and the maximum size allowed with this stud is a 6 AWG.
WARNI NG
Before applying any power to the chassis, the chassis must be grounded
using the Grounding Stud.
The following figure shows the two different versions of the D5 UEQ Rear
Power Panel types and where the M4 Grounding Stud is located.
Figure 6-4: Location of M4 Grounding Studs
M4 Grounding
Stud
M4 Grounding
Stud
The M4 stud is used for permanent chassis grounding (protective
earthing). The D5 UEQ must be permanently connected to protective earth
in order to comply with safety regulations in all regions.
Use an M4 nut and M4 lock-washer with the parts stacked as shown in the
following figure.
The M4 stud grounding wire should be secured under the lock washer.
Figure 6-5: Securing the Grounding Wire
I nserting QAM and WAN Modules
Slot Requirements
WAN modules must be installed in slot seven. If you plan to run a dual
WAN system, then the second WAN would be placed in slot eight. QAM
cards may be installed in any of the six slots (numbered one through six).
Slots are numbered one through eight in descending order from left to
right.
Figure 6-6: Slot Numbering Order
Terminal Ring on
#10 AWG
Ground Wire
ARRIS D5 UEQ
Rear Chassis
Grounding Stud
Lockwasher
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
O
O
S
P
O
W
E
R
O
O
S
P
O
W
E
R
O
O
S
P
O
W
E
R
A
R
R
I
S
A
R
R
I
S
A
R
R
I
S
D
5
Q
A
M
8
D
X
4
O
O
S
P
O
W
E
R
D
5
Q
A
M
8
D
X
4
O
O
S
P
O
W
E
R
D
5
Q
A
M
8
D
X
4
O
O
S
P
O
W
E
R
A
R
R
I
S
A
R
R
I
S
A
R
R
I
S
D
5
Q
A
M
8
D
X
4
D
5 Q
A
M
8D
X
4
D
5
Q
A
M
8
D
X
4
Procedure 6-2 Installing modules in the D5 UEQ chassis
1 Ground yourself properly with an electrostatic discharge (ESD) strap
(included).
2 Using a Phillip head screwdriver #1, remove the blanking plate. Align the
QAM or WAN card along desired chassis insertion tracks.
3 Slide card firmly into chassis. Pull latches inward to grasp first latch tooth.
4 Push card thumb latches outward until the front card seating teeth catch
the outer edge of the unit cage assembly.
5 Push card thumb latches inward until card seats. The back card seating
teeth will catch the inner edge of the unit cage assembly and pull it into a
seated and locked position.
6 Tighten the card thumb latch screw to secure card in place.
End of procedure
Fiber Optic Small Form Factor Pluggable (SFP) Card
The Small Form-factor Pluggable (SFP) Gigabit Interface Converter is a
hot-swappable input/output device that can be plugged into one of the
Gigabit Ethernet ports on the rear of the chassis.
Install the SFPs after the WAN module is installed. Installation procedures
for all SFPs are the same.
Figure 6-7: Example of Fiber Optic and Copper SFPs
Table 6-1: SFP LED Status
LED Explanation
Off Interface is DOWN
ON Interface is UP
FLASHING Interface is UP and data is being received or transmitted
Receive optical bore
Optical bore dust plug
Transmit optical bore
Optical SFP Copper SFP
Only SFP modules from the following table have been officially approved
for use in the D5 UEQ. Use of any other modules are not guaranteed to
operate and may result in system malfunction.
Procedure 6-3 Installing Fiber Optic SFPs I nto GigE Ports
1 Ground yourself properly with an electrostatic discharge (ESD) strap.
CAUTI ON
Do not remove the plugs from the fiber-optic SFP module port or the
rubber caps from the fiber-optic cable until you are ready to connect the
cable.
WARNI NG
Do not look directly into fiber optic cables or ports. The laser radiation
used in these facilities is not visible and may cause permanent damage,
especially to the eye.
ARRI S P/ N Supplier P/ N Description
716635
Finisar
FTLF1319P1BTL
SFP NIC 1000Base-LX 1310nm
Single/Multimode, LC
716636
Finisar
FTLF8519P2BN
SFP NIC 1000Base-SX 850 nm
Multimode, LC
716637
Avago
AFCT-57V6USZ
SFP NIC 1000Base-ZX, 1550nm
Singlemode, LC (80km)
716639
Finisar
FCLF-8521-3
SFP NIC 1000Base-TX, RJ 45
2 Grip the sides of the SFP with your thumb and forefinger and insert the
fiber optic SFP into selected GbE port and push firmly into the port until it
seats.
Figure 6-8: I nstalling the SPF
NOTE
It is recommended that you do not install or remove fiber-optic SFP
modules with the cables attached due to the potential to damage the
cables, the cable connector, or the optical interfaces in the SFP module.
Disconnect all cables before removing or installing an SFP module.
3 Lock the SFP into place by moving the handle up into the locked position.
The handle is in the correct closed position when access to the connector
is not obstructed.
4 Remove the protective caps from the connectors on the fiber-optic cable
and save them for future use.
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
OO S
PO WE R
OOS
P OWER
OO S
PO WE R
A
R
R
IS
A
R
R
I S
A
R
R
I S
D 5 QAM 8DX4
OOS
P OWE R
D5 Q A M 8DX 4
O OS
P OWER
D 5 Q A M 8 D X4
O O S
P O WER
A
R
R
IS
A
R
R
IS
A
R
R
IS
D5 QAM 8DX4
D5 QAM 8DX4
D5 QAM 8DX4
5 Plug the fiber-optic cable into the connector on the SFP until it clicks in
place.
Figure 6-9: Fiber Optic Cable Connector
End of procedure
Copper Small Form Factor
Pluggable
To install the Copper SFP option perform the following steps:
Procedure 6-4 Install Copper SFP I nto GigE Ports
1 Ground yourself properly with an electrostatic discharge (ESD) strap.
2 Grip the sides of the SFP with your thumb and forefinger and insert the
copper SFP into selected GbE port and push firmly into the port until it
seats.
3 Lock the SFP into place by closing the handle up or locked position. The
handle is in the correct closed position when access to the connector is not
obstructed.
4 Insert copper Ethernet connector until it clicks in place.
End of procedure
Dual DOCSIS Timing Interface (DTI)
The D5 UEQ supports dual DTI operation (when equipped with the Dual
DTI WAN).
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
O OS
P OWER
OO S
PO W ER
O OS
POW
ER
A
R
R
IS
A
R
R
IS
A
R
R
I S
D5 QAM 8DX4
OOS
POWER
D5 QAM 8 DX4
OO
S
P OW ER
D 5 QAM
8D X4
OOS
POWER
A
R
R
IS
A
R
R
I S
A
R
R
I S
D5 QAM 8DX4
D5 QAM 8DX4
D5 QAM 8DX4
Rear of Chassis
NOTE
This adapter will not work on the Single DTI WAN (Part Number 722012).
The DTI port on the D5 UEQ is internally wired to deliver two separate DTI
server signals to the DTI controller on the D5 UEQ allowing for redundant
server setups. The dongle requires a straight-through Unshielded Twisted
Pair (UTP) cable rated at Category 5E or better (note: the Ethernet cables
are not provided by ARRIS) and a length limit of 200m is imposed on the
combined length of sections from the DTI server to the dongle and from
the dongle to the WAN.
Figure 6-10: Dual DTI Adapter
The DTI clock interface port on the WAN card has two integrated bi-color
LEDs. The one on the left hand side indicates the status of DTI link #1, the
LED on the right hand side indicates status of DTI link #2.
Each LED is color coded as follows:
DTI Clock
Interface
Dual DTI Adapter
DTI Status LEDs
TABLE 1. DTI Status LEDs
DTI Status LEDs DTI Client Mode Description
Off Warmup
Free-run
Holdover
Oscillator has not yet stabilized
Client has not had a valid timing source since reset.
Client has its timing reference but is attempting to maintain last valid
frequency.
Yellow Fast Using sort acquisition time constant to reduce initial lock time.
Green Normal or Bridging Clock is stable and locked on to the timing refernce and is fully compli-
ant. Client has lost its timing reference but is maintaining acceptable
performance.
NOTE
There are no LEDs on the dongle.
Dual DTI Dongle Pinout As shown in the graphic below, the Dual DTI Dongle has only four connec-
tions. Pins 1 and 2 of the Primary Port are connected to pins 1 and 2 of
DTI Port #1. Pins 7 and 8 of the Primary Port are connected to pins 1 and
2 of the DTI Port #2.
Figure 6-11: DTI Port Pinout
Power Considerations
The D5 UEQ has two slots for modular power supplies. The D5 UEQ may
use either an AC or DC power supply. Both AC and DC power supplies are
hot-swappable and share current. The specifications of the power supplies
can be found in Table 6-2 below. Also, please refer to Power Supply Unit
(PSU) on page 4-8 for compatibility issues when replacing or adding PSUs.
Table 6-2: Power Supply Data
Rear of Dongle
Port 2 Port 1
Front of Dongle
(Primary Port)
DTI CL
I nput Input Range Dimensions
Total
Power
Capacity Output Rails
Typical
Efficiency
AC Chassis
(722050)
85 to 264Vac 6Ux8HP 500W 3.3/5.0/+12/-12V 81-82%
High Capacity
AC Chassis
(780276)
90 to 264Vac 6Ux8HP 600W 3.3/5.0/+12/-12V 81-82%
DC Chassis
(72114)
37 to 60Vdc 6Ux8HP 500W 3.3/5.0/+12/-12V 83-84%
High Capacity
DC Chassis
(780277)
40 to 60Vdc 6Ux8HP 600W 3.3/5.0/+12/-12V 83-84%
CAUTI ON
This product is designed for connection to an IT power distribution
system with phase-to-phase voltage 230V.
Dette produktet er beregnet for tilkobling til en IT-strm
distribusjonssystem med fase til fase spenning 230V.
Ce produit est conu pour le raccordement un systme informatique de
distribution d'nergie avec les phases de tension 230V.
Circuit Breakers Circuit breakers should be selected to ensure they meet both the steady
state and the inrush current. The inrush current increases proportionate to
the supplied AC-voltage-magnitude, whereas the steady state current
decreases inversely as AC-voltage-magnitude increases. For appropriate
selection of a circuit breaker at 100Vac operation:
For single AC PSU per D5 UEQ at 110Vac, select a breaker which gives
at least a 4:1 ratio between inrush and steady state current handling.
For dual AC PSUs per D5 UEQ:
- If a single breaker is to be used for both PSUs, for operation at
110Vac, select a breaker which gives at least a 6:1 ratio between
inrush and steady state current handling.
- ARRIS recommends using two separate circuit breakers to feed
each PSU to give independent sources to AC-mains power to each
PSU in which the 4:1 ratio applies to each.
Connecting Cables
AC Power Cables
The D5 UEQ chassis supports two hot-swappable, load-sharing power
supply unit (PSU) modules. A single PSU can provide all the power that a
fully loaded system needs with a sufficient safety margin. The upper and
lower PSU slots can be used with either an AC PSU or a DC PSU.
The AC PSU configuration will always be shipped with the PSU unit in the
lower PSU1 slot. If you have only ordered one AC PSU then use the lower
PSU1 rear plug to power up your unit. If you use the upper PSU2 plug the
unit will not power on. If you have ordered a unit with two AC PSUs then
plug in both power cords to bring them online.
WARNI NG
To disconnect power from the D5 UEQ for servicing, remove all power
leads (AC and DC) from the rear socket. The D5 UEQ has no power
switch.
Procedure 6-5 Connect AC Power Cable to the D5 UEQ
1 Plug in the supplied cord into the Power Module on the back of the
D5 UEQ.
Figure 6-12: D5 UEQ AC Power Connection Panels
End of procedure
Rear of Chassis
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
RF1
RF1
RF2
RF1
RF2
RF2
RF3
RF3
RF3
RF4
RF4
RF4
O
OS
PO
W
ER
OO
S
PO
W
ER
OO
S
PO
WE
R
A
R
R
IS
A
R
R
IS
A
R
R
IS
D
5 QA M
8 D
X 4
O
OS
P
OW
ER
D5 Q
AM
8 D X4
OO
S
PO
W
E
R
D
5 Q
A M
8 DX 4
OOS
PO
W
ER
A
R
R
I
S
A
R
R
I S
A
R
R
I
S
D5 QAM 8D
X4
D5 Q
AM 8DX4
D
5 Q
AM
8DX4
Rear of Chassis
DC Power Cables
Unlike the AC PSUs which have two plug-ins on the rear of the chassis, the
DC PSU has only one connector on the rear of the D5 UEQ unit. It powers
DC PSU 1 slot and DC PSU 2 slot and should be wired appropriately for
each separate PSU slot. If a DC chassis is ordered, it will be shipped with
the DC PSU in the lower PSU 1 slot.
Procedure 6-6 If your D5 UEQ has the power connection panel shown below, use
the following procedure to connect the DC Power Cable:
1 The DC power source must:
have reliable grounding
be electrically isolated from its AC source
have an over-current protection device rated at 16 Amps, because the
D5 UEQ has no fuse for DC power
have a suitably rated disconnect device in the DC Mains feed
Connect the supplied external DC cable assembly to 48V DC using a
power distribution unit.
Signal To AWG Color
DC RTN Pin 2 12 Black
-48V Feed 1 Pin 1 12 Red
-48V Feed 2 Pin 3 12 White
2 Connect both Feed 1 and Feed 2 to 48V even if only one DC PSU is to be
installed. This allows placing a single DC PSU in either of the two possible
slots, or placing two DC PSUs in the chassis.
Figure 6-13: Connector Pin and Locations
End of procedure
Procedure 6-7 If your D5 UEQ has the power connection panel shown below, use
the following procedure:
1 The DC power source must:
have reliable grounding
be electrically isolated from its AC source
have an over-current protection device rated at 20Amps, because the
D5 UEQ has no fuse for DC power
have a suitably rated disconnect device in the DC Mains feed.
NOTE
If two DC PSUs are installed, both DC returns must be connected.
-48V Feed 2 (Pin 3)
DC Return (Pin 2)
-48V Feed 1 (Pin 1)
Top DC PSU
Bottom DC PSU
2 External connection to DC to be made by customer using ring or spade
tongue terminals.
The wire size is 12 AWG.
The tightening torque value for the terminal block connection is 0.8Nm
(7 lbs/inch).
Power connections to the terminal block for DC1 and DC2 are shown
in the following figure.
Figure 6-14: Terminal Block Wiring for DC PSU
End of procedure
Top DC PSU Slot
Bottom DC PSU Slot
DC 2
DC 1
- 48V
- 48V
RTN
RTN
To 20A Fuse (B)
12 AWG
12 AWG
12 AWG
12 AWG
To 20A Fuse (A)
Management Connections
Procedure 6-8 Connect Management Cable to the D5 UEQ
1 Connect cables into the appropriate fastEthernet port (labeled
ETH1/ETH2) on the WAN card on the back of the unit. .
Figure 6-15: FastEthernet cabling
2 Make sure to push the connector until you hear a click. This indicates the
connector is fully inserted and secure.
End of procedure
Video Connections
Procedure 6-9 Connect Video to the D5 UEQ
1 Connect GigE video content cables into the GigabitEthernet ports (GigE 1-
4) on the WAN card on the back of the unit.
End of procedure
ETH 02
ETH 01
RF Connections
Procedure 6-10 Connect RF Connections to the D5 UEQ
1 Before commencing cabling work on QAM ports/modules, shutdown the
QAM port/module. This is necessary to avoid triggering the D5 UEQ fault
detection feature which monitors fault conditions and shuts down the QAM
if one is detected. Connecting and disconnecting cables can result in a
significant change in power levels which could trigger a shutdown.
2 Connect the RF cables using F-connectors to the QAM module on the back
of the unit. The recommended torque value for the F-connectors of
subscriber cables is 1.0 to 1.25Nm.
End of procedure
Cable Management
The following rules for the cable management apply:
All cables should be kept in the rear area of the rack/cabinet.
Should it be necessary to route cables down the sides of the D5 UEQ,
they should be routed between the second and third fans (from the
front) where there is a break in the inlet and outlet exhaust grills.
The D5 UEQ rear-mount bracket assembly (ARCT01138) may addi-
tionally be used to conveniently attach bundles of RF coaxial cabling
to the rear of the D5 UEQ, using tie-wrap or other cable bundling
accessories. This accessory and the cable-bundle bound to it, also
provide a useful barrier to air circulation in that air heated by the D5
UEQ and expelled from the right-hand side of the rack is forced to
egress away from the D5 UEQ.
Both side walls of the D5 UEQ should be kept free from any obstruc-
tion. The airflow should be free along both internal side walls of the
cabinet.
The cabinet should have open aperture for cable routing on the top
cover, bottom base and/or rear door.
1U cable management panel with cable shunting rings can be installed
between each D5 UEQ.
The green outline in Figure 6-16, Cable Management, on page 6-26, shows
the preferred path for all cable routing. The cable management panel with
shunting rings can be ordered from most rack and cabinet suppliers.
.
Figure 6-16: Cable Management
7. Initial System Configuration
Topics Page
Configuring the D5 UEQ with CLI 2
Configuring the D5 UEQ with the Web Manager 10
Configuration Overview
Use the information in this chapter to configure an installed D5 UEQ with
minimal features. The D5 UEQ can be configured with a laptop or PC and
the appropriate cable by using the serial (console) port on the front of the
D5 UEQ and CLI commands or by using an Ethernet cable on the Fast
Ethernet (FE01) port on the rear of the D5 UEQ and Web Manager screens.
Once the D5 UEQ is configured, files are created and stored on the
compact flash card.
7 I nitial System Configuration
Configuring the D5 UEQ with CLI
Setup-Mode Configuration Script
The Setup-Mode Configuration Script is an intuitive and interactive setup
program used to configure a D5 UEQ without a pre-existing software
configuration. It is an easy to use, text-entry interface that is activated
upon initial power-up of a D5 UEQ.
The Setup-Mode Configuration Script is a wizard that guides a user
through input setup parameters and then launches a configuration file that
allows the D5 UEQ to boot successfully and stream video.
It is a simple tool targeted at users who expect to manage the D5 UEQ
primarily through the D5 UEQ Web Manager.
For operating instructions on the Setup-Mode Configuration Script, please
consult the D5 UEQ Quick Start Guide. The D5 UEQ Quick Start Guide
instructions, including Connecting Cables, are an alternate to this
chapter and accomplishes the same configuration using the text-entry
command line interface (CLI).
Serial Port Connection for the D5 UEQ Configuration
Connecting the Operator
Console
This section gives a detail description of the cabling for the operator
console. The operator console is necessary to initially power up and
configure the D5 UEQ. Use an asynchronous terminal or a PC with asyn-
chronous terminal emulation software.
Figure 7-1: RJ -45-to-DB9 Cable and Pin-out
RJ -45 DB-9
P5
P1
P6
P9
P8
P1
RJ45
Pin No. Signal Description
DB9
Pin No.
1 CTS Clear to Send 8
2 No Connect
3 Tx Transmit Data 2
4 Gnd Ground 5
The front panel connector is designed to connect directly to a host device
with the supplied cable and adapter. Do not attach the console to any
other network interface.
Procedure 7-1 How to Open a Terminal Emulator Session
Perform the following steps in their proper sequence.
1 Connect the RJ 45 connector on the cable to the RS/232 connector on the
front of the D5 UEQ.
2 Connect the other end of the serial port to your laptop or computer. If your
computer only uses a DB25 serial port or a USB connector, a DB9-to-DB25
or DB9-USB adapter will be needed in order to connect the cable.
3 Using a terminal access program, setup your serial port for terminal
emulation using the following parameters listed below:
Serial Port COM1
Bits per second 38400 baud
Data bits 8
Parity None
Stop bits 1
Flow Control None
4 If your emulator gives you the option to echo type characters locally, turn
it off.
5 Save your terminal emulator setup.
End of procedure
Initial Configuration for WAN and QAM Modules
Use the information in this section to create an initial configuration for the
WAN and QAM modules.
5 Gnd Ground 5
6 Rx Receive Data 3
7 DSR Data set Ready 4
8 RTS Request to Send 7
No Connect 9
No Connect 6
RJ45
Pin No. Signal Description
DB9
Pin No.
Requirements To create the configuration file, you need the following information:
IP addresses to be assigned to interfaces.
Cable plant configuration information: annex, frequencies, modula-
tion, etc.
General Configuration
General configuration includes management data (SNMP and CLI access).
When adding configuration information, change names and identification
strings to meet local requirements.
Ethernet Port Configuration
In previous releases, the WAN card provided management access on the
fastEthernet 0/1 port (ETH1). In release 3.0.1, ETH2 has been enabled
and should be used for management access if you plan to use ETH1 for
gigabitEthernet MAC redundancy. An IP address will need to be assigned
to the port. Make changes as necessary for your deployment.
After powering up of the D5 UEQ, perform the following from the PC
terminal via the serial port on the front of the D5 UEQ to configure
management access:
MON appl i cat i on
Dat e : J une 1, 2010, 18: 19: 18
Ver si on : 3. 0. 1. 50
done.
ARRI S D5 Uni ver sal EdgeQAM
Copyr i ght ( c) 2003- 2010 ARRI S Gr oup, I nc
Pat ent s and Pat ent s Pendi ng. Al l r i ght s r eser ved.
D5- mon
Pr ess any key t o connect t o CLI
Checki ng boot Loader :
=> no updat e i s r equi r ed.
Reboot i ng WAN. . .
Pl ease wai t up t o 1 mi nut e. . .
Tr yi ng t o connect t o WAN t hr ough mi dpl ane ( I P addr ess i s 111. 111. 1. 111) . . .
Successf ul l y connect ed t o wan_sl ot _7.
I f t hi s wi ndow i s t hr ough a di r ect connect i on t o t he MON consol e por t , Escape
char act er i s ' ^] ' .
ARRI S D5 Uni ver sal Edge QAM
Logi n:
D5>
D5>enabl e
D5#conf i gur e t er mi nal
D5( conf i g) #cli account <myusername>
D5( conf i g) #cli account <myusername> password <myuserpassword>
D5( conf i g) #cli account <myusername>enable-password <myenablepassword>
D5( conf i g) #interface fastethernet 0/2
! NOTE: sub- i nt er f ace conf i g wi l l not be appl i ed
! ( and wi l l not be di spl ayed by t he " show" commands)
! unt i l af t er i nt er f ace- conf i gur at i on mode has been exi t ed
D5( conf i g- i f ) #ip address <MyNetworkManagementIPAddress>
<MyNetworkManagementSubnetMask>
D5( conf i g- i f ) #no shutdown
D5( conf i g- i f ) #exit
D5( conf i g) #ip route 0.0.0.0 0.0.0.0 <MyNetworkManagementGatewayIPAddress> **(if
you need a default route)
D5( conf i g) #exit
D5#write memory
Copy Ok: 2851 byt es copi ed
The fastEthernet 0/2 port is now configured.
NOTE
After the Ethernet port has been configured, the ARRIS Web Manager can
be used to complete the D5 UEQ provisioning process in lieu of the
configuring with the text-entry CLI.
The Web Manager is a comprehensive graphical user interface (GUI)
toolset that enables a user to configure, monitor and troubleshoot a D5
UEQ. To use the ARRIS Web Manager, go to Configuring the D5 UEQ with
the Web Manager, page 7-10.
Gigabit Ethernet Port Configuration
The WAN card provides four interface GigE ports for video transport (and
requires IP addresses to be assigned to each port). The ports are automat-
ically shutdown by default upon D5 UEQ power up. The no shutdown
command enables the port.
The following example configures the GigE1 port for video transport. All
other GigE ports are disabled. Make changes as necessary for your deploy-
ment.
Login to the D5 UEQ Management port, on the back of the WAN card
(ETH2 port) with an RJ -45 cable and laptop or PC, using the IP address
from above.
ARRI S D5 Uni ver sal EdgeQAM
Logi n: <MyLoginName>
Passwor d: <myuserpassword>
ARRI S D5 Uni ver sal EdgeQAM Command Li ne I nt er f ace
( S/ Wver si on: 3. 0. 1. 50 changes t o i nst al l ed ver si on)
D5>enable
Passwor d: <myenablepassword>
D5#configure terminal
D5( conf i g) #interface gigabitethernet 0/1
! unt i l af t er i nt er f ace- conf i gur at i on mode has been exi t ed
D5( conf i g- gi g- i f ) #<ip address> <GigE IP> <GigE Netmask>
D5( conf i g- gi g- i f ) #no shutdown
D5( conf i g- gi g- i f ) #exit
GigE1 port configuring is complete.
Dual WAN Configuration
If you plan to run Dual WAN, you must first configure WAN 7 and its asso-
ciated QAM slots. Dual WAN must be enabled before QAM slot assignments
can be configured for WAN 8.
Start a CLI session by connecting to the D5 UEQ serial port (|0|0|) on the
D5 UEQ front panel. You will be prompted to select the WAN card:
====================================
Please select a WAN card:
1. WAN slot 7
2. WAN slot 8
====================================
Type the number 2 (WAN slot 8) and hit Enter.
Log into Global configuration mode and set-up the route to your gateway:
D5(config)#ip route <destination prefix IP> <destination subnet mask> <forwarding
router IP>
Assign an IP address to the Fast Ethernet Port of the WAN-8 card:
D5(config)#interface fastethernet 0/1
D5(config-if)#ip address <IP address> <IP mask>
D5(config-if)#exit
To enable/disable the Dual-WAN feature via the CLI, issue the dualwan
command.
D5(config)#dualwan timing 7
Dual WAN mode has been enabl ed
NOTE
When two WAN cards are present, one must be chosen to be the master
timing WAN.
QAM Configuration
Each QAM card installed in the D5 UEQ provides two RF output ports. Each
port supports up to four QAM channels on the Dual-Port QAM Module (DPM
4DX2) in Quad Mode and six QAM channels on the Dual-Port QAM Module
(DPM 6DX2) in Hex Mode and eight QAM channels on the Quad-Port QAM
Module (QPM 8DX4). The interface designation is QAMslot/port.channel,
where:
slot is the slot number of the card (1 to 6);
port is the RF port (facing the back of the D5 UEQ, port 1 is on the
left);
channel is the channel number (1 to 4 for the DPM 4DX2, 1 to 6 for
the DPM 6DX2, or 1 to 8 for the QPM 8DX4). Configuring without the
channel number will configure all channels at once.
The following example will enable the Annex and video format on the QAM
card in slot 1:
D5(config)#interface qam 1
NOTE: Conf i gur at i on changes wi l l be appl i ed af t er t he " exi t " command i s gi ven.
D5(config-qam-card)#video annex b
D5(config-qam-card)#video format 256
D5(config-qam-card)#no shutdown
D5(config-qam-card)#exit
Next, enable the channel mode and video frequency on the card in slot 1,
port 1 with the following:
D5(config)#interface qam 1/1
NOTE: Conf i gur at i on changes wi l l be appl i ed af t er t he " exi t " command i s gi ven.
D5(config-qam-port)#channel mode quad
D5(config-qam-port)#video frequency 627000000
D5(config-qam-port)#no shutdown
D5(config-qam-port)#exit
The QAM interface in slot 1, port 1, is now configured.
If you have enabled Dual WAN, you can assign a QAM port to either the
WAN in slot 7 or the WAN in slot 8 with the following command in Global
Configuration mode:
D5(config)#assign slot <1-6> wan <7-8>
Sl ot 5 assi gned t o wan 8
To display the QAM assignments, you can use the following:
D5(config)#show linecard status
Dual WAN mode i s enabl ed, mast er t i mi ng WAN 7
Car d Sl ot Admi n Oper Dupl ex Ser i al Pr oduct Pr od Pr ov
Type Owner St at e St at e St at e Number Code Rev Type
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
MON UP I S C386A0D50021 MON_8 AB MON
QAM 1 WAN 7 UP I S Si mpl ex C217A0B71008 QAM_4DX2 AG QAM
QAM 2 WAN 7 DOWN OOS- MAN Si mpl ex C31720990004 QAM_4DX2 CA QAM
QAM 5 WAN 7 DOWN OOS- MAN Si mpl ex C217A0B71043 QAM_4DX2 AG QAM
WAN 1 UP I S 3259 WAN_4G2F BB WAN
WAN 2 UP I S 3278 WAN_4G2F BB WAN
PMOD 1 UP I S G487B0D60050 PWR_CNV8 AB PMOD
PSU 1 UP I S
PSU 2 UP I S
CHAS I S T14900E30005 CHA_8 AA CHAS
Configuring SNMP Service
The WAN module provides an SNMP agent for management purposes. You
must assign an IP address and enable management access on the WAN
module interface to enable SNMP management.
The following is the basic setup of v1/v2c SNMP configuration. The D5 UEQ
is also compatible with SNMP v3.
D5(config)#hostname D5
D5(config)#snmp-server community public ro
D5(config)#snmp-server community private rw
Configuring the D5 UEQ with the Web Manager
Overview
The D5 UEQ Web Manager is a comprehensive graphical user interface
(GUI) element manager that enables a user to configure, monitor and
troubleshoot a D5 UEQ. It reports D5 UEQ inventory via auto detection and
allows GUI control over most commands found in the CLI, therefore expe-
diting and simplifying common configurations that would take considerably
longer utilizing the CLI exclusively.
The Web Manager focuses on a specific subset of features which allows an
operator to manage MPEG configuration, monitor bandwidth and perfor-
mance, monitor events in real-time, and provision QAM modules.
The Web Manager utilizes Hyper Text Markup Language (HTML), Dynamic
Hyper Text Markup Language (DHTML), J avaScript, and Cascading Style
Sheets (CSS).
Since the Web Manager is session-based, each individual login will
generate its own session. There can be a maximum of four sessions logged
in at any one time. If all four sessions are running, any subsequent attempt
to log in will fail until one of the four sessions is logged out.
NOTE
While both Internet Explorer 8.x and FireFox support multiple sessions to
multiple D5 UEQs, they only support a single session to a particular D5
UEQ at any one time. This is because they share cookies between all
tabs and windows by default (even if a new instance is opened from the
Start menu). These shared cookies call all instances to resolve to the
same Web Manager session, leading to an inability to login. A new
Internet Explorer session must be explicitly requested by selecting File -
> New Session from an open Internet Explorer instance. Prior versions
of Internet Explorer create new sessions with new browser instances.
Logging out consists of one of the following:
Clicking the logout button.
Closing the browser window/browser tab containing a logged in
session.
Navigating to a different web-site from a logged-in session page. (You
will have five seconds to click the browser Back button to return to the
Web Manager before the session is logged out. This is to cover acci-
dental navigation from the current session.)
Session Timeout A session that has Privilege access shall have its
access level automatically logged out after a period of ten minutes of inac-
tivity. You will need to log back in with the Privilege password before you
can continue. By going to the Startup Configuration, Preferences menu,
you will be able to change the default session timeout.
System Requirements The Web Manager is optimized to support Internet Explorer version 6.0.
The minimum PC platform requirements are:
Windows 2000 Pro
Windows XP Pro/Corp
Pentium III @ 600MHz, 512 MB RAM
Video Card and Monitor capable of displaying 1024 x 800 in True Color
10baseT Ethernet Card
10 Mb of hard disk space
The Web Manager browser sends and retrieves data over port 80 after
user authentication. User authentication occurs when the user is prompted
to login. Once a password has been entered, access level authentication is
granted for either Monitor or Configure Modes.
NOTE
Do not use Mozilla Firefox because it could cause damage to your running
configuration.
Setting up the D5 UEQ
Connecting to the D5 UEQ The D5 UEQ can be setup without using CLI. You can use an Ethernet
cable and connect directly to the Web Managers FastEthernet port on the
rear of the chassis.
Procedure 7-2 After the Web Manager is launched, use the Basic Setup Steps
below to configure the D5 UEQ.
1 Power up the D5 UEQ
2 Plug your PC into the configured management port <ETH1 or ETH2> on
the rear of the chassis with an Ethernet cable.
3 Configure your PC to accept DHCP by:
a Right-click the Start button
b Click Control Panel
c Click Network Connections
d Click local area connections
e Right click Properties
f Select TCP/ I P
g Click Properties and select the Obtain I P Access Automatically
box
4 Read the IP address on the D5 UEQ front LED panel face plate (address
will default in the 169.254.x.x. range [APIPA]) and enter it in the address
bar of your PC Web browser (Figure 7-2).
Figure 7-2: Web Browser
5 D5 UEQ Web page will launch, then click on the Login button and the
system will log you in automatically. Since no user accounts have been set
up at this point, you will be logged in with Privilege access. (Once user
accounts have been configured, you will be presented with two input
boxes, one to enter the username and the other to enter the password.
You will then need to use the username and password that was
configured.)
NOTE
If the D5 UEQ Web page does not launch because the DHCP has assigned
the PC the same IP address as the D5 UEQ, go to step 6.
6 To release your PCs DHCP IP address and reconfigure a new one, use the
following steps:
a Right-click the Start button, and then click Run
b In the box, type: cmd and click ok
c At the command prompt, type: ipconfig / all, hit <enter>
d Confirm address is the same as the D5 UEQ
e At the command prompt, type: ipconfig / release, hit <enter>
f At the command prompt, type: ipconfig / renew, hit <enter>
g At the command prompt, type: exit, hit <enter>
h Go back to step 5.
Web Manager Login Modes As with CLI, the D5 UEQ Web Manager has two login modes for which
there are two (not necessarily different) passwords.
The User password gains access to the Monitor mode which is used to
monitor the status of the D5 UEQ. The Monitor mode allows read-only
access to the D5 UEQ. Configuration changes cannot be made in the
Monitor mode.
The Privilege password gains access to the Configure mode which is used
to configure the D5 UEQ. The Configure mode allows read-write access to
the D5 UEQ. The Configure mode has a session timeout safety feature.
You must complete a configuration task within ten minutes or you will be
automatically logged out. The session timeout period is configurable in the
Preferences menu under the Startup Configuration drop down menu.
Once the user is logged into the system, the Web Manager will display the
Web Manager D5 System Summary/Home page (Figure 7-11) which
profiles the major module states.
Web Manager AAA Implementation
Prior to Release 3.0.1, The D5 UEQ AAA implementation allowed the use
of TACACS+ and RADIUS for a mix of the Authentication, Authorization
and Accounting functionalities. However, when AAA Authentication was
enabled on the D5 UEQ, access to the D5 Web Manager Configure mode
was disabled. If you were using TACACS+ for Authentication (with the
primary reason being to centralize usernames and password storage),
then you would have been unable to deploy TACACS+ Authentication due
to the loss of Configure access via the Web Manager.
In Release 3.0.1, once configured for TACACS+ Authentication, the Web
Manager will accept login attempts from users, and place them in Monitor
mode or Configure mode, depending on the access level/priority returned
from the TACACS+ Authentication server. The feature relies on the
existing Monitor/Configure levels available in the Web Manager, and does
not require any change to these levels or any change in accessing any of
the Web Manager pages, with the exception of forcing the CLI account
page to be disabled.
The following paragraphs provide the updated view of the Web Manager
when operating with AAA support. The following setup was accomplished
using the configuration presented below, including the AAA and HTTP
configuration options.
Figure 7-3: AAA Default Login Page (Radius example)
The above screen capture shows the default AAA login option. Users may
select the Monitor or Configure mode, depending on what functions they
need access to on the Web Manager. In the event that AAA services are
configured to allow the user login directly to Enable/Configure mode, the
D5 UEQ takes care of this, even if the user chooses the Monitor option.
Figure 7-4: AAA Login Prompt (Radius example)
The user is offered a login prompt to submit their login name. The example
shows Radius, but TACACS+ is also supported. The login prompt can be
changed by the remote AAA authentication service (depending on how it
has been configured). Once entered, the user must click the submit button
to continue with the login attempt.
Figure 7-5: AAA Password Prompt (Radius example)
This screen capture shows the password prompt. The prompt is supplied
by the AAA authentication server, and may change depending on the pass-
word information being requested. In the event of a PIN number or a PIN
number change, the WEB Manager correctly presents the necessary
prompt (supplied by the AAA authentication server) to the user.
Figure 7-6: Successful AAA Login (Radius example)
Once the AAA authentication system has accepted the passwords, it
responds to the D5 UEQ to allow the user access to the WEB Manager. In
the even that Exec/Shell level authorization has also been configured, if
the AAA system requires the User access mode to be changed to/from
Monitor/Configure modes, the D5 UEQ will handle this and provide the
correct access mode for the user. This allows a user login using Monitor
mode, but get switched to configure mode depending on how Exec/Shell
level authorization is configured.
Figure 7-7: Failed AAA Login Attempt (Radius example)
The above screen capture shows a login failure after the login/password
combination were not accepted by the removed AAA authentication
server. The WEB Manager returns to the AAA Login screen, displaying the
failure message and providing the Monitor/Configure options for the user
to retry.
Web Manager Toolbars
The device status is displayed across the main page and includes the
following information:
Figure 7-8: Web Manager Device Status
Hostname
Access Mode
Software
Versi on
Management
IP Address
Active Image
Versi on
Logout
Button
ARRIS
Websi te
Li nk
Status
Bell
Mai n Navi gation
Menus
A menu bar is built across the main page and as each menu item is
selected, the various drop down menus are displayed.
Figure 7-9: Web Manager Main Menu Components
The following graphic displays a brief summary of the drop-down menus
and the sub-menus contained in the Web Manager Main Menu:
Figure 7-10: Web Manager Drop-down Navigation Menus
D5 Summary
State Monitoring Features
Card Status
Event Logs
Active Video
PSIG Database
Configure QAM, GbE,
Multicast
Port Mappings
Flexible Memory Mgr
Stream Replication
Network Attributes
Switched Digital Video
RPC Configuration
Shell Sessions, Stream,
PSI Info
Technical Report
Running Configuration
Inventory Report
Process State
DEPI Configuration
DTI Configuration
Bootup Configuration
Web Manager Prefs
WEB CLI Access
Conditional Access System
live CAS, Redundancy Groups,
ECMG, EMMG, EIS,
static SCG
D5 Summary
Line Card Status
Event Logs
Active Video
Sessions
QAM Dejitter
Queues
Program
Extraction
PSIG Status
Environment
Port Mappings
Interface Counters
QAM Bitrates
Input (GE Ports)
Port Channels
Dual WAN
Output
Channel Containers
Stream
Replication
Redundant
Stream Groups
QAM UDP Port
Mapping
QAM TSID/Serving
Group
QAM Dejitter
Rules
QAM Video
Rules
Network (FE Ports)
Operation
Multicast
Event Log
Live CAS
Configure
CAS
Redundancy
Groups
ECMG
EMMG
EIS
Static SCG
Sessions
Streams
Shell Sessions
Monitor ERMs
Configure ERM
Interface
Configure RPC
Interface
Show Version
Detail
Technical
Support
Inventory
Report
Running
Configuration
Boot
Management
Preferences
Configure Account
Access
Telnet D5 UEQ
DEPI Sessions
DEPI Connections
Configure DEPI
Group
Configure DEPI
Control Plane
Configure DTI
D5 UEQ System
Summary/ Home Page
The D5 System Summary, or Home Page (Figure 7-11) conveys the initial
GUI experience to the user. It displays the results of profiles run against
system modules for runtime status. System information for event
summary, stream video, bandwidth utilization and numerous quick links to
major configuration and monitoring pages are tracked here.
Figure 7-11: D5 System Summary/ Home Page
Displays frequency and
type of Event occurrence.
Provides shortcut to the
Event log screen.
Displays Active Video Sessions
information. Provides shortcuts
to the Video Rules, Active Video,
and UDP Port Mappings screen.
Displays system information.
Provides shortcut to the
Inventory Report screen.
Displays QAM video
statistics. Provides
shortcut to QAM Output
Configuration screen.
Displays QAM Bandwidth
Utilization statistics. Provides
shortcut to the Program
Extraction screen.
Navigating the Web
Manager
When navigating the Web Manager browser, you can perform the
following actions with your mouse and keyboard:
Select an item by single clicking the left mouse button.
To access drop-down menus, hover over an icon and left click on your
selection.
Double left clicking in the browser title will maximize the window.
Left click once with the left mouse button on an icon to execute the
icons intended action.
Using the Backspace key will step you backwards one screen, incre-
mentally through the drop down menu.
Using the Shift + Backspace keys will step you forward one screen.
Setting up a Host Name
A host name is used to designate a D5 UEQ. The host name can be seen
via the CLI or the Web Manager.
Procedure 7-3 From the Configure > Network drop-down menu, navigate to
the SNMP Management menu to launch the SNMP v2c
1 Enter a host name in the profile column of the Global config:
configuration box.
2 Click the Update button.
End of procedure
Configuring a CLI Account
The Configure CLI Account menu is located in the Access Management
menu under the Configure Account menu. It launches the D5- Access
Management screen which displays the D5 Account Table which displays
current accounts and access levels and is where you would also add new
accounts.
From the Account Screen (Figure 7-12) a user can configure new CLI login
accounts with passwords, Privilege passwords and secret passwords for
users to utilize while accessing the D5 UEQ from the CLI.
Figure 7-12: CLI Account Screen
Procedure 7-4 Creating a CLI Account from the Web Manager
1 Launch the Configure Account configuration screen from the drop down
menu located under the Access Management drop down menu.
2 Click Add in the D5 Account Table.
3 Enter a user name in the User Name field.
4 Enter a password (at least 8 characters long) in the Password field.
5 Enter a Privilege password (at least 8 characters long) in the Privilege
Password field.
6 (Optional) Enter a secret password (at least 8 characters long) in the
Secret Password field.
NOTE
The optional secret password sets the Privilege (Enable) mode to an
encrypted password. If this password is not set, then the Privilege mode
password is required to enter the Privilege mode.
CAUTI ON
If both the Privilege Mode password and Secret password have not been
set, the D5 UEQ disables access to the Privilege Mode using Telnet. A user
will only be able to enter the Privilege Mode by using a direct serial
connection to the D5 UEQ.
7 Click the Apply Changes button.
End of procedure
Configuring SNMP
The WAN module provides an SNMP agent for management purposes. You
must assign an IP address and enable management access on the WAN
module interface to enable SNMP management.
Figure 7-13: SNMP Configuration Screen
Procedure 7-5 From the Configure > Network drop-down menus, navigate to
SNMP Management to launch the SNMP v2c Configuration
screen.
1 In the SNMP Communities section, enter public in the Community field.
2 Select read-only in the Access field.
3 Click Create.
4 In the SNMP Communities section, enter private in the Community field.
5 Select read-write in the Access field.
6 Select enabled in the Notifications field.
7 Click Create.
8 In the D5 UEQ Application Manager SNMP Profile box, click On to enable
SNMP.
End of procedure
Enabling a GigabitEthernet Interface
The WAN card provides four interface GigE ports for video transport (and
requires IP addresses to be assigned to each port). The ports are automat-
ically shutdown by default upon D5 UEQ power up.
The following example configures the GigE1 port for video transport. All
other GigE ports are disabled. Make changes as necessary for your deploy-
ment.
Figure 7-14: GigabitEthernet Configuration Screen
Procedure 7-6 From the Configure > I nput (GE Ports) drop-down menu, the
GigabitEthernet SFP Port Configuration screen will launch.
1 Select the GbE I nterface to configure.
2 Check Up for Admin State state.
3 Select Full for Duplex.
4 Enter I P address in the Primary I P Address field.
5 Enter the Subnet Mask I P address in the Mask field.
6 Click Apply Changes or continue to next step.
Options I f using an NSG UDP port mapping scheme on the
GigabitEthernet interface, continue with these steps:
7 Check the NSG Compatible box if NSG UDP port mapping schemes will
be used.
8 Enter the number of NSG IP addresses to be used in the Number NSG
I P addresses field.
9 Click Apply Changes or continue to the next steps.
End of procedure
Configuring a QAM Module
The QAM module contains the QAM and RF components of the system.
Configurable parameters are: format, annex, inter-leaver, frequency,
symbol rate, power and spectral inversion.
On a single Dual-Port QAM Module (DPM 4DX2) in Quad Mode, there are
two RF connectors (labeled RF1 and RF2) that carry four QAM channels
each for a total of eight QAM channels per module.
On a single Dual-Port QAM Module (DPM 6DX2) in Hex Mode, there are
two RF connectors (labeled RF1 and RF2) that carry six QAM channels per
RF connector totaling twelve channels per module.
On a single Quad-Port QAM Module (QPM 8DX4), there are four indepen-
dent RF connectors that carry eight QAM channels per RF connector for a
total of 32 QAM channels per module.
Format, annex, inter-leaver, frequency, symbol rate, power and spectral
inversion are associated to a single port but are configured on an RF
connector basis.
The ports are listed as Modulator Group 1 and 2 for each QAM slot <1 -
6>. For example, the equivalent CLI command interface QAM 1/1.2,
addresses the second QAM channel on the first RF connector of the QAM
module in slot 1. This correlates to the QAM Mod 1 tab, Modulator Group
Port 1 and the second channel for each associated tab under the QAM
configuration menu.
All QAM channels are set to quad mode and disabled by default to prevent
any QAM channels from interfering with existing cable channel admin state
checkboxes on the QAM submenu tabs, disabling or enabling a QAM
channel.
WARNI NG
Changing the video annex through the web page will force hardware
reconfiguration and a status web page will report progress of this task.
During the reconfiguration no RF output appears on the RF Connector.
Procedure 7-7 From the Configure > Output drop-down menus, launch the
QAM Port Modulation Setup for QAM X screen.
1 From the QAM Module configuration tree, click the Modulator link (in the
QAM cards configuration tree) for the QAM you want to configure.
2 In the QAM box, select the Annex type.
NOTE
If you plan to run in hex or octal mode, select Annex B.
3 Click Up for the Admin State and Click Apply Changes to QAM X.
Figure 7-15: Initial QAM Configuration Screen
1
2
3
In the Modulator Groups (Port 1 and Port 2), a few key elements have
changed with the introduction of the Quad-Port QAM Module (QPM 8DX4)
(see red circled items).
Figure 7-16: QAM Configuration Screen
4 To configure frequencies via EIA Channels, select the desired RF Settings
Mode in the Attributes column to EI A Channel mode and specify the
required Channel in the EIA Channel field.
5 To configure frequencies manually, set the RF Settings Mode to
Frequency and enter the required frequency in the Frequency (Hz)
field.
6 Set the QAM Power (dBmV) using the chart in center of screen.
7 Select the QAM modulation type.
8 Select the I nterleaver type
9 Select the Channel-mode type.
10 Enter the channel spacing in the Channel Width (Hz) field.
11 Repeat steps 4-12 to configure the remaining ports.
12 Click Apply Changes
13 Select On for the RF Output and click Apply.
End of procedure
Enabling the Dual WAN
When both WAN cards are installed and configured with QAM cards in Dual
WAN mode, the D5 UEQ functions as two logically-independent systems.
Dual WAN mode is disabled by default to provide a seamless upgrade path
for in-service D5 UEQ systems. All QAMs are assigned to the WAN in slot
7 when the system is initially loaded.
The Dual WAN Configuration page has been added to the D5 UEQ Web
Manager for each WAN card.
NOTE
You must first configure WAN 7 and its associated QAM slots.
Procedure 7-8 From the Configure > Dual-WAN to launch the Dual WAN
1 Select Enabled in the Dual-WAN Support drop list.
2 For each QAM card, click the toggle button for the WAN card you want to
manage the card.
3 Click the Apply Changes push-button.
4 When the Dual WAN feature is enabled, the QAM assignments are shown
as part of the Line Card Status page. This can be display by going to:
Monitor -> Line Card Status. Any QAMs assigned to the other WAN
card will appear grayed out.
End of procedure
The Release 3.0 uses separate configuration data for WAN-7 and WAN-8.
/update/startup-configuration, for WAN-7
/update/wan2/startup-configuration, for WAN-8
Ideally, slot assignment data would be stored in the startup-config-
uration file; however, with the two configuration files, a new file had
to be created to store the slot assignments for each WAN to avoid
conflicting data.
Dual-WAN slot assignments are stored in the /update/slotAssign-
ments file on the compact flash.
Changes in slot assignments are saved when issued and are immediately
persistent across restarts and power cycles.
Enabling an Ethernet Interface
The Network Configuration screen utilizes the Ethernet Management Ports
configure box to configure FastEthernet management ports for manage-
ment access, speed and to assign a duplex mode. The primary, mask and
broadcast IP addresses for the management ports are also configured
here.
The DHCP Client Management configure box is used to configure DHCP
management on the specified interface. The Static Routing Table
configure box is used to add and delete static routing tables.
WARNI NG
An improperly entered configured management port or an improperly
added static route will disable access to the HTTP interface as well as
connectivity to the management port.
Figure 7-17: Ethernet Configuration Screen
Procedure 7-9 From the Configure > Network drop-down menu, navigate to I P
Management to launch the Network Configuration screen.
1 Check the Up in the Desired Admin State box.
2 Enter the Primary I P address, Netmask and Broadcast I P address
in their associated fields.
3 Check the Management Access box for the desired FE port.
4 If using DHCP Client Management on the FE port, select the desired
DHCP client interface in the box on the right. If not using DHCP, continue
with Steps 6-10. If not, skip to the add static route procedure.
5 Enter the Domain Name, the Primary Name Server and the
Secondary Name Server in the Domain Name Server section. Select
the number of attempts in the Retries drop down menu. Valid range is 1-
10.
CAUTI ON
Setting up the Default Gateway -- The next steps are crucial to get the D5
UEQ reachable over the IP network. The box will not function properly if
this is not done correctly.
6 To set the Default Gateway, click Add in the Static Routing Table.
7 Enter 0.0.0.0 in the Destination IP address field.
8 Enter 0.0.0.0 in the Prefix Mask field.
9 Enter the default gateway address in the Forward Router I P address
field.
10 Click Apply Changes.
End of procedure
Logging Out of the Web Manager
To logout of the Web Manager click the logout button (see Figure 7-9, Web
Manager Main Menu Components, on page 7-17) from any screen. After
clicking the OK button on the verification box, the Web Manager will return
to the login page.
8. Video on Demand
Topics Page
Video on Demand 1
UDP Port Management 2
Configuring Port and Program Number Mappings 8
Configuring Simultaneous Ports 9
Configure Ports Per I P Address 9
Override Previously Mapped Program Number 9
Map an I P Multicast to a QAM channel 9
VoD Show Commands 11
Video on Demand
The D5 UEQ renders MPEG-2 transport streams over UDP port assign-
ments efficiently by utilizing a default UDP port mapping scheme (see
Table 2.1). This allows a user to quickly deliver video, by simply entering
the D5 UEQs UDP port numbers on the VoD server. The D5 UEQ takes care
8 Video on Demand
of the details of transporting the MPEG-2 video to the appropriate QAMs.
The following diagram illustrates how a VoD server sends SPTS streams to
STB devices, via the D5 UEQ, using MPEG over UDP.
Figure 8-1: VoD Server, Multiple MPEG TS over UDP to STB
UDP Port Management
Individual transport streams are received on individual UDP ports,
however, multiple transport streams can be received on the same UDP-
port provided that the IP addresses are different when static rules are
configured on a QAM channel, given unique program numbers. The UDP
port number is used to identify which QAM channel to transmit the stream
on, as well as the program number to use when transmitting it. The D5
UEQ employs various techniques for mapping UDP ports to program
numbers including a default mapping. This default mapping can be over-
ridden to map any UDP port to any program number and/or QAM channel.
Default UDP Port Mapping The LEGACY default UDP port mapping supports a mixture of 2x4 or 2x6
modes with 127 UDP ports per QAM channel. The NEW default UDP port
mapping scheme will support a mixture of DPM 4DX2 and DPM 6DX2
modules with 63 UDP ports per QAM channel. The LEGACY scheme is
turned on by default on upgrade from an older software version (Table 8-
Step 2: MPEG-2 SPTS sent
to D5 UEQ over UDP via
GigE switch.
Step 3: D5 UEQ maps MPEG-2
SPTSs to QAM channels and sends
streams to network.
ARRIS D5 Universal Edge QAM
Step 1: VoD Server assigns
MPEG-2 SPTS (movie) to
UDP ports.
220 MHz
350 Mhz
200 MHz
RF Serving
Area #1
RF Serving
Area #2
RF Serving
Area #3
1). New installations will default to the NEW default UDP port mapping
scheme (Table 8-2). The UDP port numbers are not tied to a specific QAM
module. They are assigned to a QAM module depending on what slot in
the D5 UEQ chassis the module occupies.
LEGACY Default UDP Port
Mappings
The following table identifies the LEGACY (old) default port mapping of
UDP port numbers to slot numbers in the chassis. The <A>X<B> notation
indicates the number of RF ports per card <A> and the number of QAM
channels per RF port <B>.
NOTE
The first UDP port in each range maps to program number 0 (zero) and is
therefore only applicable if pass-thru mode is enabled on the QAM.
Table 8-1: LEGACY Default UDP Port Mappings
2X4 / 2X6 / 2X8 LEGACY
.1 .2 .3 .4 .5 .6 .7 .8
QAM 1/1
49152-
49279
49280-
49407
49408-
49535
49536-
49663
50176-
50303
50304-
50431
50432-
50559
50560-
50687
QAM 1/2
49664-
49791
49792-
49919
49920-
50047
50089-
50175
50688-
50815
50816-
50943
50944-
51071
51072-
51199
QAM 2/1
51200-
51327
51328-
51455
51456-
51583
51584-
51711
52224-
52351
52352-
52479
52480-
52607
52608-
52735
QAM 2/2
51712-
51839
51840-
51967
51968-
52095
52096-
52223
52736-
52863
52864-
52991
52992-
53119
53120-
53247
QAM 3/1
53248-
53375
53376-
53503
53504-
53631
53632-
53759
54272-
54399
54440-
54527
54528-
54655
54656-
54783
QAM 3/2
53760-
53887
53888-
54015
54016-
54143
54144-
54271
54784-
54911
54912-
55039
55040-
55167
55168-
55295
QAM 4/1
55296-
55423
55424-
55551
55552-
55679
55680-
55807
56320-
56447
56448-
56575
56576-
56703
56704-
56831
QAM 4/2
55808-
55935
55936-
56063
56064-
56191
56192-
56319
56832-
56959
56960-
57087
57088-
57215
57216-
57343
QAM 5/1
57344-
57471
57472-
57599
57600-
57727
57728-
57855
58368-
58495
58496-
58623
58624-
58751
58752-
58879
QAM 5/2
57856-
57983
57984-
58111
58112-
58239
58240-
58367
58880-
59007
59008-
59135
59136-
59263
59264-
59391
QAM 6/1
59392-
59519
59520-
59647
59648-
59775
59776-
59903
60416-
60543
60544-
60671
60672-
60799
60800-
60927
QAM 6/2
59904-
60031
60032-
60159
60160-
60287
60288-
60415
60928-
61055
61056-
61183
61184-
61311
61312-
61439
8 Video on Demand
NEW Default UDP Port
Mappings
The following table identifies the NEW default port mapping scheme. The
<A>X<B> notation indicates the number of RF ports per card <A> and
the number of QAM channels per RF port <B>.
NOTE
The first UDP port in each range maps to program number 0 (zero) and is
therefore only applicable if pass-thru mode is enabled on the QAM.
Table 8-2: NEW Default UDP Port Mappings
2X4 / 2X6 / 2X8 / 4X8 New
.1 .2 .3 .4 .5 .6 .7 .8
QAM 1/1
32768-
32831
32832-
32895
32896-
32959
32960-
33023
33024-
33087
33088-
33151
33152 -
33215
33216-
33279
QAM 1/2
33792-
33855
33856-
33919
33920-
33983
33984-
34047
34048-
34111
34112-
34175
34176 -
34239
34240 -
34303
QAM 1/3
34816 -
34879
34880 -
34943
34944 -
35007
35008 -
35071
35072 -
35135
35136 -
35199
35200 -
35263
35264 -
35327
QAM 1/4
35840 -
35903
35904 -
35967
35968 -
36031
36032 -
36095
36096 -
36159
36160 -
36223
36224 -
36287
36288 -
36351
QAM 2/1
36864-
36927
36928-
36991
36992-
37055
37056-
37119
37120-
37183
37184-
37247
37248 -
37311
37312 -
37375
QAM 2/2
37888-
37951
37952-
38015
38016-
38079
38080-
38143
38144-
38207
38208-
38271
38272 -
38335
38336 -
38399
QAM 2/3
38912 -
38975
38976 -
39039
39040 -
39103
39104 -
39167
39168 -
39231
39232 -
39295
39296 -
39359
39360 -
39423
QAM 2/4
39936 -
39999
40000 -
40063
40064 -
40127
40128 -
40191
40192 -
40255
40256 -
40319
40320 -
40383
40384 -
40447
QAM 3/1
39060-
41023
41024-
41087
41088-
41151
41152-
41215
41216-
41279
41280-
41343
41344 -
41407
41408 -
41471
QAM 3/2
41984-
42047
42048-
42111
42112-
42175
42176-
42239
42240-
42303
42304-
42367
42368 -
42431
42432 -
42495
QAM 3/3
43008 -
43071
43072 -
43135
43136 -
43199
43200 -
43263
43264 -
43327
43328 -
43391
43392 -
43455
43456 -
43519
QAM 3/4
44032 -
44095
44096 -
44159
44160 -
44223
44224 -
44287
44288 -
44251
44252 -
44415
44416 -
44479
44480 -
44543
QAM 4/1
45056-
45119
45120-
45183
45184-
45247
45248-
45311
45312-
45375
45376-
45439
45440 -
45503
45504 -
45567
QAM 4/2
46080-
46143
46144-
46207
46208-
46271
46272-
46335
46336-
46399
46400-
46463
46464 -
46527
46528 -
46591
QAM 4/3
47104 -
47167
47168 -
47231
47232 -
47295
47296 -
47359
47360 -
47423
47424 -
47487
47488 -
47551
47552 -
47615
CLI Controls If you are upgrading your software from Release 2.6, you will end up with
the same default UDP-mapping scheme as you had with Release 2.6
(legacy). However, the legacy scheme is off by default on a new installa-
tion of software.
The default UDP mapping scheme can be controlled from the CLI with the
following commands while in configuration mode:
To enable the new default UDP-mapping scheme, use the following
command:
D5(conf)# video default-mapping-scheme udp
To enable the old legacy default UDP-mapping scheme, use the following
command:
D5(conf)# video default-mapping-scheme udp-legacy
To turn off the default-mapping-scheme, use the following command:
D5(conf)# no video default-mapping-scheme udp-legacy
NOTE
The legacy scheme can be turned on/off globally, but not on a per-QAM
basis because it would create overlapping port ranges resulting in
ambiguous UDP->QAM mappings. If LEGACY mode is turned on globally,
then turning on the default-mapping scheme within a QAM enables
legacy-mode mapping for that QAM rather than enabling the new
QAM 4/4
48128 -
48191
48192 -
48255
48256 -
48319
48320 -
48383
48384 -
48447
48448 -
48511
48512 -
48575
48576 -
48639
QAM 5/1
49152-
49215
49216-
49279
49280-
49343
49344-
49407
49408-
49471
49472-
49535
49536 -
49599
49600 -
49663
QAM 5/2
50176-
50239
50240-
50303
50304-
50367
50368-
50431
50432-
50495
50496-
50559
50560 -
50623
50624 -
50687
QAM 5/3
51200 -
51263
51264 -
51327
51328 -
51391
51392 -
51455
51456 -
51519
51520 -
51583
51584 -
51647
51648 -
51711
QAM 5/4
52224 -
52287
52288 -
52351
52352 -
52415
52416 -
52479
52480 -
52543
52544 -
52607
52608 -
52671
52672 -
52735
QAM 6/1
53248-
53311
53312-
53375
53376-
53439
53440-
53503
53504-
53567
53568-
53631
53632 -
53695
53696 -
53759
QAM 6/2
54272-
54335
54336-
54399
54400-
54463
54464-
54527
54528-
54591
54592-
54655
54656 -
54719
54720 -
54783
QAM 6/3
55296 -
55359
55360 -
55423
55424 -
55487
55488 -
55551
55552 -
55615
55616 -
55679
55680 -
55743
55744 -
55807
QAM 6/4
56320 -
56383
56384 -
56447
56448 -
56511
56512 -
56575
56576 -
56639
56640 -
56703
56704 -
56767
56768 -
56831
8 Video on Demand
mapping scheme (e.g. D5(conf-qam-if)# video default-
mapping-scheme udp).
SNMP Controls The existing MPEG-MGR SNMP tables are largely unaffected by this
change. The addition of four extra channels per card simply means the
addition of extra row entries in the MIB tables.
Defacto Industry Standard
UDP Port Mapping
It is also possible to use an alternate mapping scheme for compatibility
with Harmonic
Edge QAMs. Under this scheme the QAM card is deter-

mined by the destination IP address rather than the UDP port. The QAM
channel and program number is determined by the UDP port, but the
calculation is not the same as for the default UDP mapping scheme.
The UDP port is used as outlined in Defacto Industry Standard UDP Port
Mapping (Decimal) on page 8-8. The scheme uses the following bitmap to
handle incoming UDP traffic where the IP address is used to identify the
particular QAM-card.
Figure 8-2: NSG Port Mapping Scheme
As shown in the diagram above, the NSG port-mapping scheme, by its very
nature, supports no more than eight channels per QAM card. The lowest
bit corresponds to the lowest number QAM channel on the card. The next
higher bit corresponds to the next higher number QAM channel on the card
and so on. The mapping of the bits to QAM channel is outlined in the
following table.
QAM Channel Program Number
....
Q
A
M

7
15 7 0 8
Q
A
M

8
Q
A
M

6
Q
A
M

1
....
NSG
I dentifier
D5 UEQ
Channel I dentifier
Quad-Mode
D5 UEQ
Channel I dentifier
Hex-Mode
QAM 1 X/1.1 X/1.1
QAM 2 X/1.2 X/1.2
QAM 3 X/1.3 X/1.3
QAM 4 X/1.4 X/1.4
QAM 5 X/2.1 X/2.1
Mapping
The defacto industry standard mapping can be configured on a per Gigabit
interface basis as shown in the following command:
D5# configure terminal
D5(config)# interface gigabitethernet 0/1
D5(config-gig-if)# ip address 192.168.250.74
255.255.255.0
D5(config-gig-if)# video emulation-mode bitwise 6
D5(config-gig-if)# no shutdown
D5(config-gig-if)# exit
The number of IP addresses on the CLI command line can be configured
with a value between 1 and 6. A value of 1 means that only one IP address
is created for NSG mode which effectively restricts NSG mode support in
this Gigabit interface to the QAM card in slot 1.
These commands assign IP address 192.168.250.74 to the Gigabit
Ethernet interface and set up six new IP addresses for NSG mode with
contiguous IP addresses offset from the primary interface IP address. With
this configuration, the primary IP interface (IP address 192.168.250.74)
uses the default UDP port mapping scheme but the six additional IP
addresses (192.168.250.75 through 192.168.250.80) use the NSG based
UDP port mapping scheme. In other words, traffic received on
192.168.250.75 is mapped to the QAM card in slot 1; 192.168.250.76 is
mapped to QAM card in slot 2, etc. For example, an SPTS sent to
192.168.250.76:259 is mapped using the NSG scheme to QAM 2/1.1
program 3. It is possible to transmit multiple SPTSs to the primary inter-
face IP address using the default UDP port mapping scheme to a particular
QAM channel while concurrently transmitting SPTS to the same QAM
channel using the NSG based UDP port mapping scheme, so long as the
output program numbers do not clash.
QAM 6 X/2.2 X/2.2
QAM 7 X/2.3 X/2.3
QAM 8 X/2.4 X/2.4
NSG
I dentifier
D5 UEQ
Channel I dentifier
Quad-Mode
D5 UEQ
Channel I dentifier
Hex-Mode
8 Video on Demand
UDP Port Mapping (Decimal)
NOTE
You can also use the hexadecimal table. The hexadecimal fields indicate
the values of the least-significant-byte in the UDP port, which is combined
with the most-significant-byte to address the QAM channel and program.
UDP Port Mapping
Hexadecimal
Configuring Port and
Program Number Mappings
The default UDP port mapping can be overridden to assign specific UDP
ports to programs on a given QAM channel. The command syntax is as
follows:
[no] video udp <> [src-ip <>] [dest-ip <>] program <1-
65535> [use <even | sequential> <1-127>]
For example, by default UDP port 49154 is assigned to QAM 1/1.1 Program
Number 2. However, the following commands assign this port to QAM
1/1.3 and the Program Number remains the default 2 for this port.
D5(config)# interface qam 1/1.3
D5(config-subif)# video udp 49154 program 2
.1 .2 .3 .4
First
PN0
Last
PN255
First
PN0
Last
PN255
First
PN0
Last
PN255
First
PN0
Last
PN255
QAM X/1 256 511 512 767 1024 1279 2048 2303
QAM X/2 4096 4351 8192 8447 16384 16639 32769 33023
.1 .2 .3 .4
First
PN1
Last
PN127
First
PN1
Last
PN127
First
PN1
Last
PN127
First
PN1
Last
PN127
QAM X/1 0101 01ff 0201 02ff 0401 04ff 0801 08ff
QAM X/2 1001 10ff 2001 20ff 4001 40ff 8001 80ff
Configuring Simultaneous
Ports
It is also convenient to configure several ports at once, for example, RTP
always uses even port numbers (the associated RTCP flow is carried on the
odd port number). It is possible to configure 10 even number ports from
49154 through 49172 to QAM 1/1.3 with the following commands
D5(config)# interface qam 1/1.3
D5(config-subif)# video udp 49154 program 22 use even 10
The Program Numbers used for these would be 22, 23.31. The odd
ports, 49155 through 49171, are not remapped since they do not carry
SPTS streams, in the example they are carrying RTCP.
Configure Ports Per I P
Address
It is possible to perform configuration on a per IP address basis; this caters
for multiple VOD servers. For example, suppose there are two server
1.1.1.1 and 1.1.1.2. To map UDP port 49154 from the first server to QAM
1/1.3 use the following commands.
D5(config)#interface qam 1/1.3
D5(config-subif)#video udp 49154 src-ip 1.1.1.1 program
10
Override Previously Mapped
Program Number
If traffic is received from server 1.1.1.2 then it is still mapped to the
default, QAM 1/1.1 program number 2. This, in turn, can be over-ridden
with the following, to assign it to program number 12 on QAM 1/1.3.
D5(config-subif)#video udp 49154 src-ip 1.1.1.2 program
12
Map an I P Multicast to a
QAM channel
Following is an example of mapping an IP multicast to a QAM channel.
D5(config-qam-if)#video udp 1111 dest-ip 230.1.0.11
program 12
D5#(config-qam-if)#exit
In this case, the output program number is not reserved. When a stream
is activated that gets matched to this static rule, the program number is
calculated dynamically. This is especially useful where SPTS pass-through
mode is in use on the QAM channel and it may not be desirable to static
8 Video on Demand
limit the UDP port to a specific program number. If SPTS pass-through is
disabled, the dynamic stream is remapped using the default remapping
scheme (e.g. the lower seven bits of the UDP port number are used to
calculate the output program number). This type of static rule can also be
used for IP addresses (e.g. to create a static rule mapping all video traffic
from 10.250.1.1 to QAM 1/1.3).
VoD Show Commands To monitor VoD settings, use the following show commands:
The show video session command displays information about video
streams.
D5(config)#show video session
UDP SRC- I P DEST- I P QAM / PI DS | PROGS
CONTAI NER TOTAL FI LTERED | TOTAL FI LTERED
49153 10. 19. 96. 132 10. 19. 96. 135 1/ 1. 1 3 0 | 1 0
49155 10. 19. 96. 132 10. 19. 96. 135 1/ 1. 1 3 0 | 1 0
49157 10. 19. 96. 132 10. 19. 96. 135 1/ 1. 1 3 0 | 1 0
Tot al s 9 0 | 3 0
D5( conf i g) #
The show video session verbose command displays information
about video streams and PID remapping information.
D5#show video sessions verbose
UDP 49153, I P 10. 19. 96. 132- >10. 19. 96. 135, I N- TSI D 15097, QAM 1/ 1. 1
St r eamact i ve f or ( hh: mm: ss) 00: 14: 24
Pr ogr am 1 - > 1 ( 00: 14: 24)
I N- PI D OUT- PI D
66- >80 ( PSI )
68- >81 ( PCR) ( 00: 14: 24)
69- >82 ( ES) ( 00: 14: 24)
UDP 49155, I P 10. 19. 96. 132- >10. 19. 96. 135, I N- TSI D 5992, QAM 1/ 1. 1
Pr ogr am 1 - > 3 ( 00: 13: 53)
I N- PI D OUT- PI D
66- >112 ( PSI )
68- >113 ( PCR) ( 00: 13: 53)
69- >114 ( ES) ( 00: 13: 53)
UDP 49157, I P 10. 19. 96. 132- >10. 19. 96. 135, I N- TSI D 2476, QAM 1/ 1. 1
Pr ogr am 1 - > 5 ( 00: 13: 07)
I N- PI D OUT- PI D
66- >144 ( PSI )
74- >145 ( PCR) ( 00: 01: 30)
75- >146 ( ES) ( 00: 01: 30)
TOTALS: 3 i ncomi ng t r anspor t st r eams
8 Video on Demand
3 i nput pr ogr ams passed t hr ough, 0 f i l t er ed
9 i nput PI DS passed t hr ough, 0 f i l t er ed
3 out put pr ogr ams
9 out put PI Ds, 0 f i l t er ed
The show interfaces qam x/y.z video command displays video
information on the specified QAM.
D5#show interfaces qam 1/1.1 video
QAM 1/ 1. 1:
St at us: enabl ed
Vi deo bandwi dt h: 38. 810700 Mbps
Annex: I TU- T/ J . 83/ B
Fr equency: 585000000 Hz
Power : 48. 0 dBmV
Modul at i on: 256 QAM
Cur r ent out put ut i l i zat i on: 50%,
St r eami ng vi deo f or t he l ast 31 mi nut es 35 seconds
Tr anspor t st r eamI D: 1, Net wor k I D: 500, Or i gi nal net wor k I D: 500
Net wor k name: " NewYor k"
NI T PI D 16
( P) SI Tx I nt er val s: PAT: 100, CAT: 100, PMT: 100, SDT: 250,
# of act i ve pr ogr ams: 3
- PAT- updat ed 00: 30: 18 ago ( pr evi ous updat e was 00: 31: 04 ago)
Ver si on 12 ( cur r ent )
Tr anspor t - st r eam- I D 1
Pr ogr am1, PMT- PI D 80, 3218 Kbps
( Sessi on UDP 49153, I P 10. 19. 96. 132- >10. 19. 96. 135, pr ogr am1)
- PMT- updat ed 00: 31: 35 ago
PCR- PI D i s 81
ES- PI D ES- TYPE
81 2
82 129
- PMT- updat ed 00: 15: 17 ago ( pr evi ous updat e was 00: 15: 19 ago)
PCR- PI D i s 113
ES- PI D ES- TYPE
113 2
114 129
- PMT- updat ed 00: 03: 10 ago ( pr evi ous updat e was 00: 07: 02 ago)
PCR- PI D i s 145
ES- PI D ES- TYPE
145 2
146 3
The show video sessions psi command displays SI information.
D5(config-qam-if)#show video session psi
UDP SRC- I P DEST- I P QAM/ CONTAI NER PAT I N- TSI D PMT( S)
49153 10. 19. 96. 132 10. 19. 96. 135 1/ 1. 1 v0 15097 1/ 1
49155 10. 19. 96. 132 10. 19. 96. 135 1/ 1. 1 v17 5992 1/ 1
49157 10. 19. 96. 132 10. 19. 96. 135 1/ 1. 1 v5 2476 1/ 1
The show interface qam command displays information about the
specified QAM.
D5(config-qam-if)#show interface qam 1/1.1
QAM 1/ 1. 1 i s up, l i ne pr ot ocol i s up
Har dwar e i s QAM_4DX2/ AG, addr ess i s 0000. caf e. 201e
Descr i pt i on: QAM 1/ 1. 1 - D5 MPEG Tr anspor t Channel
MTU 188 byt es, BW38810 Kbi t
Ser vi ng gr oup: Test Tom
FPGA mi cr ocode ver si on: 0. 0. 4. 23
Mi cr o- cont r ol l er mi cr ocode ver si on: 2. 1. 6. 0
Wi dt h: 6000000 Hz
Power : 48. 0 dBmV
Symbol Rat e: 5360537 symbol s/ s
FEC I nt er l eaver dept h I =128, J =4 ( l evel 2, mode 6)
Spect r al I nver si on: di sabl ed
5 mi nut es out put r at e 19320384 bi t s/ sec, 12846 packet s/ sec
8 Video on Demand
1271208903 packet s out put , 2764072484 byt es
0 excessi ve col l i si ons
0 l at e col l i si on, 0 def er r ed
0 l ost / no car r i er
The show interfaces command displays information about all network
interfaces.
D5(config-qam-if)#show interfaces
DTI st at us: f r eer unni ng, no por t act i ve, 10 MHz cl ock pr esent
DTI enabl ed, use por t 1, manual por t sel ect
f i r mwar e r evi si on 20
I nt er nal Management I nt er f ace
I P addr ess 169. 254. 0. 8/ 24
Encapsul at i on Tag: 4094
Por t - Channel 1 i s down, l i ne pr ot ocol i s down
Har dwar e i s FEChannel , addr ess i s 0000. CAFE. 20A7
No. of member s i n t hi s channel : 2
Member 1: Gi gabi t Et her net 0/ 1. 0 DOWN ACTI VE
Member 2: Gi gabi t Et her net 0/ 2. 0 DOWN ACTI VE
I P addr esses: None set
Encapsul at i on Tags: None Set
Por t Sel ect i on Cr i t er i a: Def aul t Set t i ng
0 packet s i nput , 0 byt es
Recei ved 0 br oadcast s, 0 gi ant s
0 i nput er r or s, 0 CRC, 0 f r ame
0 out put er r or s, 0 col l i si ons, 0 excessi ve col l i si ons
Loopback. 1 - Not At t ached
Subi nt er f ace i s admi n down
Pr i mar y I nt er net Addr ess not assi gned
Tot al I gmp St at i c Gr oups: 0
Fast Et her net 0/ 1 i s admi n up, l i ne pr ot ocol i s up
Har dwar e i s et her net , addr ess i s 0000. caf e. 20a6
Descr i pt i on: FE 0/ 1 - Management Et her net Por t
Subi nt er f ace i s up
Oper - St at e l ast changed on: Sat 03- J un- 2000 10: 13: 36
I ngr ess management t r af f i c al l owed
Pr i mar y I nt er net Addr ess 10. 43. 210. 11/ 24
Ful l - dupl ex, 100Mb/ s
Out put queue 0 dr ops; i nput queue 0 dr ops
5 mi nut es i nput r at e 3037 bi t s/ sec, 4 packet s/ sec
Recei ved 0 br oadcast s 0 mul t i cast s, 0 gi ant s
0 out put er r or s, 0 col l i si ons
Gi gabi t Et her net 0/ 1 i s admi n up, l i ne pr ot ocol i s down - Not At t ached
Har dwar e i s et her net , addr ess i s 0000. caf e. 20a7
SFP i s FI NI SAR CORP. model FCMJ - 8521- 3
Descr i pt i on: GE 0/ 1 - Gi gabi t Et her net SFP Por t
Channel Gr oup 1
I ngr ess management t r af f i c al l owed
Pr i mar y I nt er net Addr ess 10. 17. 42. 170/ 24
2 NSG- compat i bl e I P addr esses 10. 17. 42. 171 . . . 10. 17. 42. 172
Ful l - dupl ex, 1000Mb/ s
Out put queue 0 dr ops; i nput queue 0 dr ops
5 mi nut es i nput r at e 0 bi t s/ sec, 0 packet s/ sec
Recei ved 0 br oadcast s 0 mul t i cast s, 0 gi ant s
0 out put er r or s, 0 col l i si ons
8 Video on Demand
QAM 1/ 1. 1 i s up, l i ne pr ot ocol i s up
Har dwar e i s QAM_4DX2/ AG, addr ess i s 0000. caf e. 1f 16
Descr i pt i on: QAM 1/ 1. 1 - D5 MPEG Tr anspor t Channel
Er mMappi ng: name
RPC SDV Pr i mar y I nput : Gi gabi t Et her net 0/ 1
FPGA mi cr ocode ver si on: 0. 0. 4. 23
Mi cr o- cont r ol l er mi cr ocode ver si on: 2. 1. 6. 0
Wi dt h: 6000000 Hz
Power : 44. 0 dBmV
Symbol Rat e: 5360537 symbol s/ s
FEC I nt er l eaver dept h I =128, J =4 ( l evel 2, mode 6)
Spect r al I nver si on: di sabl ed
DTI Of f set : 0
9. Digital Video Broadcast
Topics Page
Overview 1
Handling SI Table Streams, I njection and Configuration 2
SI Table Editing with the PSI Wizard 6
PSI G<>Configuration & Monitoring 7
PSI Table Auto-Generation 9
SPTS Pass-Through 11
MPTS Pass-Through 13
Handling Pre-scrambled Content 15
Video Session PSI Show Command 16
Overview
In the Digital Video Broadcast (DVB) hierarchy, most services are received
from a satellite at a central headend and scrambled centrally. Each service
is then distributed to each regional headend as a single program transport
stream (SPTS) over IP Multicast. EPG and SI tables are generated centrally
as well and distributed to each regional headend over IP multicast.
The D5 UEQ can also insert services locally and then scramble and multi-
plex (MUX) them with services received from the central headend prior to
transmission over radio frequency (RF). Each regional headend will typi-
cally deliver 60 to 120 services.
In a broadcast scenario, the D5 UEQ is much more static than it is when
distributing Video on Demand (VoD). That is because the service line-up,
Packet Identifier (PID) usage and most PSI/SI tables are static.
Figure 9-1: Example of DVB Hierarchy
Handling SI Table Streams, Injection and Configuration
DVB-SI tables play an important role in the DVB environment. There are
two methods of inserting SI tables into the D5 UEQ. One is by utilizing the
D5 UEQ Application Manager to create, edit and inject these tables into the
D5 UEQ. The second method is to stream dynamic tables into the D5 UEQ
Central Headend
Satellite
IRD
CAS Server
Grooming
Transrating
Encoding
IP Network
EPG Server
Scrambler
Unscrambled SPTS
SI Tables
I P Multicast
SI Tables
I P Multicast
Scrambled SPTS
I P Multicast
Scrambled SPTS
I P Multicast
Regional Headend #1
D5 UEQ
Scrambled SPTS
QAM RF
Local content
Unscrambled SPTS
Regional Headend #2
D5 UEQ
Scrambled SPTS
QAM RF
Local content
Unscrambled SPTS
ASI Network
delivered as MPEG frames encapsulated in UDP packets. They may be
delivered via IP multicast or unicast into each QAM channel from an
external SI table application server where the PAT tables are sent on the
standard-PID (0).
The commands necessary to allow QAM channels to be configured to
handle incoming SI streams are all based on the program number remap
command. This allows the SI stream to be classified by any combination
of source IP address, destination IP address and UDP port and as shown
in the following example:
Procedure 9-1 QAM Setup for SI Table Streams
1 To configure SI table streams, enter the QAM subinterface mode.
2 Configure a QAM channel and a video UDP port as well as a destination IP
address.
D5(config-qam-if)#video udp 5000 src-ip N.N.N.N dest-ip
10.250.24.51 si-stream
End of procedure
In the following example, the IP address 10.250.24.51 is the IP address of
the gigabitEthernet port on the D5 UEQ and N.N.N.N is the IP address of
the server generating the SI stream and allows the SI stream to be classi-
fied by UDP port plus a source IP address and/or a destination IP address.
Note the SI stream for QAM 6/1.1 is configured to be from N.N.N.N to
10.250.24.51 on UDP port 5000:
D5(config-qam-if)#video udp 5000 src-ip N.N.N.N dest-ip
10.250.24.51 si-stream
The SI table injection Show commands clearly indicate the incoming trans-
port streams that are being handled as SI streams. The following
commands will generate the same output format to indicate the SI
streams.
D5#show video session
D5#show interface qam 6/1.1 video session
D5#show video udp 5000 session
D5#show video udp 5000 dest-ip 10.250.24.51 session
D5#show video udp 5000 src-ip N.N.N.N dest-ip
10.250.24.51 session
D5#show video session
The output would look similar to:
UDP SRC- I P DEST- I P TSI D PI DS | PROGS
TOTAL FI LTERED | TOTAL FI LTERED
59393 10. 250. 24. 61 10. 250. 24. 51 25101 3 0 | 1 0
59394 10. 250. 24. 61 10. 250. 24. 51 25101 3 0 | 1 0
5000 N. N. N. N 10. 250. 24. 51 1234/ SI 0 0 | 0 0
Tot al s 6 0 | 2 0
The show video si-stream command will list all SI streams.
UDP SRC- I P DEST- I P TSI D PI DS | PROGS
TOTAL FI LTERED | TOTAL FI LTERED
5000 N. N. N. N 10. 250. 24. 51 1234/ SI 0 0 | 0 0
Tot al s 0 0 | 0 0
Table 9-1: SI Table Streams Commands
Command Description
[no] video udp <port> src-
ip <ip> dest-ip <ip> si-
stream
This command is applicable only when in QAM Channel Sub-interface
Configuration mode. It is an extension of the existing video UDP
commands and specifies an incoming stream that is to be treated as an
SI-stream for a QAM channel. The [no] version of this command will
remove the configuration and restore the default behavior, where the
stream is again treated as a regular service stream.
show video si-stream
This command is available in Privilege EXEC mode and will display all SI
streams that are currently being received by the D5 UEQ.
The output from the Show Video Session PSI command and all its deriva-
tives takes into account the fact that no table processing is being done on
PSI tables in these streams.
Show command derivatives:
D5#show video session psi
D5#show video udp 5000 session psi
D5#show interface qam 6/1.1 video session psi
UDP SRC- I P DEST- I P STATUS QAM PAT PMT( S)
59393 10. 250. 24. 61 10. 250. 24. 51 act i ve 6/ 1. 1 v27 1/ 1
5000 N. N. N. N 10. 250. 24. 51 act i ve 6/ 1. 1 n/ a n/ a
Show command verbose derivatives:
D5#show video session psi verbose
D5#show video udp 5000 session psi verbose
D5#show interface qam 6/1.1 video session psi verbose
UDP 59393, I P 10. 250. 24. 61- >10. 250. 24. 62, STATUS ' Act i ve' , QAM 6/ 1. 1
- SI t abl e st r eam, PSI t abl es cur r ent l y not avai l abl e
- PAT- r ecei ved 02: 06: 42 ago
Pr ogr am1, PMT- PI D 66
- PMT- r ecei ved 01: 40: 25 ago ( pr evi ous ver si on was r ecei ved 02: 06: 42 ago)
PCR- PI D i s 98
ES- PI D ES- TYPE FI LTERED
98 2 -
99 3 -
1 pr ogr ams passed t hr ough, 0 f i l t er ed
2 el ement ar y- st r eams passed t hr ough, 0 f i l t er ed
The show video portmap commands indicate SI table streams.
D5#show interface qam 6/1.1 video portmap
QAM 6/ 1. 1:
UdpPor t 5000 ( 0x1388) - > SI st r eam
UdpPor t 59393 ( 0xe801) - > QAM pr ogr am1
SI Table Editing with the PSI Wizard
The D5 UEQ provides the ability to edit and configure simple static SI
tables using the Application Manager (see the D5 UEQ Application
Manager) to edit the tables. This feature is called the PSI Wizard. It
supports the creation, import/export and storage of the following eight
table types:
PAT
PMT
CAT
SDT-Actual
SDT-Other
NIT
TOT
TDT
Table injection is done via the PSIG<=>MUX interface. The PSI Wizard will
allow the user to create a PSIG interface on the D5 UEQ to accept table
injection from a dedicated host (source IP Address) or from any host. It
also allows the user to configure the QAM channel video attributes to auto-
inject or force inject plus set transmission intervals.
NOTE
Although the TDT and the TOT tables are not actually static tables (as
they contain current system time and need to be periodically updated),
the D5 UEQ handles them internally as static tables and updates them
automatically.
PSIG<>Configuration & Monitoring
The configuration of (P)SIG clients on the D5 UEQ is very similar to config-
uring EIS clients (see Chapter 12, Conditional Access). Multiple PSIGs can
be configured, each with a unique name.
Procedure 9-2 PSI G Configuration
A basic CAS (P)SIG configuration might be as follows where:
PSIG 1 = IP address 192.168.250.24 port 2000
PSIG 2 = port 2001
1 Configure PSIG called ArrisPSIG1:
(config)#video psig ArrisPSIG1
2 Enable the PSIG interface with the following command:
(config-psig)#no shutdown
3 Set up the IP address 192.168.250.100 and port number 2000:
(config-psig)#ip address 192.168.250.100
(config-psig)#port 2000
4 Exit the configuration to save:
(config-psig)#exit
5 Set up the PSIG called ArrisPSIG2 with the following command:
6 Save the configuration
7 Assign the port number 2001:
8 Exit the configuration to save:
(config-psig)#exit
End of procedure
Procedure 9-3 PSIG Client Deletion
1 To delete the previously configured PSIGs use the following command:
D5#(config)# no video psig [<name>]
2 To display the currently configured client, use the following command:
D5# show video psig [<name>]
End of procedure
Other useful PSIG commands include:
D5# clear video psig active sections
Deletes all current PSIG output tables being transmitted on the QAM chan-
nels.
D5# show video psig active sections
Displays all current PSIG output tables being transmitted on the QAM
channels.
Table 9-2: PI SG <> MUX Command Set
Table 9-3:
Command Description
[no] video psig
<name>
This command is applicable only in configuration mode. It will create an instance
of a (P)SIG with the associated name if it does not already exist and will cause
the CLI to enter (P)SIG configuration mode.
[no] ip address <ip>
This command is available only in the (P)SIG configuration mode and assigns a
source IP address to the (P)SIG. The D5 UEQ will only accept connections from
that IP address for the given (P)SIG. The no version of the command will delete
the assigned IP address.
[no] port <port>
This command is available only in the (P)SIG configuration mode and assigned
a destination TCP port to the (P)SIG. The D5 UEQ will listen on that port for
incoming (P)SIG connections. The no version of the command will delete the
assigned TCP port.
[no] shutdown
This command is available on in the (P)SIG configuration mode. This will cause
the (P)SIG configuration to be put into an administratively down state. In this
state the D5 UEQ will refuse connection attempts. The no version of the
command will put the (P)SIG configuration in an administratively up state.
show video psig
[<name>]
These commands are available in Privilege mode and will display the
configuration of a given (P)SIG when the optional name is specified, or will
display that of all (P)SIGs when the optional name is omitted.
PSI Table Auto-Generation
By default, the D5 UEQ generates PSI tables automatically for each QAM
channel MPTS. Some broadcast applications will inject the PSI tables stat-
ically. To accommodate, the D5 UEQ will allow the automatic generation
of PSI tables to be enabled and disabled. Since it is possible to enable and
disable the generation of output PSI tables on a per-QAM basis, or globally,
the following table defines the rules for the possible configurations.
NOTE
Care should be taken when using video generate-psi/si commands so that
the setting does not cause duplicate PSI/SI tables to be transmitted
downstream. Duplicate tables may cause customer set-top boxes to crash
or experience loss of service.
The [no] video generate-psi command is applicable in QAM
Channel (Sub-interface) Configuration mode as well as Global
Configuration mode. When applied globally, these commands will apply to
all QAM channels where no previous setting was applied. If enabled or
disabled on a specific QAM channel, it will turn on/off the automatic
generation of PSI tables on the specified channel and will override any
global setting. To disable PSI table generation, use the no version of the
command.
Procedure 9-4 Configuring And Monitoring PSI Table Generation
These commands allow a user to configure automatic PSI generation glob-
ally or on a per QAM basis. The configuration at the QAM level takes
priority over the global configuration setting:
Global
Configuration
QAM Channel
Configuration
PSI Generation
on QAM Channel
video generate-psi Unset On
video generate-psi video generate-psi On
video generate-psi [no] video generate-psi Off
[no] video
generate-psi
Unset Off
[no] video
generate-psi
video generate-psi On
[no] video
generate-psi
[no] video generate-psi Off
1 To enable auto-generation of PSI tables CAT, PAT and PMT, use the
following command:
D5(config)#video generate-psi
2 To disable auto-generation of PSI table CAT, PAT and PMT, use the
following command:
D5(config)#no video generate-psi
3 To enable auto-generation of PSI table CAT, PAT and PMT per QAM, use
the following commands:
D5(config-qam-if)#video generate-psi
4 To disable auto-generation of PSI table CAT, PAT and PMT per QAM, use
the following command:
D5(config-qam-if)#no video generate-psi
End of procedure
PSI Table Generation Show
Command Set
The output from the show i nt er f ace qamx/ y. z vi deo command will
indicate when automatic PSI table generation has been disabled for a QAM
channel.
D5#show interface qam 6/1.1 video
QAM 6/ 1. 1:
St r eami ng vi deo f or t he l ast 2 hour s 22 mi nut es 22
seconds
Tr anspor t st r eamI D: 103, Net wor k I D: 4369, Or i gi nal
net wor k I D: 4370
Net wor k name: " D5NET"
NI T PI D 16
( P) SI Tx I nt er val s: PAT: 100, PMT: 100, NI T: 250, SDT:
250
Aut omat i c PSI Tabl e gener at i on di sabl ed
St at us: enabl ed
Power : 50 dBmV
- PAT- updat ed 02: 22: 22 ago
( Sessi on UDP 59393, I P 10. 250. 24. 61- >10. 250. 24. 62)
- PMT- updat ed 00: 12: 07 ago ( pr evi ous updat e was
01: 56: 05 ago)
PCR- PI D i s 81
ES- PI D ES- TYPE
81 2
82 3
SPTS Pass-Through
In SPTS pass-through operating mode the D5 UEQ will not remap PIDs
and will not remap program numbers. It also does not automatically pass-
through all defined DVB-SI PIDs, rather it merely processes PSI tables in
the REMUX mode since the incoming SPTSs have been lined-up in such a
manner that they will not cause overlapping PID and program numbers.
SPTS pass-through mode is configured either on a per-QAM channel basis
or globally. SPTS pass-through mode uses any configured or default
mapping rules when determining the destination QAM channel for an
incoming SPTS.
The MPEG Manager will reject an incoming SPTS when it determines that
there is a PID or program number conflict caused by overlapping PIDs or
program numbers. An SNMP event is generated when this occurs.
The MPEG Manager performs PSI table processing normally when in SPTS
pass-through mode. PMT tables are generated by the MPEG Manager as
in the REMUX mode.
Video Pass-through Automatic PSI generation can also be configured globally or on a per QAM
basis. The configuration at the QAM level takes priority over the global
configuration setting. The video pass-through command is configured at the
QAM sub-interface level for SPTS pass through.
When applied globally these commands will apply to all QAM channels
where no previous setting was applied
Show Command Set The output from the show interface qam x/y.z video command will indicate
when video pass-through has been enabled for a QAM channel.
D5#show interface qam 6/1.1 video
QAM 6/ 1. 1:
St r eami ng vi deo f or t he l ast 2 hour s 22 mi nut es 22
seconds
Tr anspor t st r eamI D: 103, Net wor k I D: 4369, Or i gi nal
net wor k I D: 4370
Net wor k name: " D5NET"
NI T PI D 16
( P) SI Tx I nt er val s: PAT: 100, PMT: 100, NI T: 250, SDT:
250
Aut omat i c PSI Tabl e gener at i on di sabl ed
SPTS Pass- t hr ough cur r ent l y enabl ed
St at us: enabl ed
Power : 50 dBmV
- PAT- updat ed 02: 22: 22 ago
( Sessi on UDP 59393, I P 10. 250. 24. 61- >10. 250. 24. 62)
- PMT- updat ed 00: 12: 07 ago ( pr evi ous updat e was
01: 56: 05 ago)
PCR- PI D i s 81
ES- PI D ES- TYPE
81 2
82 3
MPTS Pass-Through
In the case of MPTS pass-through, DVB-SI information is simply forwarded
through the D5 UEQ. The D5 UEQ supports MPTS IP streams in a limited
form, by allowing the operator to configure a QAM channel and dedicate it
to a particular input stream, which may be an MPTS.
Figure 9-2: D5 UEQ MPTS Pass-Through
In pass-through mode, the default remapping rules for PID and program
numbers are ignored. The MPTS is instead remapped to identical output
PIDs and programs. Rather than calculating new output PAT and PMT
output tables, the D5 UEQ creates cloned copies of the input PAT and PMT
tables to transmit downstream, so that the PSI information present in the
MPTS is preserved on the QAM.
200MHz-->225.0.0.1/100
206MHz-->225.0.0.1/200
212MHz-->225.0.0.1/300
216MHz-->225.0.0.1/400
Multicast
Address
MPTS SOURCE
MPTS over
UDP
UDP #100 MPTS#1
UDP #200 MPTS#2
UDP #300 MPTS#3
UDP #400 MPTS#4
D5 UEQ
192.158.23.2
QAM #1 (100)
QAM #2 (101)
QAM #4 (103)
QAM #3 (102)
200 Mhz
206 Mhz
212 Mhz
218 Mhz
RF Serving
MPTS#4
STB
MPTS#3
STB
MPTS#2
STB
MPTS#1
STB
Procedure 9-5 Enable MPTS Pass-Through Mode
In this example the DVB MPTS Pass-Through mode is configured on QAM
1/1.1. The transport stream is delivered to destination UDP port 593, at
destination IP address 10.250.0.6, from source IP address 10.250.0.5.
! WARNI NG: some set t i ngs al so af f ect ot her QAM
i nt er f aces connect ed t o t hi s por t
! unt i l af t er i nt er f ace- conf i gur at i on mode has been
exi t ed
D5(config-qam-if)#video pass-through mpts
D5(config-qam-if)#video udp 593 src-ip 10.250.0.5 dest-
ip 10.250.0.6
End of procedure
Filtering MPTS in Non Pass-Through Mode
By default, a stream is configured as an SPTS and the program that is
picked by the D5 UEQ is dictated by the first PMT received. If the user has
MPTS with several programs and wants to filter (or block) a specific
program (#112 in our example below), you will need to do the following:
Procedure 9-6 MPTS Filtering
Set the stream as SI stream. Virtual programs cannot be filtered.
To configure SI table streams:
1 Enter the QAM subinterface mode:
2 Configure a QAM channel and a video UDP port as well as a destination IP
address:
D5(config-qam-if)#video udp 1134 src-ip 76.59.192.74
dest-ip 239.193.140.33 si-stream
3 Set up filter rules to the programs the user wants to block:
D5(config-qam-if)#video filter-program 112
A filter needs to be set up for each program the user wants to block.
End of procedure
Use the following command to view the current video filters:
D5(config)#show video filter
The system response would look similar to:
Program Filters:
UDP SRC- I P DEST- I P QAM Pr og | Mat chCount Last Mat ch
| ( hh: mm: ss ago)
- - - 1/ 2. 2 112 | 0 00: 00: 00
Tot al s | 0
1 Pr og Fi l t er r ul es i n t ot al
Use the following command to view the current video sessions:
D5#show video sessions
The system response would look similar to:
UDP SRC- I P DEST- I P QAM / PI DS | PROGS
CONTAI NER TOTAL FI LTERED | TOTAL FI LTERED
1034 76. 59. 192. 74 239. 193. 140. 32 1/ 2. 1 31 0 | 9 0
1134 76. 59. 192. 74 239. 193. 140. 33 1/ 2. 2 22 0 | 6 0
2034 76. 59. 192. 74 239. 193. 140. 34 1/ 2. 3 28 0 | 7 0
2330 76. 59. 192. 46 239. 193. 140. 20 1/ 1. 2 60 0 | 30 0
2430 76. 59. 192. 46 239. 193. 140. 21 1/ 1. 4 16 0 | 1 0
3034 76. 59. 192. 74 239. 193. 140. 35 1/ 2. 4 23 0 | 7 0
4034 76. 59. 192. 74 239. 193. 140. 36 2/ 1. 1 14 0 | 4 0
Tot al s 194 0 | 64 0
Handling Pre-scrambled Content
The D5 UEQ is capable of handling pre-scrambled DVB-Simulcrypt content.
It will automatically detect pre-scrambled content in an incoming transport
stream due to the presence of a CA_Descriptor in the CAT and/or PMT
tables. These tables along with associated, scrambled, and Elementary
Stream tables will be forwarded through the D5 UEQ without any changes.
The D5 UEQ will generate an appropriate output CAT table containing
more than one CA_Descriptor when it detects different super_CAS_ids in
the CA_Descriptors of incoming CAT tables. The D5 UEQ will also handle
the presence of EMM tables in pre-scrambled streams. When two or more
transport streams are scrambled using the same super_CAS_id and also
contain EMM tables on the same PID, then those EMM tables are assumed
to be the same and only one copy will be transmitted to the output QAM
channel.
Video Session PSI Show Command
The output from the show video session psi command indicates the presence
of pre-scrambled content in the incoming transport streams. For example,
below the output from the show video session psi command shows the pres-
ence of a CA Descriptor in the PMT for the transport stream on UDP port
59393. This command will not attempt to show the presence of any CAT
or ECM tables.
D5#show video session psi
D5#show video udp 5000 session psi
D5#show interface qam 6/1.1 video session psi
UDP SRC- I P DEST- I P STATUS QAM PAT PMT( S)
59393 10. 250. 24. 61 10. 250. 24. 51 act i ve 6/ 1. 1 v27 1/ 1/ CA
59395 10. 250. 24. 61 10. 250. 24. 51 act i ve 6/ 1. 1 v29 1/ 1
D5#
The output from show video session psi verbose command displays more
detail about the transport stream and the contents of CAT & ECM tables if
present in the stream.
D5#show video session psi verbose
D5#show video udp 5000 session psi verbose
D5#show interface qam 6/1.1 video session psi verbose
- PMT- r ecei ved 01: 05: 40 ago ( pr evi ous ver si on was r ecei ved 02: 49: 38 ago)
PCR- PI D i s 100
ECM- PI D i s 102, CA Syst emI D i s 0x1800
100 2 -
101 3 -
- ECM- r ecei ved 00: 00: 39 ago ( pr evi ous ver si on was r ecei ved 00: 02: 39 ago)
ECM- PI D i s 102
- CAT- r ecei ved 03: 15: 55 ago
EMM- PI D i s 102, CA Syst emI D i s 0x1800
- PMT- r ecei ved 00: 00: 26 ago
PCR- PI D i s 68
68 2 -
69 3 -
2 pr ogr ams passed t hr ough, 0 f i l t er ed
4 el ement ar y- st r eams passed t hr ough, 0 f i l t er ed
D5#
10. IGMP Client
Topics Page
Overview 1
I GMP Client in the Network 3
Directly Connected to a Video Server(s) 3
Connected to I GMP Enabled Switch/ Router 6
Limitations 9
IGMP CLI Commands 10
IGMP Show Commands 10
Example IGMP Configurations 13
Overview
The D5 UEQ IGMP client can be employed in the network architecture
either by directly connecting the D5 UEQ to a video server or remotely
connecting via a switch, series of switches, routers or a combination
thereof. This document will explain how the mulitcasted video traffic will
be transported to the individual QAM channels.
10 IGMP Client
The D5 UEQ IGMP client is fully compliant with the IGMPv3 host specifica-
tion (unless stated otherwise) and is fully backward compatible with earlier
version queriers and hosts. IGMPv3 allows the user to specify Source
Specific Multicast (SSM) entries as well as Any Source Multicast (ASM)
entries. ASM entries are denoted using a '*' for the source address.
NOTE
The IGMP client operates on either a gigabit subinterface or a loopback
subinterface that is a member of a port-channel. It does not operate on
any fastethernet ports. There are a maximum of 1488 groups that can be
configured on the D5 UEQ system. A group can only be configured
against a single subinterface. Enabling IGMP on a subinterface enables
the processing of IGMP packets (when a query is received, the client will
send reports for the corresponding group(s)). If IGMP is disabled, then all
IGMP queries are dropped by the client and the client wont generate any
IGMP packets. When a group is statically configured on a subinterface,
packets destined to the multicast address will not be filtered on the
subinterface whether IGMP is enabled or disabled on that subinterface.
I GMP Client in the Network
The following scenarios show where the IGMP client fits into the network
topology.
Directly Connected to a Video Server(s)
Any Source Multicast (ASM)
Example
The diagram below illustrates where the D5 UEQ is directly connected to
a video server that is IGMP enabled.
Figure 10-1: ASM Example - Directly Connected to a Video Server
In this configuration, the following series of operations are conducted as
follows:
1 Video server 10.1.1.1 starts transmitting video traffic to multicast address
225.1.2.3.
2 All video traffic destined for multicast address 225.1.2.3 is received on the
D5 UEQ port and filtered.
3 Group {*, 225.1.2.3} is provisioned on a D5 UEQ subinterface.
4 The D5 UEQ issues a join on the subinterface for group {*, 225.1.2.3} to
signal interest in receiving traffic on multicast address 225.1.2.3 from any
source.
Video Server
10.1.1.1
Leave {*, 225.1.2.3}
{*, 225.1.2.3}
{*, 225.1.2.3}
6
3
2
8
Keystone D5 DMTS
D5 UEQ
X
X
7
1
4
5
Provision
Deprovision
Allowed Stream {10.1.1.1, 225.1.2.3}
Stream {10.1.1.1, 225.1.2.3}
Stream {10.1.1.1, 225.1.2.3}
10 IGMP Client
5 Video traffic from server 10.1.1.1 destined for multicast address 225.1.2.3
is no longer filtered by the D5 UEQ.
6 The group {*, 225.1.2.3} is deprovisioned on the D5 UEQ.
7 The D5 UEQ issues a leave/report on the subinterface for group {*,
225.1.2.3} to signal that it is no longer interested in receiving traffic on
multicast address 225.1.2.3 from any source.
is filtered by the D5 UEQ.
Source Specific Multicast
(SSM) Example
The diagram below illustrates where the D5 UEQ is directly connected to
a video server.
Figure 10-2: SSM Example - Directly Connected to a Video Server
follows:
1 Video servers 10.1.1.1 and 10.1.1.2 start transmitting video traffic to
multicast address 225.1.2.3.
2 All video traffic destined for multicast address 225.1.2.3 is received on the
D5 UEQ port and filtered.
3 Group {10.1.1.2, 225.1.2.3} is provisioned on a D5 UEQ subinterface.
Leave {10.1.1.2, 225.1.2.3}
{10.1.1.2, 225.1.2.3}
{10.1.1.2, 225.1.2.3}
6
3
2
8
X
X
7
1
4
5
Provision
Deprovision
Allowed Stream {10.1.1.2, 225.1.2.3}
Stream {10.1.1.1, 225.1.2.3}
Stream {10.1.1.1, 225.1.2.3}
D5 UEQ
D5 UEQ
10.1.1.2
Video Servers
10.1.1.1
X
1
Stream {10.1.1.2, 225.1.2.3}
Stream {10.1.1.1, 225.1.2.3}
5
8
X
Stream {10.1.1.2, 225.1.2.3}
X
4 The D5 UEQ issues a join on the subinterface for group {10.1.1.2,
225.1.2.3} to signal interest in receiving traffic on multicast address
225.1.2.3 from source 10.1.1.2.
is no longer filtered by the D5 UEQ. Video traffic from server 10.1.1.1 is
still filtered.
6 The group {10.1.1.2, 225.1.2.3} is deprovisioned on the D5 UEQ.
7 The D5 UEQ issues a leave/report on the subinterface for group {10.1.1.2,
225.1.2.3} to signal that it is no longer interested in receiving traffic on
multicast address 225.1.2.3 from source 10.1.1.2.
10 IGMP Client
Connected to IGMP Enabled Switch/ Router
Any Source Multicast (ASM)
Example
The diagram below illustrates where the D5 UEQ is connected to an IGMP
enabled switch or router.
Figure 10-3: ASM Example - Connected to an I GMP-enabled
Switch or Router
follows:
1 Video server 10.1.1.1 start transmitting video traffic to multicast address
225.1.2.3.
2 Video traffic destined for multicast address 225.1.2.3 is received on
switch/router port and filtered.
3 Group {*, 225.1.2.3}. is provisioned on a D5 UEQ subinterface.
{10.1.1.1, 225.1.2.3}
2
1
10.1.1.1
Video Server
X
8
4
5
X
9
10
11
Allowed
3 {*, 225.1.2.3}
Provision
I P
Network
7
Deprovision
{*, 225.1.2.3}
J oin
{*, 225.1.2.3}
6
{10.1.1.1, 225.1.2.3}
Query
{*, 225.1.2.3}
Stream
{10.1.1.1, 225.1.2.3}
Stream
{10.1.1.1, 225.1.2.3}
Leave
{*, 225.1.2.3}
X
D5 UEQ
D5 UEQ
4 The D5 UEQ issues a join on the subinterface for group {*, 225.1.2.3} to
signal interest in receiving traffic on multicast address 225.1.2.3 from any
source.
5 Northbound switch/router receives join and no longer filters video traffic
destined to multicast address 225.1.2.3.
6 Video traffic from server 10.1.1.1 destined to multicast address 225.1.2.3
is received by the D5 UEQ.
7 Group {*, 225.1.2.3} is deprovisioned on the D5 UEQ subinterface.
8 D5 UEQ issues a leave/report to the northbound switch/router for group
{*, 225.1.2.3} to signal that it is no longer interested in receiving traffic on
multicast address 225.1.2.3 from any source.
9 Video traffic destined to multicast address 225.1.2.3 is filtered by the D5
UEQ.
10 Northbound switch/router receives leave and issues group-specific query
for group 225.1.2.3.
11 Northbound switch/router receives no report for group 225.1.2.3 within a
specific timeout, switch/router then filters video traffic for multicast
address 225.1.2.3 from all sources.
10 IGMP Client
Source Specific Multicast
(SSM) Example
The diagram below illustrates where the D5 UEQ is connected to an IGMP
enabled switch or router.
Figure 10-4: SSM Example - Connected to an I GMP-enabled
Switch or Router
follows:
1 Video servers 10.1.1.1 and 10.1.1.2 start transmitting video traffic to
multicast address 225.1.2.3.
2 Video traffic destined for multicast address 225.1.2.3 is received on
switch/router port and filtered.
3 Group {10.1.1.2, 225.1.2.3}. is provisioned on a D5 UEQ subinterface.
4 The D5 UEQ issues a join on the subinterface for group {10.1.1.2,
225.1.2.3} to signal interest in receiving traffic on multicast address
225.1.2.3 from source 10.1.1.2.
X
8
4
5
X
9
10
11
Allowed
Provision
IP
Network
7
Deprovision
J oin
{10.1.1.2, 225.1.2.3}
6
{10.1.1.2, 225.1.2.3}
Query
{10.1.1.2, 225.1.2.3}
Stream
{10.1.1.2, 225.1.2.3}
Stream
{10.1.1.2, 225.1.2.3}
Leave
{10.1.1.2, 225.1.2.3}
X
10.1.1.1 10.1.1.2
Video Servers
2 1
1 2
X
3 {10.1.1.2, 225.1.2.3}
{10.1.1.2, 225.1.2.3}
{10.1.1.2, 225.1.2.3}
{10.1.1.1, 225.1.2.3}
D5 UEQ
D5 UE Q
5 Northbound switch/router receives join and no longer filters video traffic
destined to multicast address 225.1.2.3 from video server 10.1.1.2. Video
traffic from server 10.1.1.1 and destined to 225.1.2.3 is still filtered by
switch/router
is received by the D5 UEQ.
7 Group {10.1.1.2, 225.1.2.3} is deprovisioned on the D5 UEQ subinterface.
8 D5 UEQ issues a leave/report to the northbound switch/router for group
{10.1.1.2, 225.1.2.3} to signal that it is no longer interested in receiving
traffic on multicast address 225.1.2.3 from source 10.1.1.2.
10 Northbound switch/router receives leave and issues group-source-specific
query for group 225.1.2.3.
11 Northbound switch/router receives no report for group 225.1.2.3 within a
specific timeout, switch/router then filters video traffic for multicast
address 225.1.2.3 from server 10.1.1.2.
Limitations
The following list describes some of the limitations in the current D5 UEQ
release:
1 A multicast group can be configured on a multiple interface if:
a The source IP address and destination IP address are not configured
against any interface (e.g. configuring {1.1.1.1, 225.0.0.1} on GigE 2
when {1.1.1.1, 225.0.0.1} is already configured on GigE 1), and
b There is no IGMP group with the same destination IP address and no
source address specified on any interface (e.g. configuring {1.1.1.,
225.0.0.1} on GigE 2 when {*, 225.0.0.1} is already configured on
GigE 1), or
c There is no IGMP group with the same destination IP address on any
interface and the group being configured has no source IP specified
(e.g. configuring *, 225.0.0.1} on GigE 2 when {1.1.1.1, 225.0.0.2} is
already configured on GigE 1).
Note: In the above examples, the * (asterisk) means no source
address is specified.
2 There is a maximum of 1488 groups per WAN module.
3 There are 1488 multicast filters per WAN module. Each configured source
address that is programmed will use one filter. A group that has no
configured source addresses will also use one filter.
4 There is a maximum of four source addresses per group.
10 IGMP Client
5 Only eight source addresses will be read from a group and source specific
query. Any subsequent sources will be ignored by the D5 UEQ IGMP Client.
IGMP CLI Commands
The following commands are executed from the sub-interface mode.
IGMP Show Commands
To verify that IGMPv3 is configured properly, use the commands listed in
the following table while in Privilege Mode:I
Table 10-1: I GMP Database Commands - Subinterface Commands
Command Description
[no] ip igmp static-group <N.N.N.N>
Adds [removes] a static multicast address to the IGMP
database associating it with the gigabitethernet/loopback
subinterface.
[no] ip igmp static-group <N.N.N.N>
source <S.S.S.S>
Adds [removes] a source specific address to a static
multicast address. Adds a static multicast address to the
IGMP database (if it previously didnt exist) associating it
with the gigabitethernet/loopback subinterface.
[no] ip igmp Enables [disables] a subinterface's IGMP capabilities.
ip igmp process-remote-queries Processes queries from any subset.
ip igmp query-max-response-timeout
<N>
Sets the timeout advertised in queries.
ip igmp robustness <N>
Variable for tuning the expected packet loss on the
subnet. Default is set to 2.
ip igmp verify ip-router-alert-option
Enables checking for the presence of the IP Router Alert
option in IGMPv2 and IGMPv3 messages.
ip igmp version <N>
Configures which version of IGMP the system uses. The
default is set to v3.
Table 10-2: I GMP Show Commands
Command Description
show ip igmp groups
Lists all the multicast groups presently stored in the IGMP
database.
show ip igmp groups <N.N.N.N>
Lists all the multicast groups stored in the IGMP database
with a group address of <N.N.N.N>.
Example of output from the variants of the show ip igmp groups
commands:
SDV LEGEND:
' I F- Down' - i gmp i nt er f ace i s not oper at i onal
' Candi dat e' - candi dat e sour ce addr ess on r edundant por t
' St r eami ng' - st r eampr esent
' Wai t i ng' - wai t i ng f or st r eam
Gr oup Addr ess I nt er f ace Upt i me SDV St at us Sour ces Addr ess
225. 1. 1. 2 Gi gabi t Et her net 0/ 1. 0 2m27s ANY
225. 1. 1. 3 Gi gabi t Et her net 0/ 1. 0 1m50s 2. 5. 34. 192
4. 2. 4. 6
226. 1. 1. 4 Gi gabi t Et her net 0/ 1. 0 1m10s St r eami ng ANY
226. 1. 1. 4 Gi gabi t Et her net 0/ 3. 0 1m10s Candi dat e ANY
226. 1. 2. 4 Gi gabi t Et her net 0/ 2. 0 1m10s St r eami ng ANY
226. 1. 3. 4 Gi gabi t Et her net 0/ 4. 0 1m10s I F- Down ANY
232. 1. 2. 3 Gi gabi t Et her net 0/ 1. 0 3s 7. 6. 5. 4
St r eami ng 4. 2. 4. 6
2. 5. 34. 192
4. 2. 4. 6
Candi dat e 2. 5. 34. 192
Wai t i ng 4. 2. 4. 6
2. 5. 34. 192
show ip igmp groups interface
gigabitethernet <X/Y>
Lists the number of multicast groups stored in the IGMP
database associated with the specified gigabitethernet
subinterface.
show ip igmp groups interface
loopback <X>
Lists all the multicast groups stored in the IGMP database
associated with the specified loopback subinterface.
show ip igmp interface
Lists the IGMP attributes of all sub-interface running in
video mode.
show ip igmp interface
gigabitethernet <X/Y>
Lists the IGMP attributes of the specified gigabitethernet
sub-interface.
show ip igmp interface loopback <X>
Lists the IGMP attributes of the specified loopback sub-
interface.
Table 10-2: I GMP Show Commands
Command Description
10 IGMP Client
4. 2. 4. 6
2. 5. 34. 192
Wai t i ng 4. 2. 4. 6
2. 5. 34. 192
234. 1. 2. 5 Gi gabi t Et her net 0/ 4. 0 3s I F- Down 7. 6. 5. 4
I F- Down 4. 2. 4. 6
I F- Down 2. 5. 34. 192
Example of output from the variants of the show ip igmp interface
command:
Gi gabi t Et her net 0/ 1. 0:
I GMP enabl ed subi nt er f ace has 0 gr oups
ver si on 3 r obust ness 2 quer y- i nt er val 125 quer y- max- r esponse- t i me 100
not ver i f yi ng i p r out er al er t opt i on
I GMP quer i er 4. 3. 2. 1 upt i me 7s expi r es i n 4m7s
I GMP quer i er 1. 1. 1. 1 upt i me 32s expi r es i n 4m11s
V2 r out er pr esent t i mer expi r es i n 1m35s
I GMP quer i er N. N. N. N upt i me 32s expi r es i n 2m11s
I GMP quer i er not pr esent on net wor k
Example IGMP Configurations
Procedure 10-1 The following procedure demonstrates how to:
enable IGMP on gigabitEthernet 0/1
create the static-group {*, 225.0.0.1}(ASM) on gigabitEthernet 0/1
add source address 1.2.3.4 to the static-group {*, 225.0.0.1}(SSM) on
gigabitEthernet 0/1
remove source 1.2.3.4 from static-group {1.2.3.4, 225.0.0.1}(ASM) on
gigabitEthernet 0/1
delete the static group {*, 225.0.0.1} from gigabitEthernet 0/1
create a static group 226.0.0.1 with multiple source addresses
{1.2.3.4, 2.3.44.5, 3.4.5.6} on gigabitEthernet 0/1
remove source address 1.2.3.4 from 226.0.0.1 on gigabitEthernet 0/1
delete the static-group 226.0.0.1 from gigabitEthernet 0/1
1 Enable IGMP on gigabitEthernet 0/1
D5(config)#interface gigabitethernet 0/1
!NOTE: sub-interface config will not be applied
!(and will not be displayed by the "show" commands)
!until after interface-configuration mode has been
exited
D5(config-gig-if)#ip igmp
D5(config-gig-if)#exit
2 Create a static-group {*, 225.0.0.1}(ASM) on gigabitEthernet 0/1
exited
D5(config-gig-if)#ip igmp static-group 225.0.0.1
10 IGMP Client
3 Add source address 1.2.3.4 to the static-group
{*, 225.0.0.1}(SSM) on gigabitEthernet 0/1
exited
D5(config-gig-if)#ip igmp static-group 225.0.0.1 source
1.2.3.4
4 Remove source 1.2.3.4 from static-group {1.2.3.4, 225.0.0.1}(ASM) on
gigabitEthernet 0/1.
!exited
D5(config-gig-if)#no ip igmp static-group 225.0.0.1
source 1.2.3.4
5 Delete the static group {*, 225.0.0.1} from gigabitEthernet 0/1
!exited
6 Create a static group 226.0.0.1 with multiple source addresses {1.2.3.4,
2.3.44.5, 3.4.5.6} on gigabitEthernet 0/1
exited
1.2.3.4
2.3.44.5
3.4.5.6
7 Remove source address 1.2.3.4 from 226.0.0.1 on gigabitEthernet 0/1
exited
1.2.3.4
8 Delete the static group {*, 225.0.0.1} from gigabitEthernet 0/1
exited
End of procedure
10 IGMP Client
Procedure 10-2 The following procedure demonstrates how to:
associate the static-group {1.1.1.1, 225.0.0.1} with qam 1/1.1
program 10
create the static-group {1.1.1.1, 225.0.0.1}(ASM) on gigabitEthernet
0/1
1 Associate the static-group {1.1.1.1, 225.0.0.1} with qam 1/1.1 program 10
D5(config-qam-if)video src-ip 1.1.1.1 dest-ip 225.0.0.1
program 10
D5(config-qam-if)#exit
2 Create the static-group {1.1.1.1, 225.0.0.1}(ASM) on gigabitEthernet 0/1
exited
D5(config-gig-if)#ip igmp static-group 225.0.0.1 source
1.1.1.1
End of procedure
See Chapter 8, Video on Demand for information on port mapping.
11. Switched Digital Video
Topics Page
Overview 1
Switched Digital Architecture 2
Setting up SDV on the D5 UEQ 2
Overview
The ARRIS D5 Universal Edge QAM (UEQ) Software first delivered QAM
sharing of digital broadcast and unicast Video on Demand (VoD) services
on a single Edge Device. Release 2.2 extended QAM sharing support on
the D5 UEQ with the addition of Switched Digital Video (SDV) functionality
using Generic QAM Interface SDV Protocol. Release 2.3 extended its posi-
tion to all SDV architectures by supporting Real-Time Streaming Protocol
(RTSP) for SDV applications. SDV is an economical option for reclaiming
spectral bandwidth. To free additional bandwidth for additional content
and services with SDV, broadcast channels are switched on to the network
only when they are requested by one or more subscribers.
Switched Digital Architecture
The primary elements of a Switched Digital Architecture are:
(Global) Session and Resource Manager
Switched Digital Video (SDV) Server
Switched Digital Video (SDV) Manager
Switched Digital Video (SDV) Client
Staging Processor
Bulk Encryptor
Content Routing Network
Edge QAM Modulator
Figure 11-1: Switched Digital Architecture Example
Setting up SDV on the D5 UEQ
Use the following steps to set Switched Digital Video on the D5 UEQ:
Procedure 11-1 Enable I GMP
1 Enter gigabitEthernet configuration mode by typing the following:
D5(config)#interface gigabitethernet <X/Y>
Where: X/ Y = Slot/port
2 Enable the subinterfaces IGMP capabilities:
D5(config-gig-if)#ip igmp
3 Sets the client to run in IGMPv3:
D5(config-gig-if)#ip igmp version 3
End of procedure
For more information on IGMP configuration, see Chapter 10, IGMP Client
Procedure 11-2 Configure the SDV RPC I nterface
Following is the command to configure the SDV RPC interface:
D5(config)# video sdv rpc [dncs-compatibitility-mode |
master-srm <N.N.N.N> <tcp | udp> | persistent | qam-
model <2x4-qam | 2x6-qam | 4x8-qam> | reset-indicator
interval <1-20> | timeout <default | 0-65535>]
Where: dncs-compatibility-mode = The Master SRM for Edge
Reset Indications.
master-srm <N.N.N.N> = The Master SRM for Edge Reset
using the Master SRM IP address and tcp | udp = Protocol
persistent = Sets the client connection to persistent
qam-model = Sets the QAM-model to either the 2X4-QAM,
2X6-QAM or the 4X8-QAM
reset-indicator interval = Sets the SDV RPC reset-indicator
interval in seconds. Valid range is 1-20 seconds
timeout = Sets the SDV RPC timeout back to the default or
sets it in a range of 0-65535 milliseconds.
Follow these steps to turn on the SDV RPC interface:
1 Enter configuration mode by typing the following:
2 Turn on the SDV RPC interface with the following command:
D5(config)#video sdv rpc
3 (Optional) Some Master SRM devices also expect the D5 UEQ to generate
a Reset Indicator message. This is accomplished with the following
command:
D5(config)# video sdv rpc master-srm <ip-address> <tcp
| udp>
End of procedure
NOTE
In SDV deployments, other headend systems such as the SDV Manager
and/or the SRM, will need to be set up by the operator to match the
configurations of the D5 UEQ systems in use. For example, these systems
will need to know whether the D5 UEQ is operating in Dual, Quad, or
Hex-channel or Octal mode. It is very important that the actual D5 UEQ
configurations match the configurations set up on these other systems. If
this is not done accurately, then SDV may not operate correctly, or may
not operate at all.
SDV Load Balancing
Refer to GQI/RPC GigE Load Balancing, page 13-22 for information on SDV
load balancing and the current show commands.
12. Conditional Access
Topics Page
Conditional Access 2
Basic CAS Configuration 3
EMMG Configuration 4
EI S Configuration 12
Redundancy Group Configuration 14
Channel Container Configuration 15
SCG Configuration 15
DVB Simulcrypt Configuration 20
Conditional Access
Figure 12-1: D5 UEQ in a Conditional Access System
The D5 UEQ Conditional Access System (CAS) is responsible for delivering
Entitlement Management Message (EMM), Entitlement Control message
(ECM) and Conditional Access Tables (CAT) for transmission on appro-
priate QAM channels along with Packet Identifier (PID) remapping of these
tables prior to transmission.
A
R
R
I
S

D
5

U
n
i
v
e
r
s
a
l

E
d
g
e

Q
A
M

The CAS configuration Command Line Interface (CLI) is based on the
concept of interfaces similar to those for Ethernet ports and QAM channels.
The interface CLI for each CAS Server Interface is session based. No two
CLI sessions are able to configure the same server interface at the same
time. The configuration is only applied when the CLI session is completed
with the exit command.
Each configured Element Control Message Generator (ECMG), Entitlement
Management Message Generator (EMMG) and Event Information System
(EIS) forms a CAS server on the D5 UEQ and has a unique name. No two
similar types of CAS servers can have the same name however, a different
type (ECMG, an EIS and an EMMG) could all have the same name.
Each CAS server can be in an administrative up or down state. The no
shutdown and shutdown commands are utilized to initiate these states.
Setting a server to admin down will cause any associated channels and
streams to be deleted. Each server also has an operational state (referred
to in the show commands as line protocol) which indicates a connected
channel. Up means the channel is connected while down means no
channel is connected.
There are restrictions placed on what can be configured on a CAS server
when it is in the admin up state, for example, the super-CAS-id (or CA-
system-id, or client-id) cannot be changed until the server is set to admin
down. The same applies to IP configuration.
Basic CAS Configuration A basic CAS configuration can be accomplished in the following manner:
Basic CAS Configuration To setup a basic CAS configuration it is
necessary to configure a video channel container, the ECMG, EMMG and
the EIS. The procedure is as follows:
ECMG = super-CAS-id 0x18000002, IP address 192.168.250.22 Port 6000
EMMG = client-id 0x18000001, TCP Port 5555 (or UDP Port 5555)
EIS = IP address 192.168.250.23 Port 5000
(config)#video channel-container cn
(config-video-channel)#channel qam 6/1.1
(config-video-channel)#exit
(config)#video emmg emmg
(config-emmg)#no shutdown
(config-emmg)#client-id 1800.0001
(config-emmg)#tcp port 5555
(config-emmg)#channel-container cn
(config)#video ecmg ecmg
(config-ecmg)#no shutdown
(config-ecmg)#super-cas-id 1800.0002
config-ecmg)#ip address 192.168.250.22
(config-ecmg)#port 6000
(config-ecmg)#exit
(config)#
(config)#video eis eis
(config-eis)#no shutdown
(config-eis)#ip address 192.168.250.23
(config-eis)#port 5000
(config-eis)#exit
(config)#
EMMG Configuration
The EMMG interface supports two modes of operation, namely promis-
cuous mode and restricted mode. Which mode is used depends on
whether you specify an IP address along with the port definition. TCP-
only, UDP-only and TCP/UDP port specifications are supported. The
default format is mpeg-section and the default data-type is EMM.
To define an EMMG interface that uses TCP Port 2222 for control
and UDP Port 3333 for entitlement data use the following
example configuration:
D5(config)#video channel-container cn
D5(config-video-channel)#channel qam 6/1.1
D5(config-video-channel)#exit
D5(config)#video emmg emmg
D5(config-emmg)#channel-container cn
D5(config-emmg)#client-id 1801.0001
D5(config-emmg)#tcp port 2222
D5(config-emmg)#udp port 3333
D5(config-emmg)#no shutdown
D5(config-emmg)#exit
D5(config)# exit
To define an EMMG interface that accepts data from any EMMG
server on TCP port 5555, use the following example configuration
D5(config-emmg)#shutdown
D5(config-emmg)#channel-container cn
5(config-emmg)#client-id 1801.0001
D5(config)# exit
To define an EMMG interface that uses UDP port 4444 for control
and entitlement data from EMMG server 1.2.3.4 only, use the
following example configuration
D5(config-emmg)#shutdown
5(config-emmg)#channel-container cn
D5(config-emmg)#client-id 1801.0001
D5(config-emmg)#udp port 4444 ip address 1.2.3.4
D5(config-emmg)#data-id <1-65535>
D5(config)# exit
NOTE
In UDP-only operation, it is necessary to specify the data-id.The complete
EMMG provisioning command set is as follows:
Table 12-1: EMMG Configuration Mode Commands
Command Description
TCP
only
TCP
UDP
UDP
Only
[no] bandwidth <n>
Set the maximum allowed bandwidth
for the EMMG channel 1 - 5000 Kbps.
The [no] option sets it to 0 Kbps. A
value of zero means unlimited
bandwidth
optional optional optional
[no] channel-container <name>
Assigns the EMMG to the list of QAM
channels defined by the channel
container. The [no] option removes
the assignment.
required required required
[no] client-id <x.y>
Set the client_id for the EMMG
channel. For TCP based stream setup,
this is used to verify the received
client_id is as expected. For UDP-only
operation it is required to match the
incoming data_provision to the
correct EMMG stream.
required required required
[no] data-id <x>
Set the data_id for the EMMG channel
in UDP-only operation. Not used is a
TCP port is configured.
optional optional required
[no] data-type [EMM | PDG]
Set the data_type for the stream. The
[no] option sets it to the default which
is EMM.
[no] pid <n>
Set the PID to be used to transmit the
EMM for the stream. The [no] option
sets it to the default which is to use
the input PID value on the output
QAM.
[no] mpeg-section
Set the expected data format to the
MPEG sections for the stream. The
[no] option sets it to the default which
is to expect MPEG frames.
[no] shutdown
Enable / disable the EMMG interface.
The default is for the interface to be
administratively down.
[no] tcp port <value> [ip
address <N.N.N.N>]
Sets the port number and optional
TCP/IP address* for the EMMG.The
[no] option deletes the setting.
required required n/a
*...If no IP address is specified (promiscuous mode), the D5 UEQ will
accept connections from any EMMG on the specified port. If an IP address
is specified (restricted mode), the D5 UEQ will only accept connections
from the specified IP address/port.
EMMG Show Command Set The EMMG show commands display the basic configuration of the EMMG
and some counters that are cumulative, for example, the Total Channels
value is not the current number of channels (which would be always 0 or
1) but the number of channels that have ever been opened on the EMMG.
This concept applies to all counters. Even if the EMMG channel closes, the
counters still retain their values. Setting the EMMG to admin down resets
the counters. Data_channel_id and Active time are 0 because there is no
channel connected (line protocol is down).
The complete EMMG show command set is as follows:
D5#show video emmg <name>
EMMG ' Ar r i sEMMG' i s admi n up, l i ne pr ot ocol i s down
Cl i ent _i d i s 1800. 0001 ( Nagr a - Kudel ski SA)
TCP Por t i s 5555, conf i gur ed I P addr ess 192. 168. 250. 21
UDP Por t i s 0, I P addr ess i s not conf i gur ed
No maxi mumst r eambandwi dt h conf i gur ed
Channel cont ai ner i s ' cc1'
Dat a f or mat i s MPEG Fr ames, Dat a_t ype i s EMM
Dat a_i d i s 0, PI D i s not speci f i ed
Dat a_channel _i d i s 0, Act i ve t i me ( 0: 00: 00)
Tot al Channel s 0 St r eams 0
0 dat a_pr ovi si ons
0 st r eamer r or s
0 CC er r or s
0 channel t est s, 0 sent
Verbose Show CommandThe verbose show video command
displays the basic configuration of the EMMG and details of any channels
and streams connected to the EMMG. The stream B/W is the negotiated
[no] udp port <value> [ip
address <N.N.N.N>]
Set the port number and optional
UDP/IP address* for the EMMG. The
[no] option deletes the setting.
n/a required required
[no] ca-descriptor [ca-
system-id <id in hex> |
private-data <hex array>]
Allows private data to be added to the
CA_Descriptor of the CAT table.
Syntax is the same as access-criteria
(config-emmg)#ca-descriptor
Command Description
TCP
only
TCP
UDP
UDP
Only
bandwidth which could be less than the configured bandwidth maximum.
The Data-Provision value is formatted as number-of-message/number-of-
bytes received.
D5#show video emmg cas01-emmg1 verbose
EMMG ' cas01- emmg1' i s admi n up, l i ne pr ot ocol i s up
Cl i ent _i d i s 1800. 0001 ( Nagr a - Kudel ski SA)
TCP Por t i s 17773, connect ed I P addr ess 10. 17. 101. 100
UDP Por t i s unassi gned
No maxi mumst r eambandwi dt h conf i gur ed
Channel cont ai ner i s ' cas01'
Dat a f or mat i s MPEG Fr ames, Dat a_t ype i s EMM
Dat a_i d i s not speci f i ed, PI D i s not speci f i ed
CHAN- I D FORMAT VER ACTI VE ERRORS/ CC
123 f r ames 2 ( 73: 25: 45) 0/ 0
STRM- I D DATA- I D B/ W DATA- PROVI SI ON ACTI VE ERRORS/ CC
456 789/ EMM 150 1586113/ 298189244 ( 73: 25: 45) 0/ 0
Show Video EMMG Channel The command output displays the
stream status of the specified stream.
#show video emmg <name> channel
CHAN- I D FORMAT VER ACTI VE ERRORS
235 f r ames 2 ( 0: 00: 27) 0
Show Video EMMG Stream The command output displays the
channel status if connected.
#show video emmg <name> stream <stream-id>
STRM- I D DATA- I D B/ W DATA- PROVI SI ON ACTI VE ERRORS/ CC
123 321/ EMM 0 6/ 1128 ( 0: 03: 06) 0/ 5
124 322/ EMM 0 3/ 564 ( 0: 03: 06) 0/ 2
ECMG Configuration
The ECMG is unlike all other CAS servers in that it is a server in the tradi-
tional sense. The D5 UEQ connects to it unlike EMMG, EIS, Program
Specific Information Generator (P)SIG and other CAS servers who connect
to the D5 UEQ instead. When configuring the ECMG it is mandatory to
specify the TCP address as well as the TCP port. Multiple ECMGs can have
the same super_CAS_id. Multiples can also be assigned to a Redundancy
Group. Setting an ECMG to admin down will delete all ECM Streams asso-
ciated with it causing the ECM Streams to go to an extended Crypto-Period
or possibly be re-assigned to another ECMG, if they are setup in a redun-
dant configuration. Restrictions apply to what can be changed in the
configuration of an admin up ECMG. For example, the Redundant Group,
TCP configuration and the super_CAS_id cannot be changed in an admin
up ECMG.
Use the following command to set the ECMG:
D5(config)#video ecmg <name>
Sharing ECMG Servers It is possible to use the same ECMG Server to provide CAS support on more
than one D5 UEQ. When this configuration is required, each D5 UEQ needs
to have a unique scs_id. This identifier is used to ensure that the
ecmg_stream_id created by each D5 UEQ is unique.
In the following example, two D5 UEQs, with host names D5-One and
D5-Two respectively, sharing the same ECMG, would be configured with
unique scs_ids using the following commands:
D5-One# config terminal
D5-One(config)# video scs-id 1
D5-One(config)# exit
D5-Two# config terminal
D5-Two(config)# video scs-id 2
D5-Two(config)# exit
The complete set of configuration commands are as follows:
Table 12-2: ECMG Mode Commands
Command Description Status
[no] ip address
<N.N.N.N>
Specify the TCP/IP of the ECMG. This
is used by the D5 UEQ as the port to
connect to, when contacting the
ECMG Server.
required
[no] port <tcp-
port>
Specify the TCP Port to which the
ECMG can listen. This is used by the
D5 UEQ when contacting the ECMG
server.
required
[no] super-cas-
id <xxxx.yyyy>
specify the super_CAS_id of this
ECMG. Duplicate values are allowed.
required
The ECMG show command displays the basic configuration of the ECMG
and some counters that are cumulative, for example, the Total Channels
value is not the current number of channels (which would be always 0 or
1) but the number of channels that have ever been opened on the ECMG.
This concept applies to all counters. If the ECMG channel closes the coun-
ters still retain their values. Setting the ECMG to admin down resets the
counters. Normally the codewords_provisioned (sent) should match the
ECM_responses (received) but may not if the ECMG has failed to respond
to any cw_provision message sent by the D5 UEQ. A channel_test is typi-
cally sent on every open channel every 10 seconds and stream_test
messages are sent if an ECM_response is missed.
ECMG Show Command Set The complete ECMG show command set
is as follows:
[no] version
Set the protocol version number that
the D5 UEQ uses when creating
channels and streams with this
ECMG. Default is 2.
optional
[no] redundancy-
group <name>
Specify the redundancy group to
which this ECMG belongs if it is in a
redundant configuration.
optional
[no] primary
Specify the primary/secondary
(backup) status of this ECMG with
respect to its redundant group.
optional
[no] channel
test <seconds>
Specify the time between sending
channel_test messages when
connected to the ECMG. Default is 10
seconds
optional
[no] channel
timeout
<seconds>
Specify the time taken to wait for a
response to a channel test message.
optional
[no] channel
delay <seconds>
Specify the expected propagation
delay through the network from D5
to ECMG. This is taken into account
when calculating the time to send a
cw_provision message to the ECMG.
The longer the delay the earlier the
message will be sent (to compensate
for that delay). Default is 2 seconds
optional
[no] shutdown
Enable/disable the ECMG interface.
The default is for the interface to be
optional
#show video ecmg <name>
ECMG ' ecmg1' i s admi n up, l i ne pr ot ocol i s up
Super _CAS_i d i s 1800. 0001 ( Nagr a - Kudel ski SA)
TCP Por t i s 17771, I P addr ess i s 127. 0. 0. 1
Redundancy Gr oup i s ' unassi gned' , i s a secondar y ECMG
ECM f or mat i s MPEG f r ames
ECM_channel _i d i s 1, Act i ve t i me ( 0: 00: 22)
Tot al Channel s 1 St r eams 2
8 codewor d_pr ovi si ons
8 ECM_r esponses
0 st r eamt est s, 0 sent
0 st r eamer r or s
0 channel t est s, 7 sent
Verbose Show CommandThe verbose show command displays the
basic configuration of the ECMG and details of any channel and streams
connected to this ECMG. CW-PROVISION format is cw_provision-
messages-sent / ecm_response-message-received; they should always be
the same.
D5#show video ecmg <name> verbose
ECMG ' ecmg1' i s admi n up, l i ne pr ot ocol i s up
Super _CAS_i d i s 1800. 0001 ( Nagr a - Kudel ski SA)
Redundancy Gr oup i s ' unassi gned' , i s a secondar y ECMG
CHAN- I D FORMAT VER ACTI VE STREAMS ERRORS
1 f r ames 0 ( 0: 00: 35) 2 0
ECM- I D STRM- I D CP# CW- PROVI SI ON ACTI VE ERRORS
101 1 108 8/ 8 ( 0: 00: 35) 0
505 4 105 4/ 4
( 0: 00: 35) 0
Show Video ECMG Channel The command output displays the
channel status if connected.
D5#show video ecmg <name> channel
CHAN- I D FORMAT VER ACTI VE STREAMS ERRORS
1 f r ames 0 ( 0: 00: 48) 2 0
Show Video ECMG StreamThe command displays the stream status
of the specified stream.
ECM- I D STRM- I D CP# CW- PROVI SI ON ACTI VE ERRORS
505 4 108 7/ 7 ( 0: 00: 56) 0
Show Video ECM Name Displays details of the ECMG channel param-
eters, like delay_start, delay_stop and max_streams.
D5#show video ecmg <name> channel verbose
Channel _i d i s 1, Ti me act i vat ed ( 0: 08: 40)
ac_del ay_st ar t 0 ac_del ay_st op 0
del ay_st ar t 350 del ay_st op 350
t r ansi t i on_del ay_st ar t 0 t r ansi t i on_del ay_st op 0
ecm_r ep_per i od 100 max_st r eams 1500 mi n_cp_dur at i on
80
EIS Configuration
Typically there are either 0 or 1 EISs configured on the D5 UEQ. The
configuration is very simple in that only the TCP port needs to be config-
ured and then brought into an admin up state. Extra care should be taken
when setting the admin state to down as it will delete any SCGs provi-
sioned on the D5 UEQ through that EIS thereby causing all associated
services to be unscrambled.
EI S redundancy The D5 UEQ acts as the server for EIS connections.
Once the identifiers are used consistently between EISs (e. g. ecm_id,
etc), multiple EISs may provision/deprovision the same scrambling group.
Link redundancy for an EIS connection may be achieved through the use
of virtual interfaces.
EI S Configuration Commands
D5#(config)#video eis <name>
The complete set of configuration commands are as follows:
Table 12-3: EI S Mode Commands
[no] ip
address
<N.N.N.N>
Set the source IP address of the EIS. This
can be entered to verify the source IP of
a connecting EIS. Default is no IP
address.
optional
[no] port
<tcp-port>
Specify the TCP Port to which to listen for
connection attempts from the EIS.
Default port is no port.
required
EI S Show Command Set EIS show command output is much like that of the EMMG and ECMG. The
counters are cumulative and reset on admin down. The total SCG repre-
sents the total provisioned SCGs and does not include the SCG dele-
tions/modifications. The scg_provisions represents the total message
count and includes the SCG deletions/modifications.
EI S Show Command Set The complete EIS show commands are as
follows:
D5#show video eis <name>
EI S ' ei s1' i s admi n up, l i ne pr ot ocol i s up
TCP Por t i s 17772, I P addr ess i s <ANY>
Max SCG i s 624, Ser vi ce scr ambl i ng onl y
EI S_channel _i d i s 1, Act i ve t i me ( 0: 00: 10)
Tot al SCGs 0
0 scg_pr ovi si ons
0 scg er r or s
0 scg l i st s
0 channel r eset s
0 channel t est s
Verbose Show CommandThe verbose show command displays
basic EIS configuration plus all current SCGs, their associated services and
ecm_groups.
#show video eis <name> verbose
EI S ' ei s1' i s admi n up, l i ne pr ot ocol i s up
SCG I D 501 admi n up Act i vat i on t i me 17013 CP Dur at i on 90
Ser vi ce I D 4 Tr anspor t I D 41
EcmI D 101 super - cas- i d 1800. 0001 AC 11- 22- 33
EcmI D 103 super - cas- i d 1900. 0002 AC 44- 55- 66- 77
[no] shutdown
Enable/disable the EIS interface. The
default is for the interface to be
optional
Redundancy Group Configuration
A redundancy group is a collection of ECMGs used for redundancy. All must
have the same CA_system_id. The group also defines the redundancy
policy (like load balancing off/on). When load balancing is on, the D5
UEQ will attempt to balance the number of ECM Streams on each primary
ECMG in the group. Some ECMG may have higher stream limits than others
and this is taken into account when load balancing. Secondary ECMGs is
the group that will only be used when no primary has available capacity.
Admin down means the assigned ECMGs will ignore the redundancy config
and behave as if not assigned to a group.
Redundancy Group Command Set
D5(config)#video redundancy-group <name>
The complete set of Redundancy Group commands are as follows:
Table 12-4: Redundancy Group Command Set
Redundancy Group Show
Command Set
There is a single show command in the Redundancy Group Show. It
displays the Line protocol down which means there are no ECMGs
assigned to this group. The Total ECMGs is the current number of
assigned ECMGs. Failed ECMGs is the current number of off-line ECMGs
from the group. ECMG errors is the cumulative total of failed ECMGs.
D5#show video redundancy-group <name>
Redundancy Gr oup esr a i s admi n up, l i ne pr ot ocol i s
down
CA_syst em_i d i s 1800 ( Nagr a - Kudel ski SA)
Load bal anci ng i s enabl ed
Tot al ECMGs 0
0 f ai l ed ECMGs
0 ECMG er r or s
[no] ca-system-
id <xxxx>
Specify/remove the CA system id. required
[no] load-
balancing
Turn on/off load balancing. optional
[no] shutdown
Enable/disable the Redundancy
Group. The default is for the group to
be administratively down.
optional
Channel Container Configuration
A channel container is a simple mechanism used to group a number of
QAM channels together. It associates an EMMG with a channel container
so the CAT table and EMM tables received from the EMMG will be sent on
all channels defined in the channel container.
D5(config)#video channel-container <name>
The complete set of Channel Container configuration commands are as
follows:
Table 12-5: Channel Container Configuration Command Set
Channel Container Show
Command Set
There is a single show command used to display the Local service-id, Local
pid, Tsid and QAM service-id.
D5#show video channel-container <name>
Vi deo Channel Cont ai ner " cc1"
Tsi d QAM
1 - ( maps t o Q1/ 1. 1) UP
2 - ( maps t o Q1/ 1. 2) UP
3 - ( maps t o Q1/ 1. 3) UP
- Q6/ 1. 1 UP
- Q6/ 1. 3 UP
- Q6/ 2. 1 UP
SCG Configuration
The SCG configuration CLI was added to allow users to configure SCGs
statically, via the CLI, without utilizing an EIS<>SCS interface, that creates
them dynamically (refer to procedure 2-1). Similar to most of the CAS
servers, this concept is also based around interfaces. The CLI configured
static SCGs are displayed separately from those that are generated by an
external EIS.
[no] channel
tsid <n>
Add/remove a channel to the container,
specifying the channel using its
transport stream id <n>
optional
[no] channel
qam x/y.z
Add/remove a channel to the container,
specifying the channel using x/y.z sub-
interface notation.
optional
SCG Configuration Mode Assuming the ECMG configuration shown
in the following services will be scrambled using the same ECM Stream
from the ECMG with super-CAS-id 1800.0001, and using the
access_criteria 0x112233:
Service 1 on transport_stream_id 46
D5(config)#video scg basic_scg
D5(config-scg)#ecm-group 1 super-cas-id 1800.001
access-criteria 11-22-33
D5(config-scg)#service 1 transport 46
D5(config-scg)#no shutdown
D5(config-scg)#exit
D5(config)#
The complete set of SCG Configuration commands are as follows:
Table 12-6: SCG Configuration Command Set
[no]
activation-
time
Specify/removes the activation time in
clock time for the SCG, the time can be
in hh:mm:ss or now + secs.
If the time referred to is in the past, an
activation time of now is assumed.
Optional
defaults
to now
[no] cp-
duration
Adds/removes the crypto period
duration specified in units of 100ms,
e.g. 2000 would be 200 seconds.
Defaults to 600 (1 minute).
Optional
[no] network-
id
Specifies/removes the original network
id. If none is defined, it defaults to 4370
(0x112).
Optional
[no] service
<nn> transport
<nn>
Specify/removes a service and
transport stream id. Valid range for
both are 0-65535. No default values.
This command can be repeated for
different combinations of service and
transport stream IDs.
Optional
SCG Service Group Commands Theses command can be used to
change admin states of SCG service groups but only those SCGs gener-
ated by an external EIS client. These changes are not persistent.
D5# [no] video eis <name> scg-id <id> [ecm-id <id>]
shutdown
D5# [no] video eis <name> scg-id <id> [service-id <id>]
transport-id shutdown
SCG Show Command Set The show command set displays informa-
tion about the SCG admin state, activation time, service-id number and
other information pertinent to the static SCGs.
D5# show video scg
SCG " basi c_scg" I D 1 admi n up oper at i onal st at e i s up
Act i vat i on t i me 2007- 04- 09- 16: 04: 14. 00
Cr ypt o Per i od Dur at i on 600
Or i gi nal Net wor k I D 4370
ECM I D 1 Super _CAS_i d 1800. 0001 AC 11- 00- 34
Show Video SCG All Displays static and dynamic SCGs
D5# show video scg all
[no] ecm-group
<nn> super-
cas-id
<nnnn.nnnn>
access-
criteria <XX-
XX>
Specifies/removes an ECM group. The
first parameter is the ecm-id <0-
65535> super-cas-id in the
nnnn.nnnn format and the access
criteria in a hexadecimal string with
dashes. The maximum length of this
string is 256 characters. The ECM group
id must be unique per CA system/super-
cas-id.
Up to two ecm-groups can be
described.
Required
[no] ca-
descriptor
Allows/disallows private data to be
added to the CA_Descriptor of the PMT.
Syntax is same as access-criteria
Optional
[no] shutdown Enables/ disables the entire static SCG. Optional
Table 12-6: SCG Configuration Command Set
Verbose Show CommandExternally generated SCGs can be viewed
with this command.
D5# show video eis <eisname> verbose
EI S ' ei sAr r i s' i s admi n up, l i ne pr ot ocol i s up
CAS (P)SIG Configuration
Typically there are 0, 1 or 2 (P)SIG's configured on the D5 UEQ. The
configuration consists of the TCP port, IP address and admin up state.
Extra care should be taken when setting the admin state to down
as it will delete all channels and streams provisioned on the D5
UEQ through the (P)SI G and wont stop the carouselling of any
sections that have been provisioned, resulting in closing the
connection with the PSI G. Typically, it is the (P)SIGs job to establish
and close all connections between it and the MUX.
Basic CAS (P)SI G
Configuration
A basic CAS (P)SIG configuration might be as follows:
Where:
PSIG 1 = IP address 192.168.250.24 port 2000
PSIG 2 = port 2001
(config-psig)#ip address 192.168.250.100
(config-psig)#exit
(config-psig)#exit
(P)SIG Show Command Set The show command set displays information about the (P)SIG admin
state, TCP Port and IP address.
D5#show video psig <name>
PSI G ' Ar r i sPSI G1 i s admi n up, l i ne pr ot ocol i s down
Show verbose commandDisplays information about the (P)SIGs
Total Channels, Streams
show video psig <name> verbose
PSI G ' Ar r i sPSI G1' i s admi n up, l i ne pr ot ocol i s up
Tot al Channel s 1 St r eams 1 Sect i ons 1
Channel : Channel I D 1 TSI D 1 Net wor k I D 1 Conf i gur ed St r eams 1
St r eam: PI D 1 St r eamI D 1 Conf i gur ed Sect i ons 1
Act i ve sect i on: Channel 1 TSI D 1 Net wor k I D 1 PI D 1 Number Of Sect i ons 1
PSI G ' Ar r i sPSI G2' i s admi n up, l i ne pr ot ocol i s up
TCP Por t i s 2001, I P addr ess i s ANY
Tot al Channel s 1 St r eams 0 Sect i ons 0
Channel : Channel I D 1 TSI D 2 Net wor k I D 3 Conf i gur ed St r eams 1
St r eam: PI D 1 St r eamI D 1 Conf i gur ed Sect i ons 1
Show Video (P)SI G active sections Displays (P)SIG active sections
show video psig active sections
PSI G ' Ar r i sPSI G1'
Channel I D 1 St r eamI D 1 TSI D 1 Net wor k I D 1 PI D 1
Table 12-7: (P)SI G Configuration Command Set
[no] port <port>
The TCP port used by the PSIG to
establish a TCP connection.
Required
[no] ip address
<N.N.N.N>
The validated source IP address of
PSIG when establishing a TCP
connection on tcp port <port>
Optional
[no] shutdown
The admin state of the PSIG
interface
Required
Act i vat i on Ti me 2005 01/ 01 01: 01: 01. 01 Sect i on Lengt h 16 I nt er val 100
0x01 0x01 0x00 0x0D 0x00 0x03 0x01 0x01 0x01 0x02 0x03 0x04 0x05 0x06 0x07 0x08
PSI G ' Ar r i sPSI G2'
Channel I D 1 St r eamI D 1 TSI D 2 Net wor k I D 3 PI D 1
Act i vat i on Ti me 2005 01/ 01 01: 01: 01. 01 Sect i on Lengt h 19 I nt er val 100
0x04 0x01 0x00 0x11 0x00 0x03 0x01 0x01 0x01 0x02 0x03 0x04 0x05 0x06 0x07 0x08
DVB Simulcrypt Configuration
The D5 UEQ SimulCrypt feature supports session based encryption for VoD
and Broadcast traffic passing through the D5 UEQ Edge QAM. Since an
operators fully integrated DVB SimulCrypt deployment may consist of
various components (such as the EIS, which can be provided by many 3rd
party vendors) the D5 UEQs Simulcrypt feature handles multiple versions
of the DVB Simulcrypt standard utilized by proprietary CAS interface
suppliers. For example, if a proprietors EIS system uses a different version
of the DVB Simulcrypt standard to trigger encryption sessions with the D5
UEQ, that standard is handled seamlessly.
The D5 UEQ is primarily concerned with the generation of CWs, scram-
bling MPEG streams and ensuring proper timing synchronization between
ECM messages and MPEG scrambling
D5 UEQ
EMMG
PDG
A
C
G
PSI/ SI
Generator
SCS
CWG
M
U
X
S
c
r
a
m
b
l
e
r
SI Tables
PSI Tables
Private Data
EMMs
AC
CW
CW
ECMs
E
C
M
s
C
W
A
C
E
C
M
G
Content
&
Tables
SCG
S
I
/
I
F
A
g
e
n
t
Figure 12-2: D5 UEQ in a Simulcrypt Environment
DVB Simulcrypt
Configuration
The D5 UEQ DVB SimulCrypt feature contains extensive CLI support to
configure and monitor the operation of the major components that
comprise the feature. The different areas are EIS, ECMG, EMMG/PDG,
CWG, Scrambler and Synchronizer. They all have CLI commands to control
their operation.
An example of a basic setup follows:
Sample DVB Simulcrypt Configuration
D5(config)#video channel-container "CAS-SYSTEM"
D5(config-video-channel)#video ecmg CAS-SYSTEM
D5(config-ecmg)#ip address 10.3.14.4
D5(config-ecmg)#port 5026
D5(config-ecmg)#super-cas-id 0b00.0001
D5(config-vecmg)#no shutdown
D5(config-ecmg)#video emmg CAS-SYSTEM
D5(config-emmg)#client-id 0b00.0001
D5(config-emmg)#data-id 1
D5(config-emmgl)#no mpeg-section
D5(config-emmg)#data-type emm
D5(config-emmg)#no pid
D5(config-emmg)#channel-container CAS-SYSTEM
D5(config-emmg)#video scg SERVICE-1
D5(config-scg)#network-id 4369
D5(config-scg)#cp-duration 90
D5(config-scg)#activation-time now+10
D5(config-scg)#ecm-group 1 super-cas-id 0b00.0001
access-criteria 90-01-00-06-00-01-00-02-00-03
Procedure 12-1 Sample DVB Simulcrypt Configuration Explained
1 Setup a channel container by assigning it a name. Then assign a channel
TSID (TSID 1 by default is QAM 1/1.1) This is where the EMM tables are
to be transmitted.
D5(config)#video channel-container <CAS-SYSTEM>
D5(config-video-channel)#channel tsid 1
2 Give the ECMG a name, IP address, TCP port number and super-cas-id.
Use the no shutdown command to enable.
D5(config-video-channel)#video ecmg <CAS-SYSTEM>
D5(config-ecmg)#ip address <N.N.N.N>
D5(config-ecmg)#port 5026
D5(config-ecmg)#super-cas-id 0b00.0001
D5(config-ecmg)#no shutdown
3 Name the EMMG and assign a client-id, tcp port, IP address data-id, mpeg-
section, data-type, pid and channel-container name. Use the no shutdown
command to enable.
D5(config-ecmg)#video emmg <CAS-SYSTEM>
D5(config-emmg)#client-id 0b00.0001
D5(config-emmg)#data-id 1
D5(config-emmg)#no mpeg-section
D5(config-emmg)#data-type emm
D5(config-emmg)#no pid
D5(config-emmg)#channel-container <name>
4 Create a static SCG by giving it a name (SERVICE-1). Then create a
network-id. The default network-id for the D5 UEQ is 4369. Assign a
crypto-period duration and then specify an activation time for scrambling
to start. The no shutdown command will enable the configuration.
D5(config-emmg)#video scg SERVICE-1
D5(config-scg)#network-id 4369
D5(config-scg)#cp-duration 90
D5(config-scg)#activation-time now+10
5 Name the service that is to be scrambled and then the ECMG that will do
the scrambling.
D5(config-scg)#ecm-group 1 super-cas-id 0b00.0001
access-criteria 90-01-00-06-00-01-00-02-00-03
End of procedure
13. Redundancy
Topics Page
Multicast Redundancy 1
HOT/ WARM Redundancy 2
HOT/ HOT Redundancy 3
Redundant Stream Groups 5
QAM Redundancy 8
Failover Procedure 11
Failback procedure 12
GigabitEthernet (GE) MAC Redundancy 14
Expanded Operation in Release 3.0.1 17
GQI / RPC GigE Load Balancing 22
GigE Link Trunking Redundancy 31
Multicast Redundancy
HOT/WARM and HOT/HOT refer to the two possible methods a QAM edge
device can use to handle redundant multicast stream details.
13 Redundancy
This document describes the HOT/HOT redundancy feature, the changes
required to implement it, and how this differs from the HOT/WARM redun-
dancy provided in release 2.3. HOT/HOT redundancy will be available
when configuring video sessions for both GQI(RCP) and RTSP video
session setup modes. Although this document only deals with multicast
sessions, unicast sessions are also possible but they effectively will always
be HOT/HOT.
The number of QAM channels available on a QAM card increases from 8 to
32 and on a fully loaded D5 UEQ from 48 to 96. This is a potential output
capacity of over four Gigabits while our input capacity is limited to four
Gigabits. This becomes an important factor especially in HOT/HOT redun-
dancy if each stream has one available redundant source, as the D5 UEQ
will then be only able to handle two Gigabits of unique streams assuming
the redundant stream is of equal bandwidth to the first.
Since the ERM will be responsible for not oversubscribing the input
capacity, the D5 UEQ will be able to ensure that QAM output capacity is
not oversubscribed.
HOT/ WARM Redundancy
In HOT/WARM redundancy mode, the session manager receives a session
setup either from GQI(RPC) or RTSP. If the information is valid, the session
manager passes on the information to the IGMP task and the MpegMgr.
The IGMP task sends tries to join one stream at a time and configures a
single multicast filter rule that allows that single stream through an input
port; each rule is enabled for a CLI configurable period called the source
timeout (which is 750ms by default).
Figure 13-1: Example of HOT/ WARM Redundancy
As a result of this single rule, only one multicast stream for each session
will ever be seen on the input ports. In HOT/WARM, the first detected
stream is enabled.
HOT/ HOT Redundancy
Although HOT/WARM is available and is the current default mode,
HOT/HOT redundancy has been added. In HOT/HOT mode, the most
significant difference from HOT/WARM is that IGMP will configure all multi-
cast filter rules, associated with a session, simultaneously and attempt to
join all of them, causing the multicast traffic from each transport to be sent
to the D5 UEQ. A single SDV stream in HOT/HOT can generate two or more
times the bandwidth of that stream arriving at the input of the D5 UEQ.
In this mode, the MPEG manager will notify the session manager of all
available streams that correspond to a configured session. The session
manager will then select the stream based on priority, with a CLI configu-
Session Manager MPEC Manager IGMP I PProc
Setup
Transport List
Transport List
Setup Reply
PAT
Stream Available Message
Activate Stream
PMT
IGMP Stop
PCR Start Message
Stream Start Message
Announce
PAT
13 Redundancy
rable choice of policy. The first policy will be to wait until the highest
priority stream becomes available within the session timeout interval; the
second mode of selection would be to select the first available stream.
If a stream fails and the D5 UEQ needs to generate a switchover to a
redundant source in HOT/HOT, this will require the triggering of a rule
change. In HOT/WARM, IGMP needs to send a join for the redundant
stream at failover time.
Figure 13-2: Example of HOT/ HOT Redundancy
HOT/HOT will be available as an option for both RTSP and GQI(RCP). If
HOT/HOT is enabled, the order is the priority.
Although the GQI(RCP) specification doesnt allow an input Gigabit port to
be specified, the D5 UEQ has been designed to work as follows. If the
output port is on the first three QAM cards, the D5 UEQ searchs for the
stream on Gigabit 1 and a backup source on Gigabit 3. If the output port
is on the second 3 QAM cards, then similarly Gigabit 2 and Gigabit 4 are
used.
Once a session has been setup and is running and has failed over to a
backup stream, a CLI command will send that session back to the primary
stream. No automatic method will be provided on the D5 UEQ.
CLI Commands The following commands have been added:
Session Manager MPEC Manager IGMP I PProc
Setup
Transport List
Transport List
Setup Reply
PAT
Activate Highest Priority Stream
PMT
PCR Start Message
Stream Start Message
Announce
PAT
PAT
1 The following command will allow global redundancy mode to be set to
either HOT/WARM or HOT/HOT:
D5(config)#video sdv policy-active [hot-hot/hot-warm]
The global redundancy mode default is set at hot-warm.
2 The following command allows configuration of the setup transport
selection behavior:
D5(config)#video sdv session setup-policy [wait-for-
primary | first-available]
In wait-for-primary, the D5 UEQ will wait for the session-timeout time of
the primary stream to be detected. If the primary does not become avail-
able, then the highest priority backup stream will be selected. This is the
default action.
In first-available, the D5 UEQ will stop waiting as soon as any of the trans-
ports are detected and then the first detected stream will be made active
3 The following command allows the user to manually set a session to the
primary transport. This is intended to be used after a session has failed
over to a backup stream and the operator wants to revert to the primary
transport.
D5(config)#video sdv session [session ID] switch-to-
primary
The sessionID for RTSP will be typically an eight digit number and for
GQI(RCP) it is a ten character dot-separated hex string (e.g.
ABC100.2000).
Redundant Stream Groups
The current D5 UEQ supports HOT/HOT and HOT/WARM redundancy
options through the use of the NGOD R6 RTSP protocol. This protocol
relies on the use of multiple MulticastTransportHeaders to identify input IP
multicast streams, one of which will be forwarded as an output program
to a QAM channel. The D5 UEQ has supported HOT/HOT and HOT/WARM
redundancy internally as of Release 2.4.
The current stream management on the D5 UEQ is based on setting a
stream classifier and supplying a method to apply to the stream when it is
delivered, e.g.
video udp <454> src-ip 1.1.1.1 dest-ip 1.1.1.1 virtual-prog <channel-container>
This section introduces a new video redundant-stream <name>
command. The command enables a list of stream classifiers to be used in
place of the current classifier single input command available, for example,
13 Redundancy
video [udp <454> src-ip 1.1.1.1 dest-ip 1.1.1.1] virtual-prog <channel-container |
qam>
is equivalent to
video [redundant-stream 'super_str'] virtual-prog <channel-container |qam>
The new command enables multiple, input stream definitions to be asso-
ciated together, for redundancy reasons, and activated for forwarding.
All the existing options available with the video udp <> command apply
to the video redundant-stream <> command, and are not expected
to change. The active stream, as described in the HOT/HOT HOT/WARM
section, is the stream that the existing video udp <> command options
will apply to.
The redundant-stream refers to a named redundant-stream-group that
contains the list of video input classifiers to use for the video sources, for
example,
video redundant-stream 'super_str'[channel-container
<> | qam <x/y.z>]
video redundant-stream-group 'super_str'
are equivalent to:
D5(config-stream)#video udp <port> src-ip <addr} dest-ip <addr>
The redundant-stream-group configuration menu also includes some
policy definitions. These allow for particular behavior of the redundant-
stream-groups to be manually configured.
The policy active <hot-hot | hot-warm> option determines how
the multiple video input classifiers should be treated. The default is hot-
warm. The hot-hot option indicates that all video sources will be
requested to be delivered to the D5 UEQ, but only a single video source
will be marked as active and forwarded. In the case of multicast video
sources, the D5 UEQ must issue IGMP J oins for all video sources. In the
case of unicast video sources, it is expected that the default behavior will
be hot-hot.
The hot-warm option indicated that only a single video source will be
delivered to the D5 UEQ at a time, and this video source will be considered
the active source. If, after a configurable amount of time (switch-over
<ms>), the active video source is determined to have failed, the D5 UEQ
is expected to switch over to the next available video source. This
approach is repeated as different video sources fail and will eventually
return to the first video source in the list.
The policy switch-over <ms> option determines the switch over
time that is used to identify when an active video source is no longer
active, and a switch over is necessary. There is a default switch-over of
750ms.
Example:
D5(config-stream)#video redundant-stream-group super_str
D5(config-stream)#video udp 2321 src-ip 192.165.222.248 dest-ip 224.0.0.1
interface-ip 10.20.1.1 priority <1-255>
D5(config-stream)#video udp 2321 src-ip 192.165.12.198 dest-ip 224.0.2.1 gigabit
0/1 priority 24
D5(config-stream)#policy-active hot-hot
D5(config-stream)#policy switch-over 500
D5(config-stream)#video redundanty-group super_nothing
show video multicast-transport
D5#show vi deo mul t i cast - t r anspor t
UDP Sour ce- I P Dest i nat i on- I P I nt er f ace |
- - - - - - - - - - - - - - - - +- - - - - +- - - - - - - - - - - - - - - +- - - - - - - - - - - - - - - +- - - - - - - - - - - - - - |
mux1 > 2440| 10. 250. 42. 1| 231. 2. 2. 2| gi ge0/ 2. 1|
- - - - - - - - - - - - - - - - +- - - - - +- - - - - - - - - - - - - - - +- - - - - - - - - - - - - - - +- - - - - - - - - - - - - - +
TSI D10101 > 30002| 10. 250. 41. 13| 230. 11. 12. 101| gi ge0/ 1. 1|
30003| 10. 250. 41. 16| 230. 11. 12. 102| gi ge0/ 2. 1|
- - - - - - - - - - - - - - - - +- - - - - +- - - - - - - - - - - - - - - +- - - - - - - - - - - - - - - +- - - - - - - - - - - - - - +
Test Gr oup > 20001| 10. 250. 2. 254| 230. 2. 2. 2| gi ge0/ 1. 1|
- - - - - - - - - - - - - - - - +- - - - - +- - - - - - - - - - - - - - - +- - - - - - - - - - - - - - - +- - - - - - - - - - - - - - +
The above display shows 'super_str' in hot-hot mode, where both sources
are being received, but only src-ip 192.165.12.198 is actively being
forwarded.
show video multicast-transport super_str
2 st r eams
SSM based
HOT- HOT st andby
act i ve st r eam: ( 192. 165. 222. 248, 224. 0. 0. 1) , UDP=2321, del i ver ed t o 10. 20. 1. 1
( GE0/ 1. 1)
backup st r eam: ( 192. 165. 12. 198, 224. 0. 2. 1) , UDP=2321, del i ver ed t o GE0/ 1.
13 Redundancy
QAM Redundancy
Release 3.0 and 3.0.1
QAM Redundancy is not supported across QAMs allocated to different
WANs in dual-wan mode. It will only be supported on identical QAM type
cards (e.g. a QPM can be a spare for a QPM and a DPM can be a spare for
a DPM) assigned to the same WAN.
Release 2.6 and earlier
In Release 2.6, the D5 UEQ introduced QAM redundancy in multiple fail-
over configurations using Dual-Port QAM Modules (DPM 4DX2) in Quad
Mode and/or Dual-Port QAM Modules (DPM 6DX2) in Hex Mode with a
single WAN. QAM redundancy is not currently supported with the Quad-
Port QAM Module (QPM 8DX4) with Dual WANs. Of the many configura-
tions that may be used, ARRIS has tested and recommends the following
scenarios:
Three sparing groups configured as 1:1
Two sparing groups configured as 2:1
One sparing group configured as 5:1
The following sections will illustrate these sparing groups.
NOTE
In figures 12-3, 12-4, 12-5, and 12-6, the P signifies the primary and the
S signifies the spare.
1:1 QAM Sparing
Redundancy
The recommended sparing group configured as 1:1 is as follows:
Slot 1 primary, slot 2 spare
Figure 13-3: Example of 1:1 QAM Sparing
QAM Modules
Power
Reserved for Future Use
1 1 2 2
3 3
4 4
5 5 6 6
P S
P
S
S P
2:1 QAM Sparing
Redundancy
There are two options for the 2:1 QAM sparing groups:
Slot 1 and 3 primary, slot 5 spare
The first option would look like the following:
Figure 13-4: Example of 2:1 QAM Sparing (Option 1)
Option two would be configured to work as follows:
Figure 13-5: Example of 2:1 QAM Sparing (Option 2)
5:1 QAM Sparing
Redundancy
If you want to configure a sparing group as a 5:1 sparing group
Slot 1 through 5 primary, slot 6 spare
Figure 13-6: Example of 5:1 QAM Sparing
QAM Modules
Power
1 1 2 2
3 3
4 4
5 5 6 6
P
S
P
P
P
S
QAM Modules
Power
1 1 2 2
3 3
4 4
5 5 6 6
P
S
P
P
P
S
QAM Modules
Power
1 1 2 2
3 3
4 4
5 5 6 6
P
P
P
P
S
P
13 Redundancy
Procedure 13-1 Enabling QAM Sparing Redundancy
Use the following steps to setup QAM sparing redundancy.
1 The spare-group command allows grouping cards in a spare group as
follows:
interface QAM 1
shutdown
spare-group 1 manual
interface qam 2
spare-group 1
interface qam 3
spare-group 1
interface qam 4
spare-group 6
interface qam 5
spare-group 6
interface qam 6
spare-group 6 auto
End of procedure
QAM cards 1, 2, 3 are part of a spare-group whose spare is QAM 1. The
D5 UEQ spare card does not need to be the first card in the spare group
(as shown by the second spare group in the example) which identifies QAM
6 as the spare and whose members also contain QAM 4 and QAM 5. The
D5 UEQ provides both a 1:1 (one spare card for each active card) and a
1:N (one spare card for multiple active cards) redundancy mechanism.
The spare QAM card may be configured for three different levels of readi-
ness:
Cold Standby The spare is basically powered off in order to save on
component wear. Switch-over time to the spare, however, is the slowest
of the three readiness levels. The QAM manager would have to program
the spare card from scratch using the configuration from the failed primary
card. The target outage duration is in the order of 10 to 15 seconds.
Busy Standby The spare is fully active using its own custom configu-
ration and may be passing traffic, which will be interrupted when a primary
card fails and will be restored when the primary is recovered. This mode
allows a user to make use of spare card using traffic of lower importance.
Switch-over time is slower than Hot standby and the target outage dura-
tion is approximately 2 to 15 seconds.
Hot Standby The spare configuration is identical to the primary card
with the exception of the RF output which would be disabled to avoid RF
interference. Since the spare would not be passing any custom traffic, this
mode allows preparing a spare card for fast switch-over. The target outage
duration is in the order of less than one second if active RF switching is
used, less than three seconds if passive RF switching is used.
On the D5 UEQ, there are no significant differences between 1:1 and 1:N
redundancy modes as far as hardware or software support is concerned.
Typically, 1:1 redundancy is chosen over 1:N for its higher availability but
also for faster switchover. Therefore, Hot Standby is suited for 1:1 redun-
dancy where Cold or Busy Standby are more suitable for 1:N redundancy
scenarios.
Cold Standby is demonstrated in the above example by QAM 1 configura-
tion, the card is disabled by the shutdown command, which for the latest
DRFI QAM board will be equivalent to powering it off. On the other hand,
the D5 UEQ CLI does not provide any explicit means to configure busy or
Hot Standby mode. A user is free to configure a spare group to contain one
spare and one primary (hot 1:1 redundancy) and to manually tune the
spare configuration to match the primary (for Hot Standby).
Failover Procedure
In a properly configured spare group, an active card must have at least
one QAM channel enabled for traffic (although traffic may not be passing
at the time of switching) to be allowed to fail over to the spare card.
Failover can be triggered manually by shutting down a primary card or by
removing it from a chassis. Automatic failover happens when a hardware
fault is detected by either the QAM manager on the WAN card or the Envi-
ronment manager on the MON card.
Typical faults are as follows:
Card is powered down due to exceeded environment thresholds.
MUX FPGA heartbeat fails
Monitored RF power output is too low.
On the contrary, no automatic failover will be performed on traffic prob-
lems such as video oversubscription, buffer overflows or underflows, etc.
In order to switch over a failed primary card to its spare, the QAM manager
performs the following procedure:
1 Spare QAM interfaces are marked as shutdown if they were active and
notified as such to listeners such as the MPEG manager which will
discontinue all video traffic to spare if necessary.
13 Redundancy
2 The spare QAM card is reconfigured using primary card configuration, only
differences are applied.
3 A MAC address change notification will be sent to listeners regarding
primary card interfaces which is now the MAC address of the spare card.
On receipt of the change, the MPEG manager will reprogram the IPPROC
FPGA on the WAN card using the new MAC address. This will redirect all
video streams from the failed primary card to the spare card. The MPEG
manager may also need to reconfigure explicit stream settings on the
spare card such as latency queues.
Once the primary card is switched over, all but its QAM channel interfaces
are seen as shutdown on SNMP/CLI or other user interfaces. Similarly, on
the spare card, all but its QAM interfaces are in service and the running
configuration is left unchanged. By using the shutdown command
(manual failback mode), the running configuration of the failed card is
changed to force it out-of-service. User interaction would be required to
bring the QAM card in the failed slot back to in-service level. Alternatively,
automatic failback is performed whenever the primary card fault is cleared,
usually when the card is replaced.
Manual failback mode is configured on the CLI by using the manual qual-
ifier on the spare-group command; automatic failback mode is configured
using the auto qualifier. This is respectively demonstrated in above
example by QAM 1 and QAM 6 spare groups.
While in a 1:N sparing mode, only one QAM card can be switched over. If
another card fails while the spare is switched over, it will be put out of
service, notified as such and will not automatically failover to the spare
card even if the latter reverts to stand-by afterward. Similarly, if the spare
card hardware is missing or has failed, then failover mode will be disabled.
As long as it is unavailable, redundancy is disabled.
Failback procedure
The spare card will manage the services of a failed primary card as long
as it is out of service. However, it may be desirable to bring the replace-
ment primary card online without recovering the spare card, in order to
test it. This can be achieved by taking the replacement card out of the
spare group before bringing it online by using the no spare-group
command in the card configuration. While the card is out of the spare
group, the user is free to configure in any way s/he wishes, typically to test
its RF while not interfering with the spare. However traffic will not be
allowed through until the spare card is recovered. Once the replacement
card is reinserted into a spare group and is online, traffic will again be
allowed.
In order to switch a spare card back to an online card, the QAM manager
performs the following procedure:
1 A MAC address change notification will be sent to listeners regarding
primary card interfaces, which is now the MAC address of the replacement
card. On receipt of the change, the MPEG manager will re-program the
IPPROC FPGA on the WAN card using the new MAC address. This has the
effect to re-direct all video streams from spare card to replacement card
instantaneously.
2 The QAM manager will mute the spare card RF, reconfigure it using its
original configuration, which will activate the QAM interfaces.
If passive RF combining and manual failback mode is used, there is a
possibility that both the spare and primary card RF signals may overlay for
a brief instant. If the spare card fails or is manually shutdown while in
failover mode, traffic will automatically failback to the primary, even if the
card is out-of-service, in which case traffic will be interrupted and listeners
would be notified which may redistribute video streams to a different D5
UEQ or a different QAM card.
13 Redundancy
GigabitEthernet (GE) MAC Redundancy
The GE MAC Redundancy feature developed for the D5 UEQ in Release 2.6
provided a mechanism to use an unused gigabitEthernet port as a backup
for active gigabitEthernet ports. With four gigabitEthernet ports on the D5
UEQ, it was possible to operate a number of different sparing options, e.g.,
1:1, 2:1, 3:1 and 2x 1:1. The MAC Redundancy feature is transparent to
the services running on the D5 UEQ, meaning that it can be applied to
VOD, SDV (RPC/NGOD), BCAST, and DOCSIS/DEPI applications.
Each of the four gigabitEthernet ports on the D5 UEQ have full Ethernet
MAC functionality. When a gigabitEthernet port is used as a spare, it must
be connected to the same switch/vlan as the gigabitEthernet ports it is
sparing for. The MAC redundancy feature is configured through the use of
the ip bundle gigabitethernet x/y command entered on any
active gigabitEthernet port.
Procedure 14 Configuring gigabitEthernet Redundancy
The D5 UEQ supports 1+1 gigabitEthernet redundancy to match the 1+1
redundancy options available on some M-CMTS cores. When using the
redundancy option, the primary gigabitEthernet port is configured as
normal with IP address details, etc.
To enable redundancy, the ip bundle command is used to explicitly
nominate the backup gigabitEthernet port by specifying the correct giga-
bitEthernet interface.
D5(config-gig-if)#ip bundle gigabitethernet 0/2
D5(config)#
The configuration can be removed simply by issuing a no ip bundle
command within the primary port.
The D5 UEQ also supports modes of 2+1 and 3+1 redundancy options,
where a single gigabitEthernet port can be used as a spare for two or three
other ports (this can be useful when connected via a switch to a remote
M-CMTS core, rather than direct connections). When operating in 2+1 or
3+1, the backup port is allocated to the first primary port that fails.
The Gigabit Ethernet redundancy feature provides control over the
switching back to a primary port if it becomes active again. The ip
bundle policy non-revertive command, available in global config-
uration mode, is used to prevent reverting back to a primary Gigabit
Ethernet port if it becomes available again. The ip bundle policy
revertive command allows for automatic reverting between interfaces.
This command also allows a wait-time to be configured to deal with any
delays that occur during link activation (such as STP link-state resolution).
D5(config)# ip bundle policy non-revertive
D5(config)# ip bundle policy revertive wait-time 20
D5(config)#
It is also possible to force a switchover to the backup Gigabit Ethernet port
by entering the active gigabit Ethernet interface and entering the ip
bundle revert to command. To return from the backup to the active
gigabitEthernet port, enter the ip bundle revert from command.
These commands are immediate commands and are not stored as part of
the configuration.
D5(config-gig-if)#ip bundle revert to <<< switch over to backup
D5(config-gig-if)#
D5(config-gig-if)#ip bundle revert from <<< switch over from backup
D5(config)#
End of procedure
The configuration of the sparing is done on the active gigabitEthernet port,
by nominating the spare gigabitEthernet port to use. Multiple gigabitEth-
ernet ports can nominate the same spare gigabitEthernet port. The
switching over from the active to spare gigabitEthernet port is very fast.
The spare gigabitEthernet port runs hot (i.e., its physical layer is already
active) and when taking over from an active gigabitEthernet port, simply
activates its MAC layer, issues a gratuitous ARP and re-subscribes to all IP
multicast streams based on the active gigabitEthernet port configuration.
NOTE
A spare port must be in shut down mode before it is made part of the IP
bundle. An error will occur while attempting to configure a port that is a
spare for an IP bundle. It must be removed from the bundle being
configured.
Show Command Examples The show ip bundle command is used to display the current configu-
ration of the gigabitEthernet ports and any backup ports setup in IP
bundles. The show interface gigabitethernet x/y command will
display any IP bundle memberships that might exist.
The following are sample outputs for the show ip bundle command
under different scenarios:
13 Redundancy
Scenario 1: Normal operation, no port backed up
IP Bundle Policy: Non-Revertive
IP Bundle:
Members: GIG-1, GIG-2, GIG-3
Spare port is GIG-4, port link status is UP
Currently no port is being backed up
Scenario 2: gigabitEthernet 0/ 2 backed up after its link goes
down
IP Bundle:
Backed up port is GIG-2, port link status is down
Scenario 3: gigabitEthernet 0/ 2 still backed up after its link is
restored (non-revertive mode)
IP Bundle:
Backed up port is GIG-2, port link status is UP
Scenario 4: No port can be backed up as the link to the spare port
is down
IP Bundle:
Spare port is GIG-4, port link status is DOWN
Currently no port is being backed up
The following are sample outputs for the IP bundle status using the show
interface gigabitethernet x/y command:
D5(config)#show interfaces gigabitethernet 0/2 <<<<<Backed up port)
Gi gabi t Et her net 0/ 2 i s admi n up, l i ne pr ot ocol i s up
Har dwar e i s et her ent , addr ess i s 0000. caf e. 858d
SFP i s FI NI SHAR CORP. model FCMJ - 8521- 3
Subi nt er f ace i s up
Oper - St at e l ast changed on: Wed 14- J ul y- 2010 13: 31: 29
I P- Bndl e Por t Cur r ent l y Fai l ed Over t o Gi gabi t Et her net 0/ 4 <<<< i ndi cat ed
t hat i s i s f ai l ed over
I ngr ess management t r af f i c bl ocked
D5(config)#show interfaces gigabitethernet 0/4 <<<<<Spare port)
Gi gabi t Et her net 0/ 4 i s admi n up, l i ne pr ot ocol i s down - Not At t ached
Har dwar e i s et her ent , addr ess i s 0000. caf e. 858f
SFP i s FI NI SHAR CORP. model FCMJ - 8521- 3
Subi nt er f ace i s up admi n up, oper down
I P- Bndl e Por t Cur r ent l y Spar i ng For Por t Gi gabi t Et her net 0/ 2
I ngr ess management t r af f i c bl ocked
Expanded Operation in Release 3.0.1
System Release 3.0.1 provides support for full operation of the existing D5
UEQ features, such as SDV and VOD at the 1488 sessions per WAN
module. When running in dual WAN mode, the D5 UEQ is configured to
have a maximum of 96 QAM channels on WAN 7 and 96 QAM channels on
WAN 8. The bandwidth associated with the 96 QAM channels is close to
4Gbps interfaces.
The 4+1 GE MAC Redundancy feature exploits fastEthernet port 0/1 to add
an extra redundant port. The fastEthernet 0/1 port becomes the redun-
dant backup port to support the four active gigabitEthernet SFP ports.
The fastEthernet port 0/1 can be used as a redundant GE port for any of
the other SFP GE ports. The fastEthernet port, 0/1, is capable of 1Gbps
operation, is fitted with the necessary Phy and magnetic to terminate the
Copper port and is hooked up to a fully functional GE port on the BCM
56500 switch.
The fastEthernet port 0/1 CANNOT be used as an active GE port (i.e., a
video carrying port) because it does not support the same configuration
commands as GE ports, nor is it mapped internally in the D5 UEQ to act as
a video/depi port.
CAUTI ON
The fastEthernet 0/1 port must be configured by the D5 UEQ to
disconnect from the management VLAN when it is assigned as a
redundant GE port. This will prevent any superfluous traffic from being
transmitted into the CPU. The remaining fastEthernet, 0/2, needs to be
reconfigured with the FE 0/1 settings in order to provide the exact same
13 Redundancy
functionality as FE 0/1. Existing installations are only required to move
their NOC network configuration from FE 0/1 to FE 0/2. Failure to move
the configuration will result in losing management access to the D5 UEQ.
The feature introduced in Release 2.6 relied on the D5 UEQ WAN module
being able to detect local link failures on its active gigabitEthernet port and
force the IP/MAC address and IGMP joins from a failed gigabitEthernet
port to the configured redundant gigabitEthernet port. The D5 UEQ WAN
performs all the network refresh functions to ensure that the northbound
switch maintains connectivity to the original Ethernet MAC/IP Address
setup on the failed gigabitEthernet port.
The following diagrams show the connectivity to a northbound switch in
the existing Release 2.6 feature that only allowed the four SFP gigabitEth-
ernet ports to be used.
Figure 13-7: GE MAC Redundancy Normal Mode, External View
The dataplane network learned the IP/MAC addresses of the D5 UEQ giga-
bitEthernet ports using source address learning. The forwarding database
shows the relationship between the IP/MAC address and the network
interfaces on the switch/router.
NOC/Mgt/CAS
Network
(swi t ch/router)
D5 UEQ
Datapl ane Network
(swi t ch/router)
1
2
3
4
G
E
0
/1
G
E
0
/2
G
E
0
/3
G
E
0
/4
F
E
0
/1
M
g
m
t
F
E
0
/2
C
a
s
VIDEO/DEPI
5
CLI/SNMP/CAS
1
0.
1
.1
.1
1
0. 1
.1.2
10.1. 1.3
10.1. 1.1/XX
10.1. 1.2/YY
10.1. 1.3/ZZ
0. 0.0.0/FF
REDUNDANT
Swi t ch Forwardin g
Dat abase
10.1.1.1/MAC XX1
10.1.1.2/MAC YY2
10.1.1.3/MAC ZZ3
Max 3Gbps
The following D5 UEQ configuration is used to setup the above configura-
tion:
D5(config-gig-if)#shutdown
D5(config-gig-if)#interface gigabitethernet 0/1
D5(config-gig-if)#ip address 10.1.1.1 <IP mask>
D5(config-gig-if)#no shutdown
In the event of a failure occurring on GE0/1 (as shown in Figure 13-8), the
GE MAC Redundancy feature identifies the link failure, reconfigures the
internals of the D5 UEQ to connect the GE0/4 interface to GE0/1, then
performs a network refresh (using ARP and IGMP joins) to direct all orig-
inal traffic sent to GE0/1 to GE0/4. The switch/router updates its
forwarding database using the gratuitous ARP issued by the D5 UEQ, and
handles any IP multicast forwarding required based on the IGMP joins
received.
13 Redundancy
Figure 13-8: Failover using GE MAC redundancy, GE0/ 1 moved to
GE0/ 4
Expanding the feature from just the four SFP GE ports to include a fifth GE
port is done by using the fastEthernet 0/1 port. This port is GE capable,
and is directly connected to the same internal switch as the other four SFP
GE ports. The benefit of including the fifth GE port is that the D5 UEQ WAN
module IPP FPGA can reach its maximum throughput (previously, one of
the SFP GE ports had to be sacrificed for redundancy, with a corresponding
drop of 1Gbps throughput).
NOC/Mgt/CAS
Network
(swi t ch/router)
D5 UEQ
Datapl ane Network
(swi t ch/router)
1
2
3
4
G
E
0
/1
G
E
0
/2
G
E
0
/3
G
E
0/
4
F
E
0
/1
M
g
m
t
F
E
0
/2
C
as
VIDEO/DEPI
5
CLI/SNMP/CAS
1
0. 1
.1.1
10
. 1.1
.2
10.1. 1.3
10.1. 1. 1/FAILED
10.1. 1.2
10.1. 1.3
10. 1.1.1/XX
Dat abase af t er ARP
10.1.1.1/ MA C XX4
10.1.1.2/MAC YY2
10.1.1.3/MAC ZZ3
ARP 10.1.1.1/XX
IGMP J OIN
Max 3Gbps
The following diagrams show the external view of the expanded GE MAC
redundancy feature (using five GE ports) (Figure 13-9) and a failover
scenario (Figure 13-10).
Figure 13-9: Expanded GE MAC Redundancy, Failover Scenario
Figure 13-10: Expanded GE MAC Redundancy, External View
NOC/Mgt/CAS
Network
(swi t ch/router)
D5 UEQ
Datapl ane Network
(swi t ch/router)
1
2
3
4
G
E
0
/1
G
E
0
/2
G
E
0
/3
G
E
0/
4
F
E
0
/1
M
g
m
t
FE
0
/2
C
as
VIDEO/DEPI
5
CLI/SNMP/CAS
1
0
.1
.1
.1
10
. 1.1
.2
10.1. 1.3
10.1. 1.1/FAILED
10.1. 1.2
10.1. 1.3
10. 1.1.1/XX
Dat abase af t er ARP
10.1.1.1/ MA C XX5
10.1.1.2/MAC YY2
10.1.1.3/MAC ZZ3
10.1.1.4/MAC PP4
ARP 10.1.1.1/XX
IGMP J OIN
10
.1.1. 4
10.1. 1.4
Max 4Gbps
NOC/Mgt/CAS
Network
(swi t ch/router)
D5 UEQ
Datapl ane Network
(swi t ch/router)
1
2
3
4
G
E
0
/1
G
E
0
/2
G
E
0
/3
G
E
0/
4
F
E
0
/1
M
g
m
t
FE
0
/2
C
as
VIDEO/DEPI
5
CLI/SNMP/CAS
1
0
.1
.1
.1
10
. 1.1
.2
10.1. 1.3
10
.1.1. 4
10.1. 1.1/XX
10.1. 1.2/YY
10.1. 1.3/ZZ
0. 0.0.0/FF
REDUNDANT
Dat abase
10.1.1.1/MAC XX1
10.1.1.2/MAC YY2
10.1.1.3/MAC ZZ3
10.1.1.4/MAC PP4
10.1. 1.4/PP
Max 4Gbps
13 Redundancy
Figure 13-10 shows the configuration of the fastEthernet port as a redun-
dant port. This also shows the four active SFP GE connections to the WAN
module, providing the full 4Gbps of throughput to the WAN module.
The configuration settings for this setup are as follows:
D5(config)#interface fastethernet 0/1
D5(config-if)#shutdown
D5(config-if)#interface gigabitethernet 0/1
D5(config-gig-if)#ip bundle fastethernet 0/1
The GE MAC redundancy includes the option to revert back to a recovered
active port, automatically or manually, and provides timeouts to control
the switchover speed between active and redundant ports. The feature
also supports displaying the status of the ip bundle and logging of state
changes using syslog and SNMP logs.
GQI/ RPC GigE Load Balancing
In Release 3.0.0, GQI operates with two primary GE ports and two backup
GE ports. Sessions are mapped to GE ports based on the input port number
on GQI session requests. Input sessions mapped to 0 (zero) are only
mapped to GE1 which was a non-optimal usage of the D5 UEQ gigabitEth-
ernet input capabilities and sessions mapped to 3 or 4 were mapped
directly back to GE1 and GE2.
In Release 3.0.1, load balancing is added and the current redundancy of
S1, S2 and S3 multicast sources of received sessions will be handled deter-
ministically. It will also provide default CLI configuration to map what is
currently in Release 3.0.0.
The D5 UEQ will allow GE ports to be configured as primary or secondary
ports. This is handled through the use of the GQI SDV related command
video sdv interface gigabitethernet 0/[1-4] [primary |
secondary | none]. This command will have defaults set to match
Release 3.0.0. When using HOT/WARM mode, only primary ports will be
used. When using HOT/HOT mode, primary ports are used for S1 sources,
while secondary ports are used for S2 (or S3) sources. GE interfaces not
required for SDV operation will be marked as none.
Load balancing will be performed when a session presents an input port
=0. When in HOT/WARM mode, the session will be load balanced across
the primary ports only. When in HOT/HOT mode, the session will be load
balanced with source S1 on the primary ports, and load balance with
source S2 on the secondary ports.
HOT/HOT mode will force the use of the secondary ports, and the number
of primary ports must match the number of secondary ports. In the case
of HOT/WARM, sessions are only placed on primary ports (secondary ports
are not used at all).
The use of HOT/WARM support in Release 3.0.1 will also allow the D5 UEQ
to properly support increases in the size of the SDV tier above 2Gbps,
described later in this document.
Release 3.0.0 Operation
The current operation of Release 3.0.0 is described below.
WAN
GE1 GE2 GE3 GE4
PRIMARY SECONDARY
HOT/HOT
(S1,S2,S3,G)
No Load Balance No Load Balance
13 Redundancy
A session is mapped to an interface based on the input port number
received in the GQI request. Values 1 and 2 are mapped to GE1 and GE2,
while values 3 and 4 are mapped to GE1 and GE2. Value 0 is mapped to
GE1 only, which is incorrect, as this value indicates load balancing over the
PRIMARY ports, but results in the D5 UEQ loading up GE1 with all sessions.
Since the default is HOT/WARM, the active source is joined to GE1 or GE2,
while a backup source is mapped to GE3 or GE4. There are no rules in the
current code to prevent S2 or S3 from appearing on GE1 or GE2 which is
a problem for segregating session sources to specific interfaces.
The current 3.0.0 scheme also has no control over what ports are
PRIMARY or what are SECONDARY, having a default assignment of ports
and no way to prevent a port from being used by SDV (especially in the
case of VOD or M-CMTS).
When operating GQI Shell Sessions, the D5 UEQ has always been required
to map QAM RF ports to explicit GE ports as there was no input port
number supplied with the GQI shell session requests. The introduction of
load balancing will enable this explicit mapping to be ignored, and allow
better utilization of GE bandwidth based on committed load.
Release 3.0.1 Behavior
The following describes the operation of Release 3.0.1 with the introduc-
tion of proper HOT/HOT and HOT/WARM handling, GE port assignment,
and load-balancing. An additional option to force load balancing is also
offered (basically setting input port values of 1, 2, 3 or 4 to 0 when
received). GE port failure is also addressed, allowing the load balancing to
overcome a lost GE port.
The default operation of 3.0.1 is to mostly match how Release 3.0.0 was
configured with the addition of proper source segregation when using
HOT/HOT, and proper load balancing within the primary and secondary
ports.
The D5 UEQ is required to support an SDV CLI option that maps a GE port
as PRIMARY, SECONDARY or NONE.
The primary setting means that a GE port will be used for S1 source in
HOT/HOT mode, or S1, S2 or S3 source in HOT/WARM mode. The
secondary setting means that a GE port will be used for S2, S3 source in
HOT/HOT mode, and not use in HOT/WARM mode. The none setting indi-
cates that the GE port will not be used in GQI SDV.
The assignment of GE ports as PRIMARY, SECONDARY or NONE can only
be performed when GQI SDV is disabled.
This approach ensures that no configuration changes can occur on GE port
assignment for SDV when SDV is up and running.
Load Balancing Support
Load balancing of sessions will apply to both HOT/HOT and HOT/WARM
modes of operation.
Load balancing determines the lowest loaded GE port on which to place a
session. Multiple GE ports may exist in the PRIMARY or SECONDARY maps.
Session counts and total session bandwidth gets maintained per GE port,
incremented due to session creates, decremented due to session deletes.
The lowest loaded GE port is chosen when adding a new session to the D5
UEQ. The session remains associated with the assigned GE port until the
session is deleted or in the case of HOT/WARM until a GE port failure
occurs (and a subsequent re-balance occurs).
HOT/ HOT and HOT/ WARM Support
The current SDV HOT/HOT and HOT/WARM configuration options are
used to control GQI behavior.
When running in HOT/HOT mode, only GE ports marked as PRIMARY will
carry S1 source, while S2 and S3 sources will be mapped to SECONDARY
GE ports. In HOT/HOT mode, the number of primary and secondary GE
ports must be equal.
In HOT/HOT mode, two load balance operations are performed. The first
load balance operation relates to placing the S1 source on the PRIMARY
GE ports. The second load balance operation puts the S2 source on the
SECONDARY GE ports. The GQI SDV system fails over from S1 to S2 in the
case of a S1 source failure or PRIMARY GE failure. The GQI SDV system
fails back to S1 only when S2 fails or the SECONDARY GE port fails.
In HOT/WARM mode, only one load balance operation is performed. The
session remains associated with the GE port until the session is deleted or
the GE port fails (resulting in a re-balance). When a source fails, the D5
UEQ maintains the session on the same GE port, but forces a switch-over
to the next available source. This means the failed multicast session must
be removed before the next available multicast source is joined, on the
same GE port. This approach maintains that the total bandwidth on the GE
port remains the same (and no load balancing is required).
13 Redundancy
HOT/ WARM Link Redundancy
In HOT/WARM, the D5 UEQ has the option of load balancing all sessions
associated with a failed GE to the other available PRIMARY GE ports. This
means that a certain amount of path redundancy is available, without
requiring a full N+N redundancy setup.
Forced Load Balancing
Load Balancing in general requires an input port number of 0 to be
supplied in the case of sessions created by CreateSession, or is always
enabled for shell sessions since these sessions are created without an
input port being specified. It is also useful to allow the D5 UEQ to ignore
the supplied input port number, and perform FORCED load balancing. In
this mode, which only effects sessions created by CreateSession, any input
port not equal to 0 is set to 0, and the D5 UEQ takes over responsibility of
mapping the sessions to the available PRIMARY or SECONDARY ports
(depending on the redundancy mode, HOT/WARM vs. HOT/HOT).
Support for 2+ Gbps SDV Tier
As operators increase the number of programs (both SD and HD) in the
available SDV tier, the associated bandwidths also increase. This has a
direct impact on how an EQAM can continue to operate within the SDV
environment. If the EQAM does not have enough GE ports to match the
SDV tier, the EQAM may not join and deliver all the content requested by
the SDV users. In HOT/HOT, a maximum SDV tier of two Gigabits is
supported, primarily because the four GE interfaces are split as two
Primary and two Secondary GE interfaces. In HOT/HOT redundancy, it is
not possible to exceed two gigabits as there are only two GE interfaces.
Even in a worst case scenario, where all the SDV content is requested by
subscribers, the D5 UEQ can only support an SDV tier size of at most two
Gigabits.
Release 3.0.1 allows for HOT/WARM redundancy over all interfaces, in the
event the SDV tier exceeds two Gigabits. The D5 UEQ can perform load
balancing automatically when an input port=0 is supplied by the SDV
Server, or force load balancing itself. The use of multiple GE ports in
HOT/WARM with load-balancing allows the D5 UEQ to overcome link fail-
ures and re-balance SDV sessions over remaining active GE ports
(providing some link/path redundancy, without the need to use HOT/HOT
mode).
CLI Support
The CLI changes are limited to four commands:
video sdv policy-active [hot-hot| hot-warm]
This command is already part of the D5 UEQ CLI commands for controlling
SDV operation. The use of HOT/HOT will enable HOT/HOT operation in
GQI using both primary and secondary assigned GE ports, while
HOT/WARM will only use primary assigned GE ports.
video sdv interface gigabitethernet 0/[1-4]
[primary|secondary|none]
This command allows any of the four GE ports to be utilized for primary or
secondary use for GQI, or excluded altogether from GQI usage.
[no]video sdv policy-load-balance forced
This command overrides incoming input port numbers such that they are
treated as 0 by the GQI SDV system. Normal load balancing, where
sessions are presented with input port=0, are not affected by this
command. Using this option allows the D5 UEQ to entirely control the
session placement entirely, and enables more control of GE failure. E.g., if
USRM signaled sessions are placed on specific GEs, they cant be moved.
If the D5 UEQ removes this control from the USRM, it can place sessions
on any active PRIMARY GE port, and recover sessions to active PRIMARY
GE port from failed PRIMARY GE ports). The [no] option forces the D5 UEQ
to obey the session input ports supplied by the SDV Server.
show video sdv load-balance [verbose]
This command is used to display the SDV load-balance status of the four
GE Ports, their link-status, their assignment as primary, secondary or
none, and the counts of assigned SDV sessions and total bandwidth per
GE port. The verbose command will display the same basic information,
along with details of each session assigned to the GE port and bandwidth.
show video sdv load-balance
Oper at i on i s HOT/ HOT
GE 0/ 1 GE 0/ 2 GE 0/ 3 GE 0/ 4
Li nkSt at us UP UP UP UP
Assi gnment PRI MARY PRI MARY SECONDARY SECONDARY
SDV Count 23 25 24 24
SDV BW 203123 232001 220020 230002
13 Redundancy
show video sdv load-balance verbose
Oper at i on i s HOT/ HOT
GE 0/ 1 GE 0/ 2 GE 0/ 3 GE 0/ 4
Assi gnment PRI MARY PRI MARY SECONDARY SECONDARY
SDV Count 23 25 24 24
SDV BW 203123 232001 220020 230002
20012: G=232. 1. 11. 2: 1- 192. 139. 2. 1( 1) : 3- 192. 139. 2. 21( 2)
201123: G=232. 1. 23. 3: 2- 192. 133. 2. 1( 1) : 4- 193. 139. 2. 33( 2)
show video sdv load-balance verbose
Oper at i on i s HOT/ WARM
GE 0/ 1 GE 0/ 2 GE 0/ 3 GE 0/ 4
Assi gnment PRI MARY PRI MARY PRI MARY NONE
SDV Count 23 25 24 -
SDV BW 203123 232001 220020 -
20012: G=232. 1. 11. 2: 1- 192. 139. 2. 1( 1)
201123: G=232. 1. 23. 3: 2- 192. 133. 2. 1( 2)
The above shows a SessionID, followed by Multicast Group address
(G=232.1.11.2), followed by the GE port assigned for S1 in the case of
HOT/WARM and its source IP address, and S2 in the case of HOT/WARM
and its source IP address.
Overview of Options Release 3.0.0 to 3.0.1
Release 3.0.1 Default Operation (changes are (a) load balance in
PRI/SEC groups (b) GE1+2 in PRI, GE3+4 in SEC, (c) isolation of S1 in PRI,
S2 in SEC (d) potential for HOT/WARM for (S2, S3, G) in SEC.
D5(config)#video sdv interface gigabitethernet 0/1 primary
D5(config)#video sdv interface gigabitethernet 0/3 secondary
D5(config)#video sdv interface gigabitethernet 0/4 secondary
D5(config)#video sdv policy-active hot-hot
!load balance of input-port=0 will be on by default
Release 3.0.1 HOT/ WARM Operation (a) load balance only in PRI
groups (b) GE1+2 in PRI group (c) GE3+4 in SEC group UNUSED (d) (S1,
S2, S3 ,G) session streams maintained on 1 GE port
D5(config)#video sdv interface gigabitethernet 0/3 none
D5(config)#video sdv interface gigabitethernet 0/4 none
D5(config)#video sdv policy-active hot-warm
WAN
GE1 GE2 GE3 GE4
PRIMARY SECONDARY
HOT/HOT
Load Balance Load Balance
S1,G S2,G
WAN
GE1 GE2 GE3 GE4
PRIMARY SECONDARY
Load Balance
NotUsed
HOT/WARM
13 Redundancy
Release 3.0.1 HOT/ WARM Operation (a) load balance only in PRI
groups (b) GE1+2+3+4 in PRI group (c) (S1, S2, S3, G) session streams
maintained on 1 GE port
Release 3.0.1 HOT/ WARM Forced Load Balance Operation (a)
load balance only in PRI groups (b) GE1+2+3+4 in PRI group (c) (S1, S2,
S3, G) session streams maintained on 1 GE port (d) input port number
ignored, D5 UEQ takes over load balance
D5(config)#video sdv policy-load-balance forced
!load balance of input-port=N will be converted to 0 automatically
WAN
GE1 GE2 GE3 GE4
PRIMARY
Load Balance
HOT/WARM
WAN
GE1 GE2 GE3 GE4
PRIMARY
FORCED Load Balance
HOT/WARM
Release 3.0.1 HOT/ WARM Forced Load Balance operation with
Recovery (a) load balance only in PRI groups (b) GE1+2+3 +4 in PRI
group (c) (S1, S2, S3, G) session streams maintained on 1 GE port (d)
input port number ignored, D5 takes over load balance (e) GE failure
forces load balance recovery, moves GE3 sessions to remaining GE ports
D5(config)#video sdv policy-load-balance forced
!load balance of input-port=N will be converted to 0 automatically
!failure of primary GE port results in re-load-balance to active GE ports
GigE Link Trunking Redundancy
Link aggregation redundancy, otherwise known as trunking, allows the
logical grouping of a number of individual Ethernet interfaces into a larger,
combined bandwidth trunk, for the purposes of redundancy, speed and
increased network reliability. The total bandwidth of a trunk is equivalent
to the aggregate of all the physical Ethernet interfaces (links) in that trunk.
WAN
GE1 GE2 GE3 GE4
PRIMARY
FORCED Load Balance
HOT/WARM
13 Redundancy
Figure 13-11: GigE Link Trunking Redundancy Example
Trunking accomplishes high network availability, load balancing and
redundancy by automatically redirecting traffic to surviving links of a trunk.
If one or more physical links in that trunk are disabled, and then immedi-
ately directs them back, should the formally failed links again become
available.
SFP GigE Trunking The D5 UEQ can utilize up to four SFP GigE ports in a video trunk to create
a single logical link capable of delivering four Gbps or other redundancy
options such as 3:1, 2:2, 2:1, and 2 of 1:1. To support this, the D5 UEQ
CLI allows the manual configuration of gigabitethernet ports into static
trunking links.
Configuring a Trunk Configuring a trunk consists of creating a port channel, adding the desired
GigE ports to that port channel including a standby port, adding a loop-
back interface for management and to carry the IP address of the trunk.
The procedure is as follows:
Procedure 13-1 Creating a GigE Link Video Trunk
1 Enter the configuration mode and issue the following command to create
a port channel:
D5(config)#interface port-channel 1
Gigabit Ethernet 0/1
Gigabit Ethernet 0/2
Trunk
Group 1
QAMS
2 Add GigE 0/1 to the port-channel:
D5(config-if)#channel-group 1
D5(config-if)#no shutdown
3 Add GigE 0/2 to the port channel:
D5(config-if)#channel-group 1
4 Add GigE 0/3 to the port channel in the standby mode:
D5(config-if)#channel-group 1 standby
5 In order to modify the port-channels interface, a loopback configuration
is created next:
D5(config-gig-if)#interface loopback 1
D5(config-gig-if)#channel-group 1
D5(config-if)#management-access
D5(config-if)#ip address 10.250.24.42 255.255.255.0
D5(config-if)#exit
End of procedure
Show I nterface Command The show interface command displays a summary of the channel
configuration.
Procedure 13-2 Display I nterface Summary
In the following example, the gigabitethernet port 0/3 is not active but is
in standby mode. If either gigabitethernet port 0/2 or gigabitethernet port
0/1 fails, then gigabitethernet port 0/3 will become active
D5(config)#show interface port-channel 1
Por t - Channel 1 i s up, l i ne pr ot ocol i s up - At t ached
13 Redundancy
Har dwar e i s FEChannel , addr ess i s 0019. 17132. 169194
No. of member s i n t hi s channel : 4
Member 1: Loopback. 1 ( Act i ve)
Member 2: Gi gabi t Et her net 0/ 3. 0
Member 3: Gi gabi t Et her net 0/ 2. 0 ( Act i ve)
Member 4: Gi gabi t Et her net 0/ 1. 0 ( Act i ve)
I P addr esses: 10. 250. 24. 42/ 24
Encapsul at i on Tags: None Set
Por t Sel ect i on Cr i t er i a: Def aul t Set t i ng
Recei ved 0 br oadcast s, 0 gi ant s
0 out put er r or s, 0 col l i si ons, 0 excessi ve col l i si ons
End of procedure
14. M-CMTS Support
Topics Page
Overview 1
System Overview 2
DEPI DMPT Mode 3
DEPI PSP Mode 3
DEPI L2TP Control Plane 5
Primary/ Secondary Downstreams 4
UDP/ I P and L2TPv3 5
Downstream Channel Configuration 5
Configuration Examples 6
Operational Parameters/ Limitations 18
Overview
With the Release 3.0, support of a Modular Cable Modem Termination
System (M-CMTS) on the D5 UEQ with D-MPT/L2TPv3, D-MPT/UDP and
the DEPI L2TP Control Plane (for D-MPT) has been added. DOCSIS Timing
Interface (DTI) support already exists on the D5 UEQ hardware as part of
M-CMTS core and plays a critical role as it drives the internal timing of the
M-CMTS core and the downstream EdgeQAMs responsible for sending the
received DOCSIS 2.0 and 3.0 traffic over RF.
14 M-CMTS Support
The diagram below shows how the D5 UEQ communicates with a Cisco
10K CMTS, with a DOCSIS Timing & Control Card (DTCC) for DTI and a
SPA Interface Processor (SIP) module with Shared Port Adapter (SPA)
cards for handling M-CMTS downstream channels. The addition of the
L2TP Control does not affect this diagram

Figure 1: Example of the D5 UEQ in an M-CMTS Configuration
System Overview
The D5 UEQ supports DTI, Downstream External PHY Interface (DEPI) and
DRFI/D3.0 RF specifications. It is capable of dual-DTI server operation
(when equipped with the Dual DTI WAN Part Number 728905) and also
supports redundant Gigabit Ethernet ports for the reception of DEPI traffic.
It receives M-CMTS DEPI traffic over its Gigabit Ethernet link from a
remote M-CMTS Core (Cisco 10K). DEPI traffic consists of the DOCSIS
control plane traffic to setup dynamic sessions and DEPI data/MAC traffic
that has not passed through the final processing and RF up-conversion-
stage performed by a traditional CMTS. In the case of the M-CMTS opera-
tion, when the DEPI control plane is active, the M-CMTS core establishes
an L2TP control plane connection to setup and control DEPI data plane
session on the D5 UEQ. The M-CMTS core transmits DOCSIS traffic to a
remote D5 UEQ M-CMTS EdgeQAM to perform the necessary final
processing and RF up-conversion.
All of the D5 UEQ Gigabit Ethernet links may be used to carry DEPI traffic,
and all of the QAM channels in the D5 UEQ can be used to perform the
final processing and up-conversion of DEPI traffic (as normally done by a
traditional CMTS).
DEPI traffic can be sent by an M-CMTS Core using one of two different
formats, DOCSIS MPEG-TS (DMPT) traffic or Packet Streaming Protocol
(PSP) traffic. The current release of the D5 UEQ supports DMPT traffic,
matching the capability of available/existing M-CMTS core devices. The
establishment of DEPI data plane sessions can be statically managed
directly on each of the M-CMTS devices (core/EQAM) or dynamically
managed by the M-CMTS core to the EQAM via the DEPI L2TP control
plane interface.
DEPI DMPT Mode
DEPI DMPT mode carries DOCSIS data and MAC frames as MPEG packets
as a result of the MPEG segmentation function performed on DOCSIS
frames in the M-CMTS Core device. The finalized MPEG packets (each with
their PID set to 0x1FFE), are transported over IP to the D5 UEQ using two
different approaches, either directly in UDP/IP packets (similar to tradi-
tional VOD/SDV traffic) or within L2TPv3 packets. Each individual DEPI
DMPT flow is associated with a single QAM output channel. No QoS is
applied by the M-CMTS EdgeQAM to DEPI DMPT traffic as the M-CMTS
Core already performed QoS before the MPEG segmentation function.
Any DEPI DMPT traffic that carries DOCSIS timing (specifically the DOCSIS
SYNC MAC message) must be corrected by the D5 UEQ before being
modulated and up-converted. Correcting the DOCSIS timestamp (within
the DOCSIS SYNC MAC messages) requires that the D5 UEQ shares iden-
tical DOCSIS timestamp information with the M-CMTS Core. Accurate
Downstream/Upstream time synchronization is essential for DOCSIS to
operate. Rather than distribute the M-CMTS core timestamp, the M-CMTS
specifications provides a DOCSIS Timing Interface, DTI, that uses a timing
server to distribute a common timestamp to a set of clients. The D5 UEQ
and the M-CMTS Core act as DTI clients connected to the DTI server (a
limit of 200m exists between client/server connections). The DTI server
operates the DTI protocol to ensure that the 10.24MHz clock and DOCSIS
timestamp get delivered accurately to each client. As a result the D5 UEQ
has an identical copy of the DOCSIS timestamp and is able to correct the
DOCSIS SYNC message to ensure that the DOCSIS MAC system can
operate within this distributed environment.
DEPI PSP Mode PSP mode is currently not supported as part of D5 UEQ System.
14 M-CMTS Support
DEPI L2TP Control Plane
DEPI supports a dynamic control plane interface over L2TP that allows an
M-CMTS core to request an EQAM to setup DEPI dynamic session
endpoints to which the M-CMTS core transmits its DEPI data/MAC traffic.
A dynamic session maps directly to a single QAM channel on an EQAM.
Similar to static DEPI sessions, the M-CMTS core must identify the
frequency, power, interleaver, annex, etc of each RF channel it wants to
use. For dynamic sessions, the M-CMTS core must also identify the TSIDs
(Transport Stream IDentifier) of the remote QAM channels that will be
used, and signals this TSID as part of the dynamic session setup requests.
The M-CMTS Core acts as the client requesting DEPI sessions from the
EQAM server.
The DEPI L2TP Control Protocol requires a unique control connection to be
established from an M-CMTS core to a gigabitEthernet input port on the
EQAM. The EQAM must operate at least one control plane connection per
gigabitEthernet port (The D5 UEQ can support >1 control plane per giga-
bitEthernet port in order to allow multiple M-CMTS core devices to share a
gigabitEthernet port if necessary).
The DEPI L2TP control plane requires a control connection to be estab-
lished between the Core and the EQAM (SCCRQ->SCCRQ->SCCN). Once
setup, the Core signals session setup requests to the EQAM, one per QAM
channel to establish DEPI dynamic sessions (ICRQ->ICRP->ICCN->SLI).
The session setup establishes an L2TP tunnel between the M-CMTS core
and the EQAM, and can optionally reconfigure the QAM/RF parameters of
the remote QAM channel on the EQAM. The EQAM is dynamically config-
ured with an L2TP SessionID on the connected gigabitEthernet port during
the session setup. (Static and dynamic L2TP sessions are treated the same
from a data traffic processing perspective on the D5 UEQ). Once the
dynamic sessions are established, the M-CMTS core can transmit to the D5
UEQ that classifies and forwards the received DEPI traffic to the dynami-
cally assigned QAM channel for final stage processing (DTI overwrite)
before transmitting to RF.
Primary/ Secondary Downstreams
A QAM channel receiving DEPI DMPT traffic with DOCSIS timing is known
as a primary downstream channel. A QAM channel receiving DEPI DMPT
traffic WITHOUT DOCSIS timing is known as a secondary downstream
channel. DOCSIS 1.0/1.1/2.0 CMs can only operate with primary down-
stream channels, while DOCSIS 3.0 modems require a minimum of one
primary downstream channel (the remaining downstream channels used
by a 3.0 modem can be primary or secondary). The D5 UEQ also supports
wideband mode of operation where the M-CMTS Core generates the
primary downstream QAM channel locally, and relies on the D5 UEQ to
handle the secondary downstream QAM channels.
UDP/ IP and L2TPv3
The carriage of DMPT packets over IP is possible using UDP/IP or L2TPv3.
In the case of UDP/IP, the DMPT MPEG traffic is placed in an IP packet
addressed to a Gigabit Ethernet link on the D5 UEQ (via the destination IP
address). The destination UDP port of the IP packet is mapped to a specific
output QAM channel on the D5 UEQ. All traffic received by the D5 UEQ on
this UDP/IP combination is passed to the correct QAM channel for DOCSIS
timestamp correction (if necessary) and RF up-conversion. In the case of
L2TPv3, the DMPT MPEG traffic is placed in an L2TPv3 packet containing
an L2TPv3 Session ID and an L2TPv3 DEPI DMPT Sub-layer header
(comprising of some control fields and a separate sequence number). The
L2TPv3 traffic is typically sent as native traffic, without any UDP header,
using IP protocol type 115. (carriage using L2TPv3/UDP is also supported).
All field trials to date have identified that native L2TPv3 is in use (no
evidence of L2TPv3/UDP).
With both cases, static mappings can be configured on the D5 UEQ or the
DEPI L2TP control plane can be used. For static mappings, the D5 UEQ
provides a set of commands, detailed below that are used to manage these
mappings to QAM channels. The UDP/IP or SessionID/IP settings config-
ured on the D5 UEQ must be used by the M-CMTS Core to setup its
mappings.
In both cases, as IP packet fragmentation is actively avoided, a maximum
of seven MPEG packets (when using an MTU of 1500) are carried. For
dynamic sessions, a depi control-plane configuration option is provided
via the CLI and WEB to configure the L2TP endpoint configuration. When
the DEPI control plane is in use, any previously configured static mappings
present on QAM channels must be removed.
Downstream Channel Configuration
Like all EdgeQAMs, the D5 UEQ allows downstream QAM parameters to be
configured. An operator must ensure that the M-CMTS core downstream
QAM configuration matches the configuration of the remote EdgeQAM.
This can be achieved by cross-checking configurations; specifically,
ensuring that the L2TPv3 session ID assigned to the M-CMTS core RF
channel details matches the EdgeQAM session ID and RF parameter
details.
In the case of the DEPI Control Plane, the operator must check that the
TSIDs configured on the M-CMTS Core downstream configuration matches
the desired QAM channel on the EQAM. Note that the configuration of all
the RF parameters can be dynamically modified by the M-CMTS Core when
using the DEPI control plane. This removes the need or checking of RF
configurations associated with the static mode of operation.
14 M-CMTS Support
Configuration Examples
The following configuration examples identify the basic D5 UEQ configura-
tion to setup the downstream QAM and DEPI settings from a static mode
of operation.
NOTE
For both static and dynamic, the QAM channels must be configured on
the D5 UEQ with some RF parameters, as well as being enabled/powered
up.
NOTE
The DTI procedure applies to both static and dynamic configurations.
Procedure 14-1 Setting up the downstream QAM settings
In this example, we are setting up four downstream QAM channels for
Annex-A operation at 256 QAM modulation transmitting at 548MHz,
556MHz, 564MHz and 572MHz. The channels are all transmitted with a
power output of 50 dBmV.
NOTE
There is no requirement to address interleaver settings with Annex-A, as
there is only a single interleaver setting (I=12, J =17) allowed. For Annex-
B, the interleaver setting must match the CMTS configuration.
Starting in configuration mode:

D5(config)#interface qam 1
D5(config-if)no shut
D5(config-if)exit
D5(config-qam-port)#video annex a
D5(config-qam-port)#video format 256
D5(config-qam-port)#video frequency 548000000
D5(config-qam-port)#video power 50
# Note: The video spectral-inversion command listed below is not required and
# should not be used in Annex-B. This command is required for Annex A only.
D5(config-qam-port)#video spectral-inversion
D5(config-qam-port)#channel mode quad
D5(config-qam-port)#no shutdown
D5(config-qam-chan)#no shutdown
D5(config-qam-chan)#exit
D5(config)#
The channel mode quad setting in the above configuration sets up four
adjacent QAM outputs from the QAM 1/1 F-connector, starting at 548MHz.
Channel mode single, dual and hex are also allowed (hex is only available
for Annex B).
End of procedure
Procedure 14-2 Setting up DEPI addressing
To setup DEPI addressing associated with each QAM channel, the
following configuration for each QAM channel is required. The number
after dmpt is the dest-ip address which identifies the ingress gigabitEth-
ernet port on the D5 UEQ that the L2TPv3 DEPI stream must be sent to
(this is used to manually allocate input bandwidth over the available giga-
14 M-CMTS Support
bitEthernet ports) followed by the L2TPv3 sessionI D for the particular
QAM channel. Of course, the following commands can be entered when
enabling the individual QAM channels in the previous step.
D5(config-qam-chan)#depi dmpt dest-ip 10.30.4.99 sessionId 49162
D5(config)#
The above configuration is setup for four primary downstream channels
signaled using the L2TPv3 data plane.
To use UDP as the transport, the following commands are required to
setup the data path between the ingress gigabitEthernet ports and the
output QAM channels:
D5(config-qam-chan)#depi dmpt dest-ip 10.30.4.99 udp 49162
D5(config)#
End of procedure
NOTE
UDP/ L2TP RulesIf UDP or L2TPv3 DEPI sessions are not configured
correctly to match what is being sent, and a DEPI rule for UDP port 1-
65535 was created, that rule will also allow an L2TPv3 sessionID of 1-
65535 to pass.
Example:
D5(config-qam-chan)#depi dmpt dest-ip N.N.N.N udp 1000
A backup rule of depi dmpt dest-ip 1234 sessionid 1000 will
also be configured. If the user sends in UDP 1000, the traffic matches the
rules. If the system is misconfigured, traffic using L2TPv3 sessionId 1000
would still pass.
The reverse is also true.
Example:
D5(config-qam-chan)#depi dmpt dest-ip N.N.N.N sessionid 1000
A backup rule of depi dmpt dest-ip 1234 udp 1000 will also be
configured. If the user sends in L2TPv3 traffic using sessionID 1000, the
traffic matches the rules. If the system is misconfigured, traffic using UDP
port 1000 would still pass.
Procedure 14-3 Configuring gigabitEthernet Redundancy
The D5 UEQ supports 1+1 gigabitEthernet redundancy to match the 1+1
redundancy options available on some M-CMTS cores. When using the
redundancy option, the primary gigabitEthernet port is configured as
normal with IP address details, etc.
To enable redundancy, the ip bundle command is used to explicitly
nominate the backup gigabitEthernet port by specifying the correct giga-
bitEthernet interface.
D5(config)#
End of procedure
The configuration can be removed simply by issuing a no ip bundle
command within the primary port.
The D5 UEQ also supports modes of 2+1, 3+1 and 4 + 1 redundancy
options, where a single gigabitEthernet port can be used as a spare for
two, three or four other ports (this can be useful when connected via a
switch to a remote M-CMTS core, rather than direct connections). When
operating in 2+1, 3+1 or 4+1, the backup port is allocated to the first
primary port that fails. The D5 UEQ will automatically switchback to the
14 M-CMTS Support
primary port if it recovers, to ensure that the backup port continues to be
available. For complete information, refer to GigabitEthernet (GE) MAC
Redundancy, page 13-14.
The Gigabit Ethernet redundancy feature provides control over the
switching back to a primary port if it becomes active again. The ip
bundle policy non-revertive command, available in global config-
uration mode, is used to prevent reverting back to a primary Gigabit
Ethernet port if it becomes available again. The ip bundle policy
revertive command allows automatic reverting between interfaces to
occur. This command also allows a wait-time to be configured to deal
with any delays that occur during link activation (such as STP link-state
resolution).
D5_2(config)# ip bundle policy non-revertive
D5_2(config)# ip bundle policy revertive wait-time 20
D5_2(config)#
It is also possible to force a switchover to the backup Gigabit Ethernet port
by entering the active gigabit Ethernet interface and entering the ip
bundle revert to command. To return from the backup to the active
gigabitEthernet port, enter the ip bundle revert from command.
These commands are immediate commands and are not stored as part of
the configuration.
D5(onfig)#interface gigabitethernet 0/1
D5(config-gig-if)#ip bundle revert to <<< switch over to backup
D5(config-gig-if)#
D5(config-gig-if)#ip bundle revert from <<< switch over from backup
D5(config)#
End of procedure
The show ip bundles command is used to display the current configu-
ration of the gigabitEthernet ports and any backup ports setup in ip
bundles. The show interface gigabitEthernet x/y.z command
will display the any ip bundle memberships that might exist.
Procedure 14-4 Configuring L2TP Control Plane
As per the static configuration, the QAM channels that are assigned for M-
CMTS operation must be configured enabled (no shutdown on each QAM
channel), and configured with some RF configuration values. It makes
sense to set the RF parameters to match the typical DOCSIS configuration
in use, as this is likely to be reused for M-CMTS.
An additional parameter, the TSID, not normally associated with DOCSIS
must also be configured for each QAM channel. This parameter is a 16-bit
value, with valid values from 1-65535. The value is typically unique per
QAM channel within an operators network; however, for DEPI control
plane operation, the uniqueness requirement is only necessary per EQAM.
The D5 UEQ QAM channels are addressed using the naming convention
QAM X/Y.Z, where X is the slot number (starting at 1, top left), Y is the
physical port number (starting at 1, left to right) and Z is the
logical/channel number on the physical port (starting at 1). So, QAM 1/1.1
would map to the first QAM channel on the first port of the QAM module
in slot 1. The D5 UEQ assigns default TSID values to every QAM channel
present in the chassis. The D5 UEQ allocates TSID values to QAM channels
by following the X/Y.Z nomenclature, so QAM 1/1.1 would have TSID
10101, and QAM 4/1.3 would have a default TSID of 40103. All the QAM
channels have similar default TSID assignments. This numbering approach
simplifies QAM channel identification, and also ensures that the TSIDs are
unique within a D5 UEQ, even when fully populated with QAM modules.
The TSID can be changed, if required, by using the video tsid <val>
command on any of the D5 UEQ QAM channels.
14 M-CMTS Support
The DEPI control plane must be enabled on the D5 UEQ to allow an M-
CMTS core connect to it. The D5 UEQ has a DEPI control-plane configura-
tion available on the CLI and the WEB.
D5#config t
D5(config)#depi control-plane
D5(config-depi)#?
authentication - L2TP authentication
depi - Configure DEPI
end - Exit configuration mode
exit - Exit Mode / CLI
hello-interval - L2TP hello-interval
ip-header - Choose how IP headers are populated
lock-qam-bandwidth - Prevents video from sharing DEPI QAM-channels
lock-qam-rf - Controls QAM RF attribute locking for the control-plane
max-connections - Maximum number of DEPI connections
mtu - Maximum Transmission Unit
no -
protocol - Choose which L2TP layers to enable
qam-set-failure - Controls how the control-plane handles failed RF sets
retry - Change packet retry behaviour
router-id - L2TP router-id field
shared-secret-1 - Add shared-secret key
shared-secret-2 - Add shared-secret key
shutdown - Disable the DEPI control-plane
sli - Set Link Info behaviour
vendor-name - L2TP vendor-name field
video - video configuration
D5_2(config-depi)#no shutdown
D5_2(config-depi)#exit
D5_2(config)#
The default settings of the DEPI control plane to not need to be modified
in order to get it working with a remote M-CMTS core.
To enable the debugging of the DEPI control plane, the following CLI
commands have been added, and should be used if issues arise during the
operation of the DEPI control plane
D5_2#debug module depi control-plane ?
authentication - L2TP authentication
avp - L2TP AVP
connection - L2TP connection
database - L2TP database
gas - GAS layer
session - L2TP session
To setup the full debugging of the DEPI control plane, enter the following
sequence of commands
configure debug cli
debug module depi control-plane connection 5
debug module depi control-plane session 5
debug module depi control-plane avp 5
term mon
In order to disconnect established DEPI control plane connections and
sessions, the following commands are available.
depi disconnect connection 20
- del et e DEPI conn#20 gr acef ul l y ( and al l i t s sessi ons)
depi disconnect connection 20 session 10
- del et e DEPI sess#10 on conn#20 gr acef ul l y
depi disconnect connection 20 force
- del et e DEPI conn#20 and al l sessi ons i mmedi at el y
depi disconnect connection 20 session 10 force
- del et e DEPI sess#10 on conn#20 i mmedi at el y
14 M-CMTS Support
Status commands
Once the D5 UEQ is configured for DEPI and is receiving input from a
remote M-CMTS core, the following diagnostic commands are available for
displaying the current configuration and running status of the system.
D5 UEQ DEPI Status To determine the configuration and status of the input DEPI sessions and
any errors that may have occurred, use the following command:
show depi sessions [sessionId] [verbose]
Following are examples of this command and output that may be received.
D5#show depi sessions
SESSI ON UDP SRC- I P DEST- I P QAM
49162 - - 10. 30. 4. 99 1/ 1. 1
49163 - - 10. 30. 4. 99 1/ 1. 2
49164 - - 10. 30. 4. 99 1/ 1. 3
49164 - - 10. 30. 4. 99 1/ 1. 4
D5#show depi sessions verbose
SESSI ON UDP SRC- I P DEST- I P QAM PKT_COUNT SEQ_ERROR
49162 - - 10. 30. 4. 99 1/ 1. 1 3927218424 1
49163 - - 10. 30. 4. 99 1/ 1. 2 3927217864 0
49164 - - 10. 30. 4. 99 1/ 1. 3 3927218375 0
49165 - - 10. 30. 4. 99 1/ 1. 4 3927218284 0
Dual DOCSIS Timing Interface (DTI)
DTI WAN).
NOTE
This adapter will not work on the Single DTI WAN (Part Number 722012).
Configuring Dual DTI
Operation
When operating in auto (redundant) mode, the D5 UEQ will allow you to
configure the behavior of the DTI port during failover or recovery. The
revertive command option, if enabled, will force a switchover to the
primary DTI link whenever it recovers after a failure.
To disable this mode and force the D5 UEQ to remain on its current DTI
link without switching back to any recovering links, the no revertive
command should be used (as shown in the following example).
To enable the redundant setup, the following commands should be
entered:
D5(config)#interface dti
D5(config-dti)#auto
D5(config-dti)#no revertive
D5(config-dti)#no shutdown
D5(config-dti)#exit
D5(config)#
Procedure 14-5 Setting up the DTI configuration
The D5 UEQ automatically performs the SYNC timestamp overwrite using
the DOCSIS timestamp supplied using the DTI links.
In order to setup the DTI link configuration, the DTI interface must be
enabled as follows:
D5(config-dti)#port 1
D5(config-dti)#exit
D5(config)
End of procedure
Procedure 14-6 Dual DTI Support
DTI WAN Part Number 728905). The DTI port on the D5 UEQ is internally
wired to deliver two separate DTI server signals to the DTI controller on
the D5 UEQ allowing for redundant server setups.
To enable the redundant setup, the following should be entered:
D5(config-dti)#auto
D5(config-dti)#no revertive
D5(config-dti)#exit
D5(config)
When operating in auto (redundant) mode, the D5 UEQ also allows for
the behavior of DTI port selection during failover/recovery to be config-
ured. The revertive command option, if enabled, will force a
switchover to the primary DTI link whenever it recovers after a failure.
14 M-CMTS Support
To disable this mode and force the D5 UEQ to remain on its current DTI
link without switching back to any recovering links, the no revertive
command should be used (as shown in the above example).
End of procedure
Procedure 14-7 Setting a Time Offset Adjustment
The D5 UEQ supports setting a time offset value per RF output that is
applied to the received DTI clock. This may be used to tune up the time
offset values as reported by the show cable modem output from an M-
CMTS core. The offset is measured in time tick values.
To reduce the time offset value of all the QAM channels associated with
QAM 1/1 by 40 ticks, the following should be entered:
D5(config-qam-port)#dti offset -40
D5(config)
End of procedure
DTI Server configuration The default DTI configuration is DTI enabled, automatic port select,
revertive port switchover disabled. Once a valid DTI signal is detected, the
DTI interface will automatically synchronize. The DTI status will reflect the
current DTI state. The states are:
Warmup Wait for clock system to become stable
Freerun System clock is not synced to DTI and is freerunning
Fast Acquire DTI signal is detected and synchronization is in process
Normal System clock is synchronized to the DTI signal
Bridging DTI synchronization lost, trying to recover
Holdover DTI synchronization lost, system timing using last known
corrections
D5 UEQ DTI Status To determine the status of the input DTI port and the connection to the
remote DTI server the show interface dti command is provided.
The following is sample output of the show interface dti commands
when the D5 UEQ is connected to a remote DTI server.
D5#show interface dti
DTI st at us: nor mal , por t 1 act i ve, 10. 24 MHz cl ock pr esent
DTI enabl ed, aut omat i c por t sel ect , r ever t i ve por t di sabl ed
D5#show interface dti counters
T3: 000 T4: 004 T6: 000 T7: 002
Nor mal Ti me 1251000 Hol dover Ti me 5100
D5#show interface dti 1
Por t 1 f r ame er r or l ess t han 2 per cent
Ser ver t ype i s r oot , not t i med, wi t h a t ype I cl ock|
cl i ent i s st abl e, cabl e advance i s val i d, ser ver i s i n nor mal mode
CRC ERR 0x37
Advance 0x0000132a
Por t 1 TOD 1980/ 01/ 21 01: 59: 10 GMT +00
D5#show interface dti 2
Por t 2 f r ame er r or l ess t han 2 per cent
Ser ver t ype i s r oot , not t i med, wi t h a t ype I cl ock
cl i ent i s st abl e, cabl e advance i s val i d, ser ver i s i n nor mal mode
CRC ERR 0xe1
Advance 0x0000167d
Por t 2 TOD 1980/ 01/ 21 01: 59: 17 GMT +00
DTI Logs The following logs relating to the DTI interface are generated:
DTI-5-PORT_STATUS Port # Active
DTI-5-PORT_STATUS Port # Error Rate > 5%
DTI-5-PORT_STATUS Port # Signal Lost
DTI-3-NO_ACTIVE_PORT No Active DTI port
DTI-6-STATE_CHANGE New State (as listed above
The following is a log session of a DTI link failure when dual DTI links are
setup on the D5 UEQ:
MAY 02 04: 33: 29: %DTI - 5- PORT_STATUS: Por t 2 Si gnal Lost
MAY 02 04: 33: 29: %DTI - 5- PORT_STATUS: Por t 1 Si gnal Lost ( 2 l ogged)
MAY 02 04: 33: 29: %DTI - 6- STATE_CHANGE: New st at e br i dgi ng ol d st at e nor mal
MAY 02 04: 33: 31: %DTI - 3- NO_ACTI VE_PORT: No act i ve DTI por t
MAY 02 04: 33: 31: %DTI - 6- STATE_CHANGE: New st at e hol dover ol d st at e br i dgi ng
MAY 02 04: 33: 32: %DTI - 5- PORT_STATUS: Por t 1 Si gnal Det ect ed
14 M-CMTS Support
MAY 02 04: 33: 32: %DTI - 5- PORT_STATUS: Por t 1 Er r or Rat e < 5%
MAY 02 04: 33: 32: %DTI - 5- PORT_STATUS: Por t 1 Act i ve
MAY 02 04: 33: 32: %DTI - 6- STATE_CHANGE: New st at e f ast ol d st at e hol dover
MAY 02 04: 33: 32: %DTI - 5- PORT_STATUS: Por t 2 Si gnal Det ect ed
MAY 02 04: 33: 32: %DTI - 5- PORT_STATUS: Por t 2 Er r or Rat e < 5%
MAY 02 04: 33: 39: %DTI - 6- STATE_CHANGE: New st at e nor mal ol d st at e f ast
Operational Parameters/ Limitations
The D5 UEQ currently supports D-MPT with native L2TPv3 (no UDP
header) and over UDP/IP
The D5 UEQ does not support PSP mode
The D5 UEQ does not support the L2TPv3 Control Connection for dynamic
management of DEPI.
15. Security
Topics Page
Overview 1
TACACS+ Authentication 4
Radius 7
Setting up RADI US 7
AAA Configuration 10
Global Enable Password on SecureI D Systems 19
Overview
The D5 UEQ supports RADIUS Authentication, TACACS+ Authentication
and a limited AAA (Authentication, Authorization and Accounting) frame-
work required to setup Radius.
RADIUS or TACACS+ can be configured as a remote Authentication
protocol for the login and enable CLI levels. Multiple RADIUS/TACACS+
servers can be configured and added to server groups to allow for server
redundancy. As part of the AAA framework, the use of RADIUS or
TACACS+ authentication can be finely tuned to different CLI interfaces
such as the console line, the multiple vty (telnet) lines or the HTTP inter-
faces.
15 Security
Local authorization of commands is based on command privilege level,
allowing commands to be moved from the higher privilege enable level
into the lower Privilege login level. Default privilege levels will apply for
all of the CLI commands supplied with the D5 UEQ; some additional
commands will be used to change the privilege setting per command.
The extent of the feature development for both TACACS+ and RADIUS is
to support remote authentication of users gaining access to the D5 UEQ.
The D5 UEQ will provide basic configuration commands to setup details of
TACACS+ and RADIUS protocols/servers. Once the AAA protocols/servers
are configured, additional commands will be provided to enable the user
to configure the AAA services to meet their needs, and will include other
options for authentication including local database and no authentication
at all. The AAA model allows for different management interfaces (serial,
telnet, ssh, etc) to be configured differently, allowing a user to define
different AAA policies on these interfaces.
The AAA Model The AAA security model is an architectural framework for the implementa-
tion and management of common security functions within a mixed
network environment and is an industry standard adhered to by our
competitors. The model distinguishes authentication (verification of a
users identity) from authorization (verification that a users actions are
permissible) and offers accounting services with respect to both.
Moreover, the model separates security policy from policy enforcement
thereby enabling a distributed security scheme with centralized policy
management for each independent function. The following figure provides
a network-level illustration.
Figure 15-1: Full AAA Security Model

Authentication
Servers
Authorization
Servers
Accounting
Servers
Router

login attempt

command xyz

login attempt
D5 UEQ

D5 UEQ
In the figure above, the D5 UEQ and the Router are AAA clients that defer
login authentication and command authorization responsibilities to remote
servers. Information regarding each authentication or authorization
exchange is forwarded to accounting servers where historical records of
user activity are maintained.
Note that the AAA model itself does not demand a distributed security
scheme but simply offers enough flexibility to accommodate it. Any and all
of the AAA functions can be administered locally at an element. For
example, an element can defer login authentication to a remote authority
but authorizes each command locally based on element-specific policy
such as the users privilege level. Similarly, an element can authenticate
locally (e.g., from a password file) but defers authorization to an external
server on a per-command basis.
In the case of Radius Authentication on the D5 UEQ, the above diagram is
modified slightly with the following configuration setup.
Figure 15-2: Radius Authentication Model on the D5 UEQ
Login attempts are terminated in the D5 UEQ. The login to the CLI is
authenticated using either local authentication (authn) database (which is
the default out of box configuration for the D5 UEQ) or the RADIUS
protocol to connect to the remote authentication servers. As the D5 UEQ
follows the industry standard notion of a separate login password and a
separate enable password, both of these can be authenticated using the
remote RADIUS servers.
Authentication
Servers
Authorization
Servers
Accounting
Servers

D5 UEQ

Router

login attempt
command xyz
login attempt
Local
Authz
DB
Local
Authn
DB
D5 UEQ
Local
Acct
DB
15 Security
The D5 UEQ also supports local authorization of commands based on priv-
ilege level of the login. A normal login is assigned a privilege level of 0,
while an enable login is assigned a privilege level of 15. Commands avail-
able on the D5 UEQ can have their privilege level re-assigned through the
use of the privilege exec level command, allowing a user to setup the
commands applicable to either the login or enable levels. A number of
commands are setup by default at the login level, while all other
commands are setup with privilege level 15.
I nitial Setup The D5 UEQ, when initially setup, has no usernames or passwords config-
ured, and access is only available through the console port. Once IP
addresses and username/passwords are setup, access via Telnet is
enabled. In this configuration, a login password and enable password
exist per user and are stored as part of the configuration file.
To state this in AAA equivalent terms, the authentication for login and
enable levels are set to use the local authentication database (e.g. the
username/passwords configured on the D5 UEQ), while there is no autho-
rization for command or exec modes, and no accounting for command or
exec modes. Note that no AAA commands are part of the D5 UEQ initial
configuration file.
Local Authorization As mentioned, the D5 UEQ does support the notion of local authorization
of commands. This is achieved by assigning a privilege level to each
command, from 0 to 15. Typically, the privilege level associated with login
is set to 0, while the privilege level associated with enable level is 15. A
user setup with only login privileges will only have access to those
commands configured to privilege level 0, while a user setup with login and
enable privileges will have access to privilege level 15 commands.
The notion of local command privilege levels influences the operation of
the CLI to the point where the ? CLI option output (for displaying all avail-
able commands within the current CLI context) gets filtered based on the
users privilege level and privilege level of commands within the context.
When AAA is enabled on the D5 UEQ, the user gets the opportunity to
modify how the user authentication command is setup. The user is also
provided with the option of tailoring how AAA operates on each of the
different interfaces capable of supporting the CLI, including console and
vty (telnet) on the D5 UEQ (these are typically known as lines).
TACACS+ Authentication
Terminal Access Controller Access Control System plus (TACACS+) is a
relatively simple, TCP-based protocol supporting distinct request/response
transactions for authentication, authorization, and accounting. TACACS+
supports full payload encryption via MD5.
TACACS+ offers authentication for a wide variety of user services including
login, privilege-level change (e.g. entering enable mode) and password
change. It employs an unbounded, server-controlled challenge-response
mechanism in which the server may issue any number of challenges to a
user prior to accepting or rejecting a service request. If the server rejects
a service request, the client drops the connection. Otherwise, the client
establishes the service parameters (e.g., session timeout, idle timeout,
privilege level) as directed by the server and initiates the service.
AAA Treatment of SSH
I nterfaces
Each SSH interface allows an SSH user to authenticate themselves to the
system using an SSH key. If no AAA configuration is configured on an SSH
interface, then the correct SSH key will grant the user access to the D5
UEQ CLI. The SSH interfaces can be configured to use AAA, in which case
the user will be asked for the appropriate information (e.g. username and
password for RADIUS/TACACS+ authentication)
AAA Method List Operation An AAA method list may contain one or more AAA methods. With multiple
methods, AAA capabilities can continue to operate even if some methods
become unavailable due to network failures or configuration errors.
Line Operation Each line interface supports a CLI session. The CLI sessions behavior is
completely dependent on the configuration of the associated line.
However, a sessions authentication process can override a lines configu-
ration for the duration of a session.
Creating a default AAA
model
The aaa new-model command provides a wizard like configuration inter-
face for quickly setting up sensible defaults for all lines to use TACACS+.
Once the command is issued the system will use the TACACS+ server for
all authentication services.
NOTE
Once you run aaa new-model, you may not be able to perform any
more configuration changes until you start a new login session.
Local Authorization Each command on the D5 UEQ CLI will have an assigned privilege level
which can be changed via the local authorization CLI interface. A user who
has performed a TACACS+ login authentication can issue the enable
command with an optional parameter. This changes the users privilege
level and makes all commands up to that level available to the user. For
RADIUS, only login and enable users are supported and only privilege
level 0 and 15 are possible. This means commands must be locally
assigned to either of these two levels.
The D5 UEQ supports a local privilege command that is used to assign
command privilege levels between 0 and 15. Level 0 is used to identify all
commands available from the login prompt, while level 15 is the highest
privilege level and is associated with the enable logging.
15 Security
As already described, the D5 UEQ supports the notion of local authoriza-
tion. In the case of TACACS+, once a user is authenticated, the D5 UEQ is
provided with privilege credentials from the server that identifies the user.
If the user logs in using the login prompt, all commands available are at
privilege level 0. However, it is possible to login to another enable level,
by supplying the number after the enable command and pressing
RETURN on the keyboard. The number supplied identifies the exact privi-
lege level.
Default Command Privilege
Levels
Any command not listed in the table below will have a default privilege
level of 15. Commands listed in the table below will have a default privilege
level of 0.
Table 15-1: Commands with Privilege Level 0
disable show crypto
enable show crypto key
enable global-password show crypto key mypubkey
enable password show crytop key my pubkey dsa
enable secret show crypto key my pubkey rsa
end show crypto key pubkey-chain
exit show crypto key pubkey-chain dsa
help show crypto key pubkey-chain rsa
logout show history
ping show ip
systat show ip arp
terminal length show ip arp fastethernet
terminal monitor [no] show ip arp gigabitethernet
terminal pagination [no] show ip route
terminal timeout [no] show ip route connected
terminal vt100-colours [no] show ip route static
terminal width show ip route summary
traceroute show ip ssh
show aliases show ipc
show arp show memory
Radius
From the point of view of RADIUS, only user authentication is supported,
both login and enable. Login user privilege is set to 0, and enable
level is set to 15. These privilege levels define what commands are avail-
able to login and enable modes. Think of this as a very basic local
command authorization concept in the absence of any real AAA authori-
zation for RADIUS. This concept is managed by the privilege exec level
command, where commands are assigned different privilege levels, 0 for
login level or 15 for enable level.
The same applies to accounting, where the D5 UEQ does not support any
notion of RADIUS accounting, but does support the option of logging all
CLI activity into per line files (console.log, vty0.log, etc) on the local
compact flash file system. This is a very basic local accounting concept,
controlled through the CLI logging command available in global configura-
tion mode. The details logged are available through the show cli
logging {console, vty0, etc}.
Setting up RADIUS
To setup RADIUS, details of the remote server must be available. The D5
UEQ requires a number of different parameters to be supplied to properly
configure the remote server. Up to three different RADIUS servers can be
configured. Global timeout, retry and key values can be configured or
these may be configured per RADIUS server.
Procedure 15-1 Setup remote RADI US server with global settings
D5(config)#radius-server key abc123
D5(config)#radius-server timeout 3
D5(config)#radius-server retransmit 3
D5(config)#radius-server host 192.168.254.2
End of procedure
show bootvar show ntp
show calendar show snmp
show clock show terminal
show clock timezone show users
15 Security
This example shows how global settings can be configured for all config-
ured RADIUS servers. The radius-server timeout value configures
the amount of time (in seconds) the D5 UEQ will wait for a RADIUS server
to respond to an authentication request. If a timeout occurs, the D5 UEQ
will retry the request again, up to a maximum of radius-server
retransmit. The radius-server key must contain the shared-
secret associated with the RADIUS configuration in the remote RADIUS
server.
NOTE
The D5 UEQ supports configuring all of these options on an individual
RADIUS server basis through a single command line. Per-RADIUS server
settings take precedence over any global settings.
The above configuration can be simplified to the following:
Procedure 15-2 Setup remote RADI US server with individual settings
D5(config)#radius-server host 192.168.254.2 timeout 3 key abc123
D5(config)#radius-server host 192.168.254.4 key ddd999
End of procedure
To setup other RADIUS servers, simply repeat the above commands with
the appropriate IP address for the servers in question.
NOTE
RADIUS servers MUST be configured as shown above before they can be
added to RADIUS server groups that are described below.
Please note the following defaults for RADIUS:
Timeout 5 seconds (0-1000, 0=no timeout)
Retransmit is 3 retries (4 attempts, 0-5)
Default key = (up to 32 characters can be supplied)
Default port = 1812 (RADIUS port)
Once the different RADIUS servers are setup, the corresponding RADIUS
server groups can be setup. The RADIUS server group is a list of one or
more RADIUS servers that are to be used when performing remote
authentication of login and enable modes. When adding servers to the
group, the order that the servers are added is important, as it determines
the order that the servers are subsequently contacted when trying to
exchange RADIUS protocol messages. The first server added is always the
first server contacted by the D5 UEQ.
Setup server group with RADIUS servers
D5(config)#aaa group server radius RAD-SRV-GRP
D5(config-sg-radius)#server 192.168.254.2
D5(config-sg-radius)#exit#
The server group command, aaa group server requires that the type of
servers being grouped together are explicitly stated. As this is for RADIUS
authentication, radius is supplied as the server type. The server group
must also be configured with a name which is set using the last parameter
in the above command, RAD-SRV-GRP.
Once the server group is created, it is possible to see how it is configured
by running the show radius groups command, as per the following
example.
Procedure 15-3 Show RADI US server group settings
D5(config)#show radius groups
RADI US Gr oups
=====================
Name I P Addr ess
RAD- SRV- GRP 192. 168. 254. 2 192. 168. 254. 4
End of procedure
NOTE
The order the servers were entered through the CLI is preserved in the
output of the group.
The D5 UEQ supports up to three separate server groups, each with their
own name. What is also interesting with server groups is that two separate
server groups can reference a common RADIUS server (e.g. a single
RADIUS server can appear in multiple server groups).
15 Security
Normally server groups are setup with multiple servers for redundancy
reasons in case a single server becomes unavailable during normal opera-
tion. In this case, the D5 UEQ will give up on the first server after retrying
as many times as configured (note default retry count is 3) and then move
to the next available server in the group. If none of the RADIUS servers
provisioned can be contacted, RADIUS authentication will not be possible
with the line in use and the D5 UEQ will then consider other authentica-
tion methods as configured through the AAA setup.
Once the RADIUS servers are setup and the server groups are defined, it
is possible to consider the AAA configuration options and how to manage
the so-called methods that are used for authentication.
AAA Configuration
To use AAA, the AAA sub-system must be enabled through the use of the
aaa new-model command. As part of enabling the AAA sub-system, the
D5 UEQ sets up default method lists for all the different AAA configuration
options, referenced by the name default, in order to match a normal, non-
AAA controlled system. The following commands are added by the D5 UEQ
to achieve this configuration setting.
Global AAA commands automatically added by the aaa new-
model command
aaa authentication login default local
aaa authentication enable default local
aaa authorization commands default none
aaa authorization exec default none
aaa accounting commands default none
aaa accounting exec default none
These commands set the default method list for each of the configurable
AAA options in order to match a non-AAA system (achieved by the param-
eter directly after the default word; local here meaning the local user-
name/password database, and none meaning do nothing).
The AAA system applies to management interfaces that are capable of
hosting CLI connections such as the console interface or any of the
telnet/vty connections. These interfaces are collectively known as lines
and are part of the standard system configuration and allow fine tuning of
the operation of the CLI, such as screen width, height, and inactivity
timeout before logging out. The line configuration menu is extended to
allow the full AAA functionality to be managed per interface.
The aaa new-model command adds additional configuration commands
for AAA purposes to each line instance present within the D5 UEQ config-
uration. The actual commands added to each of the lines present within
the configuration are as follows:
Per line AAA commands automatically added by the aaa new-
model command
login authentication default
enable authentication default
authorization commands default
authorization exec default
accounting commands 0 default
accounting exec default
All these commands reference the default method-list discussed earlier.
The result of the aaa new-model command is to enable the AAA service,
explicitly setup the default method lists for all of the AAA interfaces
(authn, authz and acct) and then setup each lines AAA configuration to
point to the default method list. At this point, RADIUS has still not been
enabled for AAA authentication, even though the server details and the
server groups have been setup.
In order to enable RADIUS to be used for AAA, the default login and
enable authentication method lists must be updated to reference the
RADIUS server groups that have been setup. This is accomplished as
follows:
Procedure 15-4 Setup default method lists for RADI US
D5(config)#aaa authentication login default group RAD-SRV-GRP local
D5(config)#aaa authentication enable default group RAD-SRV-GRP local#
End of procedure
At this point, RADIUS is now in operation for login and enable authentica-
tion.
The previous paragraphs attempted to put in context the elements of
configuration used to setup AAA services. A considerable number of
configuration settings occur automatically as a result of the aaa new-
model command. The full set of configuration commands follow.
15 Security
Procedure 15-5 Use the following set of commands for a complete RADI US
configuration setup
D5(config)#radius-server host 192.168.254.2 key abc123
D5(config)#radius-server host 192.168.254.4 key ddd999
D5(config)#aaa group server radius RAD-SRV-GRP
D5(config-sg-radius)#exit
D5(config)#
D5(config)#aaa new-model
D5(config)#aaa authentication login default group RAD-SRV-GRP local
D5(config)#aaa authentication enable default group RAD-SRV-GRP local
End of procedure
This configuration sets up two RADIUS servers, adds them to the server-
group called RAD-SRV-GRP, and then modifies the default method list for
login and enable. The method lists are constructed so that the RADIUS
server group is used to authenticate the login and enable users, but if
these servers can not be contacted, the method-list moves on to the next
available option, in this case the special local case where the local user-
name/password database is used to authenticate login and enable.
This configuration relies on the aaa new-model command to create the
six different default method-lists (two for authn, two for authz and two
for acct), and apply them to every single line, changing the default
method lists applied to every line.
Viewing current RADI US
settings
To view the current configuration, the user has a number of options. A
number of direct RADIUS show commands exist.
Procedure 15-6 To display the RADI US group, use the following command:
D5(config)#show radius groups
RADI US Gr oups
=====================
Name I P Addr ess
RAD- SRV- GRP 192. 168. 254. 2 192. 168. 254. 4
End of procedure
Procedure 15-7 To display the RADI US hosts, use the following command:
D5(config)#show radius hosts
Gl obal Def aul t s
===============
Ti meout : 5
Ret r i es : 3
Key : <none>
RADI US Host s
===============
Ser ver Por t Ti meout Ret r i es Key
192. 168. 254. 2 1812 - - abc123
192. 168. 254. 4 1812 - - ddd999
End of procedure
Procedure 15-8 To display detailed RADI US related information, use the
following command:
D5#show radius detail
15 Security
Gl obal Def aul t s
===============
Ti meout : 5
Ret r i es : 3
Key : <none>
RADI US Host s
===============
Ser ver Por t Ti meout Ret r i es Key
192. 168. 254. 2 1812 - - abc123
192. 168. 254. 4 1812 - - ddd999
RADI US Det ai l
===============
RADI US Ser ver = 192. 168. 254. 2
Access- Request packet s f or med = 8
Access- Accept packet s r ecei ved = 4
Access- Rej ect packet s r ecei ved = 4
Access- Chal l enge packet s r ecei ved = 0
Access- Request packet t i meout s = 1
Access- Request packet r et r ansmi ssi ons = 1
Access- Request f ai l ur es = 4
Access- Request r esponses r ecei ved wi t h an i nval i d l engt h = 0
Access- Request r esponses r ecei ved wi t h an i nval i d t ype = 0
Access- Request r esponses r ecei ved wi t h an i nval i d i dent i f i er = 0
Access- Request r esponses r ecei ved wi t h an i nval i d aut hent i cat or = 0
RADI US Ser ver = 192. 168. 254. 4
Access- Request packet s f or med = 0
Access- Accept packet s r ecei ved = 0
Access- Rej ect packet s r ecei ved = 0
Access- Chal l enge packet s r ecei ved = 0
Access- Request packet t i meout s = 0
Access- Request packet r et r ansmi ssi ons = 0
Access- Request f ai l ur es = 0
Access- Request r esponses r ecei ved wi t h an i nval i d l engt h = 0
Access- Request r esponses r ecei ved wi t h an i nval i d t ype = 0
Access- Request r esponses r ecei ved wi t h an i nval i d i dent i f i er = 0
Access- Request r esponses r ecei ved wi t h an i nval i d aut hent i cat or = 0
End of procedure
Viewing the line AAA
configuration
As the aaa new-model command updates the line AAA configuration, it
is useful to be able to display the details of all the currently configured
lines, and their individual AAA configuration options. This is possible
through the following commands:
Procedure 15-9 Display line configuration details
D5(config)#show running-config | begin line
l i ne consol e
l engt h 24
wi dt h 80
t i meout 900
no moni t or
no vt 100- col our s
l i ne vt y 0 3
l engt h 24
wi dt h 80
t i meout 900
no moni t or
no vt 100- col our s
D5( conf i g) #
End of procedure
The line details above show the typical configuration items, as well as the
newly added AAA related commands. The commands in BOLD show the
six different AAA settings (method lists) available per line. Note too, that
15 Security
in this example, a single VTY line is described, that is applied to vty 0 to 3.
Any of these four vty lines can be split out, and assigned completely
different method lists. Note that default is an always available special
case method-list.
Enabling the debug of the
RADI US service
The D5 UEQ provides a debugging option for users to enable if connectivity
to remote RADIUS servers seems to be an issue. The debugging option
enables protocol exchange messages to be monitored between the D5
UEQ and the remote RADIUS servers.
Procedure 15-10 To turn on debugging, the debugging subsystem on the D5 UEQ
must be enabled for the CLI being used, and the debug monitor
output must be enabled.
This is achieved by entering the following commands:
D5(config)#configure debug cli
D5(config)#terminal monitor
End of procedure
Once the CLI is enabled for debugging, RADIUS debugging can be enabled
and displayed.
Procedure 15-11 Use the following command to enable RADI US debugging:
D5(config)# debug module radius
The no version of the command, described below, disables the debugging
of RADIUS:
D5(config)# no debug module radius
End of procedure
Procedure 15-12 AAA debugging is also available through the use of the following
debug command:
D5(config)# debug module aaa
End of procedure
This will produce debug output relating to operation of the AAA frame-
work. The no version of this command will disable AAA debugging.
Sample output of the RADIUS/AAA debugging follows,
D5( conf i g) #conf i gur e debug cl i
D5( conf i g) #t er mi nal moni t or
D5( conf i g) # debug modul e r adi us
D5( conf i g) # debug modul e aasda
Aut hent i cat e aaaNewModel : Enabl ed.
[ 5] di spl ayi ng banner
_aut hent i cat eAAA aut hent i cat i on usi ng gr oup t est
_aut hent i cat eAAA aut hent i cat i on usi ng gr oup ( met hod 0 ser ver 0)
_aut hent i cat eUsi ngRadi usSer ver l i ne=5 st at e=0
AaaRadi us( 5, 0, NULL, 0, ) l i neSt at e=0 r adi usSt at e=0
_aut hent i cat eUsi ngRadi usSer ver cal l i ng r adi us_aut hen_l ogi n_st ar t pSer ver 0x8314e7c0 i p 10. 250. 4. 149
_aut hent i cat eUsi ngRadi usSer ver ( l i ne 5) st at us=0
_aut hent i cat eUsi ngRadi usSer ver l i ne 5 RADI US_START
_aut hent i cat eAAA st at us=2
_aut hent i cat eAAA aut hent i cat i on usi ng gr oup t est
_aut hent i cat eAAA aut hent i cat i on usi ng gr oup ( met hod 0 ser ver 0)
_aut hent i cat eUsi ngRadi usSer ver l i ne=5 st at e=2
AaaRadi us( 5, 0, NULL, 0, ) l i neSt at e=2 r adi usSt at e=0
_aut hent i cat eUsi ngRadi usSer ver di spl ay r adi us pr ompt : Logi n:
_aut hent i cat eUsi ngRadi usSer ver r ef or mat t ed r adi us pr ompt : Logi n:
_aut hent i cat eUsi ngRadi usSer ver ( l i ne 5) st at us=1 out put =
_aut hent i cat eUsi ngRadi usSer ver l i ne 5 RADI US_GETUSER
Aut hor i zeCmd aaaNewModel : Enabl ed aut hor i zat i on: Enabl ed
_aut hor i zeAAA Aut hor i zi ng Command. cmd=" " ger r y" " . Aut hent i cat i on has not yet t aken pl ace.
AaaRadi us( 5, 0, ar r i s, 0, ) l i neSt at e=2 r adi usSt at e=2
_aut hent i cat eUsi ngRadi usSer ver ( l i ne 5) st at us=5 i nput =ar r i s
_aut hent i cat eUsi ngRadi usSer ver l i ne 5 RADI US_PASS
_aut hent i cat eAAA AUTHENTI CATE success! !
15 Security
Disabling AAA When AAA services are no longer required on the D5 UEQ, run the no aaa
new-model command. This will remove all of the defined method-lists as
well as removing all the method lists assigned to the different AAA inter-
faces on each line. The no version of this command does not remove the
RADIUS server or RADIUS server-group settings.
Logging of AAA details During the operation of the AAA service and RADIUS, there should be no
logging of error conditions. However, if issues occur such as login failures,
loss of connectivity to remote authentication servers, etc, information
concerning these issues get logged in the D5 UEQ event log and is also
sent to remote syslog servers.
Further RADIUS examples. Once the AAA service is running and RADIUS servers are defined, it is
possible to consider more advanced configuration settings, through the
use of additional server groups (listing applicable RADIUS server details)
and method lists (where combinations of AAA server groups and
local/none settings can be lined up in any order to meet the customers
requirements).
One point to consider with the more advanced configurations is that there
are finite numbers of AAA elements that can be used. The D5 UEQ
supports up to three separate server groups, and three separate method
lists. Any advanced setup must fit within these constraints.
An advanced example follows:
D5(config)#aaa group server radius ADMIN-SG
D5(config-sg-radius)#exit
D5(config)#aaa group server radius OPS-SG
D5 (config-sg-radius)#exit
D5 (config)#aaa new-model
D5 (config)#aaa authentication login ADMIN-ML group ADMIN-SG local
D5 (config)#aaa authentication login OPS-ML group OPS-SG local
D5 (config)# line vty 0 1
D5 (config-line)#login authentication ADMIN-ML
D5 (config-line)#exit
D5 (config)# line vty 2 2
D5 (config-line)#login authentication OPS-ML
D5 (config-line)#exit
This example shows two RADIUS server groups being defined, and two
separate, named method lists, one called ADMIN-ML, the other OPS-ML.
These method lists link to the server groups, identifying what service
groups to rely upon for login authentication. Note that the vty 0 and 1 are
configured to use the ADMIN-ML method list, ONLY for login, while vty 2
is configured to use the OPS-ML method list, again ONLY for login. Once
the login is successful, the current configuration example which assigns
nothing to the enable level, but relies on the default option which is to
use the local username/password database.
RADIUS Protocol Operation The RADIUS protocol specification covers AAA capabilities for network
services such as PPP and SLIP as well as for login and enable services.
Since the D5 UEQ only supports login and enable services, only a subset
of the specification applies.
RADI US Server and Server
Group Operation
The RADIUS protocol specification details the interactions between a
single RADIUS server and a RADIUS client in a fault-free network. It does
not address server/network fault scenarios or multiple server configura-
tions. The D5 UEQ must, of course, recognize server/network failures
during RADIUS exchanges and gracefully recover if multiple servers are
defined (which is an allowed configuration option).
Global Enable Password on
SecureI D Systems
As stated previously, typical login to a D5 UEQ consists of a login user
name and a password. Once logged in, a user has minimal access to the
CLI, requiring another password, known as the enable password, to be
entered. When AAA/Authentication is enabled, the username, login pass-
word and enable password are all stored on a remote Authentication
server and are passed to the server for validation during login to allow
access to the D5 UEQ.
Some MSOs rely on a secureID system, based on physical cards that
generate one-time passwords used in place of actual passwords. A new
one-time password is generated periodically (e.g. once per minute) and is
15 Security
supplied with a users unique username as part of the login process. This
removes the need to store any passwords on an Authentication server or
forcing users to change their passwords regularly.
In Release 3.0.1, we identified the need to create an approach to login
directly to the enable mode (without needing to supply the login pass-
word). In this mode, the user will have a different login name to allow the
AAA system to identify the user to be logged directly into the enable mode.
This will quicken user access to the D5 UEQ, removing the current delay
associated with waiting for the physical access-card to readout a new one-
time key.
This particular approach of direct to enable, used in mixed
Radius/TACACS+ Authentication models, with the global enable password,
can also be used when TACACS+ is unreachable.
When TACACS+ Authentication/Authorization servers are down/unreach-
able, the AAA method lists are setup to ensure that an AAA method is used
before any local methods are used.
The following example identifies how this feature is used:
D5(config)#tacacs-server host 192.168.250.188 key abc123
D5(config)#enable global-password test123
D5(config)#aaa new-model tacacs+
D5(config)#aaa authentication enable default local
This will allow a user to login to the D5 UEQ using the account provisioned
on the TACACS+ server at 192.168.250.188 and enable with the global
password test123.
The following example identifies the current AAA login approach based on
Radius to authenticate the login user and TACACS+ authorization:
D5(config)#aaa new-model
D5(config)#aaa authentication login default group radius local
D5(config)#aaa authorization exec default group tacacs+
D5(config)#aaa authorization commands default group tacacs+ none
Since the SecureID cards validate users by requiring them to enter their
username and the currently visible passcode on the SecureID card, the D5
UEQ AAA system relies on the above method lists for authentication and
authorization to accept the login and assign the correct privilege level to
the user.
Once authenticated, the AAA state machine will present a command shell
to the user. To do this, it will authorize access to the shell using shell
(exec) authorization to the remote TACACS+ server. The D5 UEQ will
automatically supply the login credentials to the TACACS+ authorization
server and wait for the server response to decide upon what to present to
the user (namely a basic login prompt or an enable prompt).
Once the D5 UEQ has completed the RADIUS Authentication and the
TACACS+ Authorization (shell/exec) and presented the user a login
prompt, it will authorize all subsequently entered CLI commands with the
configured TACACS+ command authorization server. The users ability to
run CLI commands is now completely dependent on how the TACACS+
server has been configured and the priority levels associated with each
command.
15 Security
16. CLI Overview
Topics Page
CLI Command Modes 2
Command Completion and Parameter Prompting 5
Keyboard Shortcuts 6
Local Authorization 8
CLI Output Filtering 10
CLI Syntax Conventions 12
The ARRIS D5 UEQ CLI is a fully functional interface that enables users to
enter commands to create, manage, display and remove networks, VTY
users, and other system entities. All D5 UEQ controls can be issued via the
CLI after hardware installation is complete.
The CLI can be utilized either from the serial port or through a remote
network connection such as telnet or secure shell. The CLI is a straightfor-
ward command interface that is intended to follow the familiar syntax of
many other communications products.
Type commands on a single line. Execute the commands using the Enter
key. The CLI provides command help and completion. It also provides
keyboard control sequences which allow a user to move around a
command line and scroll through a buffer that contains recently entered
commands.
16 CLI Overview
Accessing the D5 UEQ
There are two ways to access the D5 UEQ CLI. The first is via direct serial
access from the RS/232 (CLI or |0|0|) interface located on the front panel.
The second is remotely using TCP/IP and telnet, or secure shell (ssh). For
remote access, at least one interface for management access must be
designated. The MGT FastEthernet interface on the WAN card is intended
for system management access.
CAUTI ON
If more than one user is on simultaneous telnet sessions configuring the
same parameter on the D5 UEQ, you have the potential to create
unexpected results. E.g., session one is configuring banner one while
session two is configuring banner two and then you end session one
and exit session two, the banner one would be wiped out and a
subsequent write command would cement the wrong banner. This could
cause confusion in the field (for more significant commands) and
unexpected results. It is recommended that you run the command
systat to display the current users.
CLI Command Modes
The D5 UEQ supports hundreds of CLI commands. They are grouped into
different functional modes. The first set of commands is available to all
users including those with non-Privilege access. Most of these commands
are used to show system status. They are available when the D5 UEQ is in
User EXEC mode or any other mode.
The other modes are available only to users with Privilege EXEC access.
These commands are more powerful and can be used to reconfigure the
system or to adjust system performance.
The following table lists some of the command modes and some of the
commands needed to change from one mode to another.
Table 16-1: How to Enter and Exit the CLI Command Modes
Mode
To enter this mode,
type ... Resultant Prompt
To exit this mode,
type ...
User EXEC <login> + <password> D5>
exit or logout (terminates
CLI session)
Privilege EXEC
D5>enable
Password:
D5#
disable (returns to User
Exec Mode); exit or logout
(terminates CLI session)
Global Configuration
D5>enable
Password:
D5<config>#
exit, end or press Ctrl+Z
(returns to Privilege EXEC
Mode)
FastEthernet Sub-
Interface
D5>enable
Password:
D5(config)#interface
fastethernet X/ Y
D5(config-if)#
exit (returns to Global
Configuration Mode)
end or press Ctrl+Z
Mode)
GigabitEthernet Sub-
Interface
D5>enable
Password:
gigabitethernet X/ Y
D5(config-gig-if)#
Configuration Mode)
end or press Ctrl+Z
Mode)
Loopback Sub-
Interface
D5>enable
Password:
loopback <N>
D5(config-if)#
Configuration Mode)
end or press Ctrl+Z
Mode)
Port-channel Sub-
Interface
Configuration
D5>enable
Password:
port-channel <interface
num>
D5(config-if)#
Configuration Mode)
end or press Ctrl+Z
Mode)
QAM Card
D5>enable
Password:
D5(config)#interface qam
<card>
D5(config-qam-if)#
Configuration Mode)
end or press Ctrl+Z
Mode)
QAM Port Sub-
Interface
D5>enable
Password:
<card/ port>
D5(config-qam-port)#
Configuration Mode)
end or press Ctrl+Z
Mode)
Mode
To enter this mode,
To exit this mode,
type ...
16 CLI Overview
QAM Channel Sub-
Interface
D5>enable
Password:
<card/ port[.channel]>
D5(config-qam-if)#
Configuration Mode)
end or press Ctrl+Z
Mode)
DTI Configuration
D5>enable
Password:
D5(config-dti)#
Configuration Mode)
end or press Ctrl+Z
Mode)
ERM Configuration
D5>enable
Password:
D5(config)#video erm
<name>
D5(config-erm)#
Configuration Mode)
end or press Ctrl+Z
Mode)
EIS Configuration
D5>enable
Password:
D5(config)#video eis
<name>
D5(config-eis)#
Configuration Mode)
end or press Ctrl+Z
Mode)
ECMG Configuration
D5>enable
Password:
D5(config)#video ecmg
<name>
D5(config-ecmg)#
Configuration Mode)
end or press Ctrl+Z
Mode)
EMMG Configuration
D5>enable
Password:
D5(config)#video emmg
<name>
D5(config-emmg)#
Configuration Mode)
end or press Ctrl+Z
Mode)
P(SIG) Configuration
D5>enable
Password:
D5(config)#video psig
<name>
D5(config-psig)#
Configuration Mode)
end or press Ctrl+Z
Mode)
Mode
To enter this mode,
To exit this mode,
type ...
Command Completion and Parameter Prompting
Press the Tab key to complete a partially-typed command. If the tab key
is unable to uniquely identify a command, (for example, co could be
completed as configure or copy) the D5 UEQ console beeps and does a
partial-completion of the command (completing the characters which are
common to the multiple commands).
Example:
# con<tab>
# configure
The ? (question mark) key has two functions:
When added to the end of a partially-typed set of characters, the D5
UEQ lists commands that start with the current fragment.
When separated from the command by one or more spaces, the D5
UEQ lists valid additional commands, parameters or values that must
follow the currently typed command, on the same line.
Example:
Redundancy-Group
D5>enable
Password:
D5(config)#video
redundancy-group
<name>
D5(config-redund-
grp)#
Configuration Mode)
end or press Ctrl+Z
Mode)
SCG Configuration
D5>enable
Password:
D5(config)#video scg
<name>
D5(config-scg)#
Configuration Mode)
end or press Ctrl+Z
Mode)
Video Channel
Configuration
D5>enable
Password:
D5(config)#video
channel-container
<name>
D5(config-video-
channel)#
Configuration Mode)
end or press Ctrl+Z
Mode)
Mode
To enter this mode,
To exit this mode,
type ...
16 CLI Overview
D5(config)#lo?
l oggi ng l ogi n
D5(config)#logging ?
al ar m - Conf i gur e al ar ms
buf f er ed - Set buf f er ed l oggi ng par amet er s
consol e - Set consol e l oggi ng l evel
moni t or - Enabl e l oggi ng on moni t or , def aul t
i s Er r or s l evel
ngod - Enabl e NGOD l oggi ng
on - Enabl e al l l oggi ng
over r i de - Enabl e event over r i de
sever i t y - Enabl e/ di sabl e l oggi ng f or a
par t i cul ar sever i t y
sysl og - Enabl e sysl og l oggi ng f or event s
t hr esh - Conf i gur e t hr eshol ds
t r ap - Enabl e t r aps
t r ap- cont r ol - Conf i gur e t r ap cont r ol
Keyboard Shortcuts
In the CLI, you can use keyboard sequences to navigate and edit a
command line. You can also use keyboard sequences to scroll through a
list of recently executed commands. The following table lists the line-
editing keys that are available in the CLI.
These shortcuts are available in a telnet session (LAN connection) only.
They are NOT available from a serial connection.
Table 16-2: CLI Editing Shortcuts
Keystroke(s) Result
Backspace Deletes one character to left of cursor (back)
Delete Deletes the current character
Enter Executes command
Tab Completes command entry
(Right arrow)
Move the cursor forward one character
(Left arrow)
Move the cursor back one character
(Up arrow)
Scrolls backward through all commands in the history
buffer starting with the most recent. Repeat keystroke to
recall successively older commands.

(Down arrow)
Scrolls forward through all commands in the history
buffer after recalling commands with the up arrow key.
Repeat keystroke to recall successively more recent
commands.
<Esc> + B Move the cursor back one word
<Esc> + C Converts the rest of the word to uppercase
<Esc> + D Deletes the remainder of the word
<Esc> + F Moves forward one word
<Esc> + L Converts the rest of the word to lowercase
<Ctrl> + A Move the cursor to beginning of the command line
<Ctrl> + B Move the cursor back one space
<Ctrl> + C Aborts current line (aborts a command if running)
<Ctrl> + D Deletes the character at the cursor
<Ctrl> + E Move the cursor to the end of the command line
<Ctrl> + F Move the cursor forward one character
<Ctrl> + K
Deletes all characters from cursor position to the end of
the command line
<Ctrl> + N
Scrolls forward through the list of recently executed
commands. (Note: you must first scroll backwards using
the <CTRL> + P command before this using this
command.)
<Ctrl> + P
Scrolls backward through the list of recently executed
commands
<Ctrl> + T
Transposes the character to the left of the cursor with
the character located at the cursor.
<Ctrl> + U Deletes all characters on line to left of cursor position
<Ctrl> + W Deletes word directly before cursor
<Ctrl> + Z Enters command and then returns to root prompt
Table 16-2: CLI Editing Shortcuts (Continued)
Keystroke(s) Result
16 CLI Overview
NO Commands
The [no] form of a command is used to negate a specific function. A
slot/port with one parameter supports the [no] form automatically. If a
slot/port has two or more parameters, you must specify which parameter
the [no] is designated. It is important to specify this as it can have varying
effects depending on the command, such as:
disabling the feature
disabling a particular option of the feature
restoring default settings
removing a single entry which was previously configured
Local Authorization
A privilege exec command is provided to allow an operator to change the
privilege level of a command. Using this command, an operator can recon-
figure any CLI command to a specific privilege level. This command is set
at privilege level 15.
A privilege reset command is provided to allow an operator to restore a
command to its default privilege level. Using this command, an operator
can reconfigure any CLI command to its default privilege level.
When a user logs into a D5 UEQ, they are considered to be unprivileged
and can only run commands that are available at level 0. A user can gain
access to commands at a higher privilege level by enabling access to that
level.
The enable command will take an optional argument to allow the user to
specify the level they wish to escalate their privilege. If the optional argu-
ment is omitted, it is treated as if the user issued the command with an
argument of 15.
The D5 UEQ will prune the list of available commands such that only the
commands a user is privileged to execute are made available on the CLI.
NOTE
Auto complete will not show options that are not available. When a user
presses the? key to get a list of commands or command options, the D5
UEQ will only present those options that the user is authorized to
execute.
The D5 UEQ supports a local privilege command that is used to assign
command privilege levels between 0 and 15. Level 0 is used to identify only
the commands available from the login prompt, while level 15 is the
highest privilege level, and is associated with the enable commands.
NOTE
If a command has been assigned a privilege level of n, then that
command is not available to enable modes of less than n, where n is an
integer in the range [0,15].
For example The following commands will set the two CLI commands
to level 5 and 6, respectively:
D5>configure terminal
D5#privilege exec level 5 "show video erm"
D5#privilege exec level 6 "show video sessions"
D5#end
Now, exit privilege mode and enable level 5 with the following commands:
D5#disable
D5>enable 5
At this point, show video erm would be allowed but show video sessions
would not allowed.
Privilege Level 0 Commands Any command not in the table below will have a default privilege level of
15. Commands listed in the table below will have a default privilege level
of 0.
enable show history show users
exit show ip arp show version
help show crypto systat
logout show ip dhcp-server terminal
llc-ping show ip protocols terminal length
no monitor show ip route terminal monitor
ping show ipc terminal timeout
show aliases show memory terminal no timeout
show arp show ntp terminal vt100-colours
show bootvar show phs terminal no vt100-colours
show calendar show snmp terminal width
show clock show ssh traceroute
16 CLI Overview
CLI Output Filtering
The D5 UEQ provides output filtering commands. You can use them to
reduce the amount of output sent to the screen by certain commands.
The CLI permits the following types of filtering:
Begin - displays output beginning with the first line that contains the
text string or regular expression
Include - displays output lines that contain the text string or regular
expression and excludes lines that do not contain the text string or
regular expression
Exclude - displays output lines that do not contain the text string or
regular expression and excludes lines that do contain the text string or
regular expression
The following CLI options have been added to the show commands:
[| {begin| include| exclude} [] regular expression []]
To use this functionality, enter a show command as normal but add a
space followed by the pipe character (| ) at the end of the command line.
Then add one of the keywords begin, include, or exclude, along with
the regular expression that you want to filter or search on.
Expanded Syntax
show any-command | begin regular expression
show any-command | include regular expression
show any-command | exclude regular expression
You specify output filtering by appending a vertical bar character to the
end of a command, followed by the filtering command and its arguments.
The ? (help) command prints a brief summary of the commands:
Example:
D5#show run | ?
begi n Begi n wi t h t he l i ne t hat mat ches
i ncl ude I ncl ude l i nes t hat mat ch
excl ude Excl ude l i nes t hat mat ch
show crypto show terminal
show hardware show tftp-server
Filtering Previous Lines
Use the begin command to suppress output until an output line matches
the specified string:
Example:
D5#show run | begin "interface FastEthernet"
i nt er f ace Fast Et her net 0/ 1
no descr i pt i on
no shut down
! mac- addr ess 0000. caf 5. 7b98
dupl ex aut o
snmp t r ap l i nkst at us
l oad- i nt er val 300
i p addr ess 10. 17. 106. 254 255. 255. 255. 0
Including Matching Lines
Use the include command to display only output lines matching the spec-
ified string:
Example:
D5#show configuration | include Video
vi deo t i meout sessi on cl ose 10
vi deo net wor k- i d 4369
vi deo or i gi nal - net wor k- i d 4370
vi deo net wor k- name " D5NET"
vi deo ni t - pi d 16
Excluding Matching Lines
Use the exclude command to suppress output lines matching the speci-
fied string:
D5#show configuration | exclude video
! ****Gener at ed on TUE MAR 613: 08: 19 2007
! ****by S/ Wver si on 2. 2. 0. 38
!
!
16 CLI Overview
conf i gur e debug aut ospool
conf i gur e debug over wr i t e
!
no l oggi ng sysl og host
l oggi ng t hr esh none
l oggi ng t hr esh i nt er val 1
l oggi ng sever i t y 0 l ocal t r ap sys vol
CLI Syntax Conventions
ARRIS documentation uses certain conventions to show the syntax of
commands. These notations are not part of the command itself but indi-
cate choices a user has in entering a command. The notations are for
documentation purposes only, they are not input by the user.
The CLI commands use the syntax conventions described in the
following table
Table 16-3: Conventions for Representing Command Syntax
CLI Syntax Description
<...>
Angle brackets indicate a required value or parameter
which is position-dependent and does not have
keywords.
<slot/port>
Values are required for both the slot and port. They
must be separated by a slash.
[...]
Brackets enclose optional entriesthey may be
included or excluded.
{...}
Braces enclose two or more entry choices; one and
only one choice should be entered in the command.
[word <a | b>]
Brackets and a vertical line within brackets indicate a
required choice within an optional entry.
|
A vertical bar (the pipe symbol) separates entries
within brackets or braces. You may select only one
from the key list:
[first | second | third]
Case Commands are not case sensitive.
IP addresses and
host names
Wherever an IP address is required, you can enter a
host name provided you have configured a DNS server
or put the name and address into the DNS Local Host
Table.
Script files
You can create a script filea text file containing CLI
commandsto simplify repetitive tasks.
Table 16-3: Conventions for Representing Command Syntax
CLI Syntax Description
16 CLI Overview
17. CLI Command Descriptions
This chapter provides detailed descriptions of each of ARRIS D5 UEQ CLI
commands.
When you log in to the CLI, you are in User EXEC mode. This is the initial active
mode accessed when a user logs into the CLI after powering up the D5 UEQ.
User EXEC User EXEC commands are used for everyday system moni-
toring. They allow you to change terminal settings on a temporary basis,
perform basic tests and show system information. The prompt D5> indicates
User EXEC mode.
The User Show commands are part of the User EXEC mode. The prompt will
be D5> as in the User EXEC mode. The User Show commands display system
information.
Privilege EXEC The Privilege EXEC mode commands are used to set oper-
ating parameters. If a Privilege EXEC password exists, the CLI prompts you to
enter it to gain access. The password does not appear on the screen. Privilege
EXEC mode includes the User EXEC commands.
To enter Privilege EXEC mode, enter the enable command at the D5>
prompt. The prompt changes to D5#. If no enable password is configured,
any user may enter Privilege EXEC mode without authentication.
Global Configuration Global Configuration commands apply to features
that affect the entire system. These commands apply to system features and
enable routing functions.
Enter configure terminal at the command prompt in Privilege EXEC mode
to enter the Global Configure mode. The prompt will change to
D5<config>#. To return to Privilege EXEC mode, enter exit or press
Ctrl+Z.
I nterface Configuration Mode These modes can be entered from the
Global Configuration mode by typing interface <string>. For more information
of the types of Mode(s), see CLI Command Descriptions, page 17-1. They are
used to enter configuration parameters for specific interfaces like the fastEth-
ernet, gigabitEthernet and QAM ports. Loopback configurations and port-
channel assignments can be issued from these modes as well. To exit any of
these modes and return to the Global Configuration mode, type exit. To
return directly to the Privilege EXEC mode, type exi t or Ctrl + Z.
aaa accounting commands default
Purpose Creates an default accounting list. Use the [no] version of the command to
remove the default accounting list.
Syntax [no] aaa accounting commands default {none | start-stop
group <name> | stop-only group <name>}
Available in Mode(s) Prompt
Global Configuration D5(config)#
Parameter Definition
none No accounting.
start-stop group <name>
Sends the accounting record of the specified server-group at the initiation and
termination of a command
stop-only group <name>
Sends the accounting record of the specified server-group only at the
termination of a command.
aaa accounting exec default
Purpose Creates an default accounting list. Use the [no] version of the command to
remove the default accounting list.
Syntax [no] aaa accounting exec default {none | start-stop group
{name | tacacs+ <group>} | stop-only group {name | tacacs+
<group>}
none No accounting.
start-stop group {name |
tacacs+ <group>}
Sends the accounting record of the specified group at the initiation and
termination of a command.
stop-only group {name |
tacacs+ <group>}
Sends the accounting record of the specified group only at the termination of
a command.
aaa authentication banner
Purpose Creates an authentication banner.
Syntax aaa authentication banner <input>
<input> Input
aaa authentication enable
Purpose Creates a method list for use by the enable service. Use the [no] version of the
command to remove the method list.
Syntax [no] aaa authentication enable [default {group <tacacs+ |
radius>} | local | none]
default The default authentication list.
group Use the local Server-group
tacacs+ Use list of all TACACS+ hosts
radius Use list of all Radius hosts
local Use local username authentication
none No authentication
aaa authentication fail-message
Purpose Creates an personalized banner that will display when a user login fails. Use
the [no] option to disable this banner.
Syntax [no] aaa authentication fail-message <input>
<input> Message to appear
aaa authentication login
Purpose Creates a login authentication methods list. Use the [no] version of the
command to remove the authentication method list.
Syntax [no] aaa authentication login [name | default {group
<tacacs+ | radius>} | local | none]
name The named authentication list
default The default authentication list.
group Use the local Server-group
tacacs+ Use list of all TACACS+ hosts
radius Use list of all Radius hosts
local Use local username authentication
none No authentication
aaa authentication password-prompt
Purpose Creates a login authentication password prompt. Use the [no] version of the
command to remove the authentication prompt.
Syntax [no]aaa authentication password-prompt <input>
aaa authentication prompt
Purpose Creates a login authentication prompt.
Syntax aaa authentication prompt <input>
aaa authorization commands default
Purpose Creates the default configuration parameters for an authorization list. Use the
[no] version of the command to release the default authorization list.
Syntax [no] aaa authorization commands default {none | group
<tacacs+>}
none No authorization.
group <tacacs+> Configures the authorization record of the specified server-group
aaa authorization exec default
Purpose Creates the default exec parameters for an authorization list. Use the [no]
version of the command to release the default authorization list.
Syntax [no] aaa authorization exec default {none | group
<tacacs+>}
none No authorization.
group <tacacs+> Configures the authorization record of the specified server-group
aaa group server
Purpose Creates a AAA group designed to contain an ordered list of one or more AAA
servers. Use the [no] version of the command to remove the AAA group.
Syntax [no] aaa group server [radius <name> | tacacs+ <name>]
radius <name> Radius server-group name
tacacs+ <name> Tacacs+ server-group name
aaa new-model
Purpose Creates a default configuration for AAA for either Radius or TACACS+. Use the
[no] version of the command to remove the default configuration.
Syntax [no] aaa new-model [radius <name> | tacac+ <name>]
radius <name> Radius server-group name
tacacs+ <name> Tacacs+ server-group name
activation-time
Purpose Specifies the activation time in clock time for the SCG. The time can be in
hh:mm:ss or now + secs. If the time referred to is in the past, an activation
time of now is assumed. Use the [no] version of the command to reset the acti-
vation time to SCG creation time.
Syntax [no] activation-time [now | <now+SS> | <YYYY-MM-DD-
HH:MM:SS.hh> | <today-HH:MM:SS.hh>]
SCG Configuration D5(config-scg)#
now Activate SCG now
<now+SS> Activate SCG in SS seconds
<YYYY-MM-DD-
HH:MM:SS.hh>
Activate at this date and time (UTC)
<today-HH:MM:SS.hh> Activate today at this time (UTC)
alias
Purpose An alias is a shortcut of characters that directly represents a command string.
The alias is entered as a command. It executes the command string. The
command string must be enclosed in quotes. Use the [no] version to remove
an alias.
Syntax [no] alias <alias name> <string>
Example To create an alias of svs for the command show vi deo sessi ons, use the
following command:
D5(config)# alias svs show video sessions
<alias name> Enter the alias name.
<string> Enter the command string.
arp
Purpose Creates a static ARP entry. Use the [no] version of the command to remove
the static ARP entry.
Syntax [no] arp <N.N.N.N> [H.H.H]
<N.N.N.N> IP address for ARP table.
[H.H.H] MAC address for ARP table.
arp * * fastethernet
Purpose Configures how long a dynamically learned IP address and MAC address
remain in the ARP cache. before timing out.
Syntax arp <N.N.N.N> <H.H.H> fastethernet <x/y.z> [<1-4000>]
<N.N.N.N> IP address
<H.H.H> MAC address
<x/y.z> Slot/port.subinf of fastEthernet
[<1-4000>] VLAN ID
arp * * gigabitethernet
Purpose Configures how long a dynamically learned IP address and MAC address
remain in the ARP cache before timing out.
Syntax arp <N.N.N.N> <H.H.H> gigabitethernet <x/y.z> [<1-4000>]
<H.H.H> MAC address
<x/y.z> Slot/port.subinf of gigabitEthernet
[<1-4000>] VLAN ID
arp timeout
Purpose Sets the timeout for ARP entries before timing out.
Syntax arp timeout <300-65535>
<300-65535> Time in seconds. Default is 14400 seconds (4 hours)
assign slot * wan *
Purpose Assigns a slot to a WAN.
Syntax assign slot <1-6> wan <7-8>
<1-6> Slot number
<7-8> WAN slot number
authorization exec *
Purpose Configures authorization parameters.
Syntax [no] authorization exec {default | <input>}
Line Configuration D5(config-line)#
default The default exec authorization list
<input> Named exec authorization list.
auto
Purpose Configures automatic or redundant mode.
Syntax auto
DTI Interface D5(config-dti}#
bandwidth
Purpose Sets the maximum allowed bandwidth for the EMMG channel. Use the [no]
version of the command to disable the maximum bandwidth setting.
Syntax [no] bandwidth <1-50000>
EMMG Configuration D5(config-emmg)#
<1-50000> Maximum bandwidth per stream in Kbps units.
banner
Purpose Sets the login banner to the specified string. Use the [no] version of the
command to completely remove the login banner.
Syntax [no] banner <string> | <filename>
Example To add a banner, use the following command:
D5(config)# banner Welcome to the D5 UEQ
The following is an example of the output returned by the system:
D5( conf i g) #banner " Wel come t o t he D5 UEQ"
D5( conf i g) #
Fr oml ogi n scr een:
Wel come t o t he ARRI S D5 UEQ
Copyr i ght ( c) 2007 ARRI S Gr oup, I nc
Logi n:
<string>
ASCII character string (maximum 2000 characters). The file name string must
be enclosed in quotation marks.
<filename> Sets the login banner from an ASCII text file.
boot
Purpose Configures the boot parameters.
Syntax boot {system flash <FILENAME> | update bootloader}
system flash <FILENAME>
Specify an image on the compact flash from which to boot and where it is
located.
update bootloader Updates the D5 UEQ ROM bootloader.
bridge aging-time
Purpose Sets the aging time for learned entries in seconds.
Syntax bridge aging-time <10-1000000>
<10-1000000> Seconds.
bw-interval
Purpose Sets the interval for QAM output bandwidth change updates.
Syntax bw-interval <sec>
ERM Configuration D5(config-erm)#
<sec> Interval in seconds.
bw-threshold
Purpose Sets the threshold for QAM output bandwidth change updates.
Syntax bw-threshold <kbps>
<kbps> Interval in Kbps.
ca-descriptor
Purpose Adds additional pseudo CA-descriptor to CAT or private data to CA descriptor
of CAT. Use the [no] version of the command to remove the information.
Syntax [no] ca-descriptor {ca-system-id <xxxx> | private-data
<HH-HH-HH-HH-..>}
EMMG Configuration
SCG Configuration
D5(config-emmg)#
D5(config-scg)#
<xxxx> CA-System-ID in hex
<HH-HH-HH-HH-..> Add private data to CA descriptor of CAT
ca-system-id
Purpose Specifies the CA_system_id of the Redundant Group. In a Redundancy group,
all ECMGs must have the same CA_system_id. Use the [no] version of the
command to disable the CA_system_id.
Syntax [no] ca-system-id <xxxx>
Redundancy Group Configuration D5(config-redund-grp)#
<xxxx> CA-System-ID in hex
calendar set
Purpose Sets the internal D5 UEQ real time clock to the specified time and date.
NOTE
The calendar keeps time even if the D5 UEQ is powered off.
Syntax calendar set <hh:mm:ss> [<dd><mmm><yyyy>]
Privilege EXEC D5#
<hh:mm:ss>
Sets the hour 0 - 12, minutes 0 - 60, and seconds 0 - 60, to the specified
time.
<dd> Sets the specified day of the month 0 - 31.
<mmm> Sets the specified month of the year J an - Dec.
<yyyy> Sets the specified year 1970 - 2037.
cancel
Purpose Cancels all changes set since this subinterface was entered.
Syntax cancel
All All
cd
Purpose Changes the working directory on the Compact Flash disk.
Syntax cd <path>
Privilege EXEC D5#
<path> Enter the path to the specified directory.
channel-container
Purpose Specifies the list of QAM channels data from this EMMG connection will be
forwarded to. Use the [no] version of the command to remove the list.
Syntax [no] channel-container <name>
<name> Channel-container name
channel-group
Purpose Adds the interface to the specified channel group. An interface can also be
added to a channel-group in the redundant/backup mode by choosing the
standby option. Use the [no] version of the command to remove the interface
from a channel group.
Syntax [no] channel-group <X> [standby]
GigabitEthernet Sub-interface
Loopback Sub-Interface
D5(config-gig-if)#
D5(config-if)#
<X> Channel group number
[standby] Adds interface to channel-group in redundant/backup mode.
channel delay
Purpose Sets the expected propagation delay through the network from the D5 UEQ to
the ECMG. This is taken into account when calculating the time to send a
cw_provision message to the ECMG. Use the [no] version of the command to
reset to the two second default.
Syntax [no] channel delay <1-20>
ECMG Configuration D5(config-ecmg)#
<1-20>
ECMG network propagation delay in seconds. The longer the delay the earlier
the message will be sent (to compensate for that delay). Default is 2 seconds.
channel mode
Purpose Configures the maximum number of bonded channels set for this RF port since
this subinterface was entered. Use the [no] version of the command to return
to the default value.
Syntax [no] channel mode <dual | octal | quad | single | hex>
QAM Port Sub-interface D5(config-qam-port)#
dual Maximum of two bonded carriers per port.
octal Maximum of eight bonded carriers per port.
quad Maximum of four bonded carriers per port. This is the default value.
single Maximum of one carrier per port.
hex Maximum of six bonded carriers per port.
channel qam
Purpose Adds a QAM channel to a named container by interface stream. Use the [no]
version of the command to remove the QAM channel from a named container
by interface stream.
Syntax [no] channel qam <X/Y.Z> [service-id <program>]
Video Channel Configuration D5(config-video-channel)#
<X/Y.Z> Interface string
service-id <program> Service ID program. Valid range is 1-65535
channel spacing
Purpose Configures the spacing between bonded carriers bandwidth, thus increasing
the distance between center frequencies between bonded channels. Use the
[no] version of the command to remove the spacing between bonded carriers
bandwidth.
NOTE
Channel spacing is not available in hex mode.
NOTE
This command can be used for configuring 6 Mhz Annex C QAM channels into
7 Mhz frequency channel plan (J apan).
Syntax [no] channel spacing <1-100000>
<1-1000000> Frequency width in Hertz
channel test
Purpose Specifies the time between sending channel_test messages when connected
to the ECMG. Use the [no] version of the command to reset to the 10 second
default.
Syntax [no] channel test <5-120>
<5-120> ECM channel test interval in seconds. Default is 10 seconds.
channel-test-period
Purpose Sets the interval between channel test messages. Use the [no] version of the
command to reset the interval.
Syntax [no] channel-test-period <0-120>
EIS Configuration D5(config-eis)#
<0-120> Interval in seconds
channel-test-timeout
Purpose Sets the timeout to wait for channel test response. Use the [no] version of the
command to reset the timeout value.
Syntax [no] channel-test-timeout <2-20>
channel timeout
Purpose Specifies the time taken to wait for a response to a channel test message. Use
the [no] version of the command to remove the waiting time for a response to
a channel test message.
Syntax [no] channel timeout <2-20>

<2-20> ECM channel test timeout in seconds.
channel tsid
Purpose Adds a QAM channel to a named container by transport stream ID. Use the
[no] version of the command to remove the QAM channel from a named
container by transport stream ID.
Syntax [no] channel tsid <1-65535> [service-id <program>]
<1-65535>
Transport stream ID. Default value is 1 to 48 for QAM 1/1.1 to QAM 6/2.4,
respectively.
[service-id <program>] Service ID program. Valid range is 1-65535
channel width
Purpose Configures the distance between center frequencies Use the [no] version of
the command to return to the default width.
Previously, for example, an operator could drop the effective channel width of
an Annex A channel using the video symbol-rate command. The width of
the channel (in terms of the bump on the scope) drops according to the
symbol rate but the channels remain centered at 8Mhz intervals according to
Annex A characteristics. So, on a scope, if you dropped the symbol rate to
5,000,000, you would end up with gaps between each of your four channels
which would still have a total span of 32 Mhz of an Annex A Quad. Now, if you
configured the symbol rate to give a 6Mhz channel, you could then set the
channel width to 6 Mhz and the channels would all be tightly adjacent on a
scope and the quad would occupy 24 Mhz of bandwidth.
NOTE
The symbol rate must be small enough to prevent overlapping of adjacent
channels.
Syntax [no] channel width <distance>
Related Command(s) video symbol-rate
<distance>
Distance in Hertz of each channel in the QAM port. Valid range is 6000000 to
8000000.
chkdsk system
Purpose Verifies that the file system is correct. If the optional repair keyword is speci-
fied, the D5 UEQ will attempt to repair the file system errors.
Syntax chkdsk system [repair]
Example To check the file system, use the following command:
D5# chkdsk system
dosf sck 2. 11 ( 12 Mar 2008)
dosf sck 2. 11, 12 Mar 2008, FAT32, LFN
Checki ng we can access t he l ast sect or of t he f i l esyst em
Boot sect or cont ent s:
Syst emI D " MSDOS5. 0"
Medi a byt e 0xf 8 ( har d di sk)
512 byt es per l ogi cal sect or
8192 byt es per cl ust er
6 r eser ved sect or s
Fi r st FAT st ar t s at byt e 3072 ( sect or 6)
2 FATs, 16 bi t ent r i es
125440 byt es per FAT ( = 245 sect or s)
Root di r ect or y st ar t s at byt e 253952 ( sect or 496)
512 r oot di r ect or y ent r i es
Dat a ar ea st ar t s at byt e 270336 ( sect or 528)
62522 dat a cl ust er s ( 512180224 byt es)
63 sect or s/ t r ack, 255 heads
63 hi dden sect or s
1000881 sect or s t ot al
Recl ai mi ng unconnect ed cl ust er s.
Syst em: 191 f i l es, 14532/ 62522 cl ust er s
Privilege EXEC D5#
clear arp-cache
Purpose Clears the entire arp cache.
Syntax clear arp-cache
Privilege EXEC D5#
clear counters depi
Purpose Clears all depi sessions counters and other tabled information.
Syntax clear counters depi
Privilege EXEC D5#
clear counters qam
Purpose This set of commands resets the respective counters and other tabled informa-
tion for a QAM, port or slot.
Syntax clear counters qam <X/Y.Z>
Privilege EXEC D5#
<X/Y.Z> Clears MIB counters for the QAM in the specified port/slot.channel.
clear ip igmp group
Purpose Clears all IGMP groups from the system.
Syntax clear ip igmp group
Privilege EXEC D5#
clear ip igmp group interface gigabitethernet
Purpose Clears all IGMP groups from the specified interface.
Syntax clear ip igmp group interface gigabitethernet <X/Y>
Privilege EXEC D5#
<X/Y> Gigabit Ethernet slot/port.
clear ip igmp group interface loopback
Purpose Clears all IGMP groups from the specified interface.
Syntax clear ip igmp group interface loopback [n]
Privilege EXEC D5#
[n]
Loopback number. If a loopback number is not specified, this command
deletes all loopbacks.
clear logging history
Purpose Clears the local event log.
Syntax clear logging history
Privilege EXEC D5#
clear mac-address
Purpose Clears the specified MAC address entry from the MAC address table.
Syntax clear mac-address <H.H.H>
Privilege EXEC D5#
<H.H.H> MAC address
clear mac-address-table
Purpose Clears all learned entries from the MAC address table.
Syntax clear mac-address-table
Privilege EXEC D5#
clear qam-log
Purpose Clears the contents of the QAM log.
Syntax clear qam-log
Privilege EXEC D5#
clear screen
Purpose Clears the terminal window.
Syntax clear screen
Privilege EXEC D5#
clear video psig active sections
Purpose Clears all sections being carouselled by the MUX.
Syntax clear video psig active sections
Privilege EXEC D5#
cli account
Purpose Sets the login account name and passwords for access to the D5 UEQ
command line. Use the [no] version of the command to remove the login pass-
word.
Syntax [no] cli account <name> [enable-password <password> |
encrypt <password> | password <password> | secret-password
<password>]

<name> User name
enable-password <password>
Password to move into Privilege EXEC mode for this account. This password is
shown in clear text in the D5 UEQ configuration.
NOTE: This command sets the Privilege EXEC mode encrypted password to a
password string. If this password is not set, then the enable password is
required for Privilege EXEC mode access.
The password string must be at least eight characters long.
If both the enable and enable secret passwords have not been set, the D5 UEQ
disables access to Privilege EXEC mode using telnet. You can still enter
Privilege EXEC mode using a direct serial connection to the D5 UEQ.
encrypt <password> Sets the encrypted string.
password <password> Sets the login password for this account.
secret-password <password>
Sets the encrypted password to move to the Privilege EXEC mode after login.
This password is visible in the configuration file in encrypted format.
cli logging
Purpose Enables session command logging. CLI logging will redirect all console
messages to archival files on the compact flash and will also continue to be
displayed on a connected CLI session. Use the [no] version of the command
to disable command logging.
Syntax [no] cli logging [password <password>] [path <path>] [size
<1-50000>]
password <password> Enables command logging of passwords
path <string>
Sets the file path for storing the default log files. The default file names used
are console.log, vty0.log, vty1.log, vty2.log, or vty3.log.
size <1 - 50000> Sets the maximum allowed size of log files in kilobytes.
client-id
Purpose Sets the client ID of the EMMG. Use the [no] version of the command to
remove the assigned client-id.
Syntax [no] client-id <xxxx.yyyy>
<xxxx.yyyy> EMMG client_id
clock set
Purpose Sets the internal D5 UEQ real time clock to the specified time and date.
NOTE
The clock keeps time even if the D5 UEQ is powered off.
Syntax clock set <hh:mm:ss> [<dd><mmm><yyyy>]
Example To set the time and date for 1:59:11 p.m. on February 11, 2008, use the
following command:
D5# cl ock set 13: 59: 11 11 f eb 2008
Privilege EXEC D5#
<hh:mm:ss>
Sets the hour 0 - 12, minutes 0 - 60, and seconds 0 - 60, to the specified
time.
<dd> [Optional] Sets the specified day of the month 0 - 31.
<mmm> [Optional] Sets the specified month of the year J an - Dec.
<yyyy> [Optional] Sets the specified year 1970 - 2037.
clock summer-time <timezone> date
Purpose Creates a specific period of summer time (daylight savings time) for the spec-
ified time zone. Use the clock summer-time recurring command to set
recurring time changes. Use the [no] version of the command to reset to
default summer time.
Syntax [no] clock summer-time <timezone> date {<1-31> <JAN-DEC>
<1970-2037> <hh:mm>} {<1-31> <JAN-DEC> <1970-2037>
<hh:mm>}
Example To set the summer-time clocks start and end dates, use the following
command:
D5(config)# clock summer-time EDT date 3 14 2007 02:00 3 22 2007 02:00
Related Command(s) clock summer-time <timezone> recurring
<timezone> The time zone name. Use clock timezone to create the timezone.
<1-31> <J AN-DEC> <1970-
2037> <hh:mm>
The starting date and time. The format is: day month year hh:mm
<1-31> <J AN-DEC> <1970-
2037> <hh:mm>
The ending date and time. The format is: day month year hh:mm
clock summer-time <timezone> recurring
Purpose Creates a recurring period of summer time for the specified time zone. Use
clock summer-time date to set a specific period of summer time. Use the [no]
version of the command to remove a recurring period of summer time.
Syntax [no] clock summer-time <timezone> recurring {<1-4 | first
| lst> <1-7 | sun-sat> <jan-dec> <hh:mm>} {<1-4 | first |
st> <1-7 | sun-sat> <jan-dec> <hh:mm>}
Example To set the summer-time clocks start and end dates to be recurring, use the
following command:
D5(config)# clock summer-time EDT recurring first sun apr 01 02:00
first sun oct 02:00

<timezone> The time zone name. Use clock timezone to create the timezone.
<1-4 | first | lst> <1-7 | sun-
sat> <jan-dec> <hh:mm>
The starting date and time. The format is: week day month hh:mm.
Week can be first, last or 1 to 4. Day is the day of the week (sun through
sat, or 1 to 7)
{<1-4 | first | lst> <1-7 | sun-
sat> <jan-dec> <hh:mm>
The ending date and time. The format is: week day month hh:mm. Week
can be first, last or 1 to 4. Day is the day of the week (sun through sat,
or 1 to 7)
clock timezone
Purpose Sets system clock which is important to ensure proper reporting times for items
such as system logging messages. Use the [no] version of the command to
delete a configured timezone.
Syntax [no] clock timezone <name> <offset>
<name>
Any text string to describe the time zone. Maximum of nine characters
allowed.
<offset>
The offset, in hours (and optionally minutes), from UTC. Valid range: -12 to
+14
component-name
Purpose Sets the component name of this ED connection to the remote ERM. Use the
[no] version of the command to remove the component name.
Syntax [no] component-name <string>
ERM Configuration
D5(config)#
D5(config-erm)#
<string> The component name
component <pid> transport
Purpose Sets the specified streams (such as teletext and subtitle streams) to be sent
unencrypted while keeping audio/video scrambled. Use the [no] version of the
command to remove the static configuration of the ES scrambling.
NOTE
When there is an overlap between SCG service and ES configuration, priority
is always given to service level scrambling over ES scrambling.
Syntax [no] component <pid> transport <ts-id>
<pid> The component name
<ts-id> ID number of the transport stream
configure debug
Purpose Configures advanced system debugging.
Syntax configure debug {autospool | cli | console | display [date
|file | func | line | task | ticks | time] | nonvolatile |
overwrite | syslog | volatile}
Privilege EXEC D5#
autospool Enables autospooling debug output.
cli Enables CLI debug output.
console Enables console debug output.
display [date | file | func | line
| task | ticks | time]
Configures debug logging display options; e.g. date, filename, function,
linenumber, taskname, ticks, and time.
nonvolatile Enables non-volatile debug output storage.
overwrite Enables overwrite of oldest debug entries.
syslog Enables syslog debug output.
volatile Enables volatile debug output storage.
configure terminal
Purpose Enters the Configure mode from the terminal. Prompt will change from D5#
to D5(config)#.
Syntax configure terminal
Privilege EXEC D5#
connection-timeout
Purpose Sets the EIS connection timeout. Use the [no] version of the command to reset
the timeout value.
Syntax [no] connection-timeout <5-1800>
copy
Purpose Duplicates the file <orig> and names it <dest>.
Syntax copy <orig> <dest>
Specify files by name or use the following special qualifiers:
Example If copying to or from the local disk, make sure that the drive letter is in upper
case.
D5# copy tftp://10.1.100.1/vxWorks1.st vxWorks1.st
D5# copy C:/test.txt C:/test.old.txt
Copyi ng. . . . !
29886 byt es copi ed i n 0 secs <29886 byt es/ sec>
Privilege EXEC D5#
Special Qualifiers Definition
flash
Copies a file on the flash disk to the flash disk
or a TFTP server.
running-configuration
Copies the running configuration to a file or
the startup configuration.
startup-configuration
Copies the startup configuration to a file or
the running configuration.
tftp
Copies a file from the default TFTP server to
the flash disk.
tftp://ipaddr/file
Copies a file (or configuration) to or from the
TFTP server at the specified address
<FROM_FILENAME> Copies from a local file.
cost
Purpose Sets the cost that is advertised by the D5 UEQ to remote ERMs. The ERMs may
use this value in conjunction with local policy rules when allocating sessions to
edge devices like the D5 UEQ. Use the [no] version of the command to delete
the user provided value and restore the default value of 1.
Syntax cost <cost>
[no] cost
<cost>
Cost advertised by this ERM instance. Valid range is 1-255. The default value
is 1.
cp-duration
Purpose Specifies a crypto period duration. Use the [no] version of the command to
reset the crypto period duration to the one minute default.
Syntax cp-duration <50-65535>
[no] cp-duration
<50-65535>
Duration specified in units of 100ms (i.e. 2000 would be 200 seconds).
Defaults to 600 (1 minute). Minimum value is 50, 5 seconds.
crypto key generate
Purpose Generates the host public and private keys for the D5 UEQ Secure Shell server.
Use the [no] version of the command to remove the host public and private
keys for the SSH server.
Syntax [no] crypto key generate {both [modulus <1-65535>] | dsa
[modulus <1-65535> | rsa modulus <1-65535>}
both [modulus <1-65535>] Generates RSA and DSA keys. Key length range is 1-65535.
dsa [modulus <1-65535>] Generates only the DSA key.
rsa [modulus <1-65535>] Generates only the RSA key.
crypto key import rsa <input> pem url
Purpose Installs a public RSA or DSA key in PEM format for the specified user. Once a
users public key is installed in the D5 UEQ user database, password authenti-
cation for that user is no longer available. Use the [no] version of the command
to remove the public RSA or DSA key for a specified user.
Syntax [no] crypto key import rsa <input1> pem url <input2>
<input1> Userid
<input2>
Either the URL of a file on a TFTP server, or the name of a file on the D5
UEQ compact flash disk.
crypto key zeroize
Purpose Deletes the specified host public and private key types. The type is one of DSA,
RSA or both.
Syntax crypto key zeroize {both [<input>] | dsa [<input>] | rsa
[<input>]}
both <input>
Deletes RSA and DSA keys. Specifying the optional userid deletes only the
public keys associated with the D5 UEQ user ID.
dsa <input>
Deletes only the DSA keys. Specifying the optional userid deletes only the
rsa <input>
Deletes only the RSA keys. Specifying the optional userid deletes only the
data-id
Purpose Sets the data-id for the EMMG channel. For TCP-based stream setup, this is
used to verify the received data-id is as expected. For UDP-only operation it is
required to match the incoming data-provision to the correct EMMG stream
data-type. Use the [no] version of the command to clear the data-id of the
EMMG.
Syntax [no] data-id <1-65535>
<1-65535> Data ID
data-type
Purpose Sets the data type for an EMM stream.
Syntax data-type <emm> | <pdg> | <stream>
<emm> Entitlement Management Message
<pdg> Private Data
<stream> Entitlement Management Message
debug module aaa
Purpose Enables debugging of AAA. Use the [no] version of the command to turn off
debugging.
Syntax [no] debug module aaa
Privilege EXEC D5#
debug module alarms
Purpose Used to configure alarm debugging. Use the [no] version of the command to
turn of debugging.
Syntax [no] debug module alarms <1-6>
Privilege EXEC D5#
<1-6> Debug level (the higher the number, the more information).
debug module cas ecm
Purpose Used to configure Conditional Access debug parameters on the Entitlement
Control Message (ECM). Use the [no] version of the command to turn off
debugging.
Syntax [no] debug module cas ecm [channel [tlv [verbose] |
verbose] | [stream [tlv [verbose] | verbose] |[scg [tlv
[verbose] | verbose]
Privilege EXEC D5#
channel [tlv [verbose] CAS ECM channel TLV
stream [tlv [verbose] CAS ECM stream TLV
scg [tlv [verbose] CAS ECM SCG TLV.
[verbose] Verbose
debug module cas eis
Purpose Used to configure CAS Entitlement Information Message (EIS) debug parame-
ters. Use the [no] version of the command to turn of debug levels.
Syntax [no] debug module cas eis [tlv [verbose]] | [verbose]
Privilege EXEC D5#
tlv [verbose] CAS EIS TLV
[verbose] Verbose
debug module cas emm
Purpose Used to configure CAS Entitlement Management Message (EIS) debug param-
eters. Use the [no] version of the command to turn off debug levels.
Syntax [no] debug module cas emm [tlv [verbose]] | [verbose]
Privilege EXEC D5#
[tlv [verbose]] CAS EMM TLV
[verbose] Verbose
debug module cas mux
Purpose Used to configure CAS Program Specific Information Generator (PSIG) debug
parameters. Use the [no] version of the command to turn off debug levels.
Syntax [no] debug module cas mux [tlv [verbose]] | [verbose] |
<input>
Privilege EXEC D5#
[tlv [verbose]] CAS PSIG TLV
[verbose] Verbose
<input> CAS PSIG
debug module cli
Purpose Used to configure CLI debug parameters. Use the [no] version of the command
to turn off debug levels.
Syntax [no] debug module cli [<1-255>]
Privilege EXEC D5#
[<1-255>]
Debug level (the higher the number, the more debug information is
recorded).
debug module depi control-plane
Purpose Used to configure CLI debug parameters. Use the [no] version of the command
Syntax [no] debug module depi control-plane [authentication | avp
| connection | database | gas | session] [verbose]
Privilege EXEC D5#
authentication L2TP authentication
avp L2TP AVP
connection L2TP connection
database L2TP database
gas GAS layer
session L2TP session
verbose Verbose
debug module dhcpc
Purpose Used to configure Management Interface DHCP client debug parameters. Use
the [no] version of the command to turn off debug levels.
Syntax [no] debug module dhcpc [<1-5>]
Privilege EXEC D5#
[<1-5>]
recorded).
debug module dns
Purpose Used to enable the debug dns client. Use the [no] version of the command to
disable debug module dns.
Syntax [no] debug module dns
Privilege EXEC D5#
debug module dti
Purpose Used to configure DTI debugging. Use the [no] version of the command to turn
of debugging.
Syntax [no] debug module dti <1-5>
Privilege EXEC D5#
<1-5> Debug level (the higher the number, the more information)
debug module ecl
Purpose Used to configure ECL debug parameters. Use the [no] version of the
command to turn off debug levels.
Syntax [no] debug module ecl [<1-255>]
Privilege EXEC D5#
[<1-255>]
recorded)
debug module httpd
Purpose Used to configure HTTP daemon debug parameters. Use the [no] version of
the command to turn off debug levels.
Syntax [no] debug module httpd [<1-255>]
Privilege EXEC D5#
[<1-255>]
recorded).
debug module igmp
Purpose Used to configure IGMP debug parameters. Use the [no] version of the
Syntax [no] debug module igmp <1-6>
Privilege EXEC D5#
<1-6>
recorded).
debug module ip-bundle
Purpose Used to configure IP bundle debug parameters. Use the [no] version of the
Syntax [no] debug module igmp <1-6>
Privilege EXEC D5#
<1-6>
recorded).
debug module ipproc
Purpose Used to configure IP Processor debug parameters. Use the [no] version of the
Syntax [no] debug module ipproc [<1-255>]
Privilege EXEC D5#
[<1-255>]
recorded)
debug module mon
Purpose Used to configure the Monitor card debug parameters. Use the [no] version of
Syntax [no] debug module mon [<0-9> | slotmgr <0-9> | dlmgr <0-9>]
Privilege EXEC D5#
<0-9>
Monitor card debug config 0 to 9, slot manager and FPGA download debug
information.
debug module mpeg
Purpose Used to configure the Monitor card debug parameters. Use the [no] version of
Syntax [no] debug module mpeg [database | gas | ipp [verbose] |
transport-stream <incoming [verbose] | outgoing [verbose]
| table-reassembly [verbose [verbose]]>]
Privilege EXEC D5#
[database] MPEG Manager database
[gas] MPEG Manager GAS communications
[ipp] MPEG Manager IPP interface
[transport-stream <incoming |
outgoing | table-reassembly>]
MPEC Transport Streams. Valid choices are: incoming streams, outgoing
streams or (P)SI table-reassembly.
debug module ntp
Purpose Used to configure the Network Time Protocol (NTP) debug parameters. Use the
[no] version of the command to turn off debug levels.
Syntax [no] debug module ntp [<1-255>]
Privilege EXEC D5#
[<1-255>] Debug level (the higher the number, the more debug information recorded).
debug module qam
Purpose Used to configure the QAM Manager (QAM) debug parameters. Use the [no]
version of the command to turn off debug levels.
Syntax [no] debug module qam [<1-255>]
Privilege EXEC D5#
[<1-255>] Debug level (the higher the number, the more debug information recorded).
debug module radius
Purpose Enables debugging of Radius. Use the [no] version of the command to turn of
debugging.
Syntax [no] debug module radius <1-6>
Privilege EXEC D5#
debug module rtsp connections
Purpose Configures RTSP connection debugging. Use the [no] version of the command
Syntax [no] debug module rtsp connections <1-7>
Privilege EXEC D5#
<1-7> Debug level (higher number = more information)
debug module rtsp msg
Purpose Configures RTSP message debugging. Use the [no] version of the command to
turn off debug levels.
Syntax [no] debug module rtsp msg <1-7>
Privilege EXEC D5#
<1-7> Debug level (higher number = more information)
debug module sdv
Purpose Used to configure the Switched Digital Video manager debug parameters. Use
the [no] version of the command to turn off debug levels.
Syntax [no] debug module sdv [<1-10> | [pi <1-5>] | [rpc <1-10>]
Privilege EXEC D5#
<1-10> Debug level (the higher the number, the more debug information recorded).
[pi <1-5>]
PI manages SDV packet insertion. Debug level is 1- 5 (the higher the number,
the more debug information recorded)
[rpc <1-10>]
Remote Procedure Call (RPC) manages the RPC request dump. Debug level is
1 - 10 (the higher the number, the more debug information recorded)
debug module snmp
Purpose Used to configure SNMP debug parameters. Use the [no] version of the
Syntax [no] debug module snmp [<1-255>]
Privilege EXEC D5#
[<1-255>] Debug level (the higher the number, the more debug information is recorded).
debug module tacacs
Purpose Enables debugging of TACACS+. Use the [no] version of the command to turn
of debugging.
Syntax [no] debug module tacacs <1-6>
Privilege EXEC D5#
debug module timerlib
Purpose Enables debugging of TimerLib. Use the [no] version of the command to turn
of debugging.
Syntax [no] debug module timerlib <1-6> <string>
Privilege EXEC D5#
<string> TLA name of a specific TimerLib instance.
debug module vrep connections
Purpose Configures debugging of VREP connections. Use the [no] version of the
command to turn off debugging.
Syntax [no] debug module vrep connections <1-5>
Privilege EXEC D5#
<1-5> Debug level (the higher the number, the more debug information is recorded).
debug module vrep fsm
Purpose Configures debugging of VREP Finite State machine. Use the [no] version of
the command to turn off debugging.
Syntax [no] debug module vrep fsm
Privilege EXEC D5#
debug module vrep msg
Purpose Configures debugging of VREP messages. Use the [no] version of the
command to turn off debugging.
Syntax [no] debug module vrep msg
Privilege EXEC D5#
debug snmp
Purpose Enables SNMP traffic debugging. Use the [no] version of the command to
disable SNMP traffic debugging.
Syntax [no]debug snmp
Privilege EXEC D5#
default-cp-duration
Purpose Sets the default CP duration in seconds. Use the [no] version of the command
to reset the CP duration.
Syntax [no] default-cp-duration <1-65535>
<1-65535> Default CP duration (in seconds) used if none is provided.
delete
Purpose Removes the specified file from the Compact Flash module.
CAUTI ON
Care should be taken when deleting configuration or boot image files.
Syntax delete <filename>
Privilege EXEC D5#
<filename> Name of file to be deleted.
depi control-plane
Purpose Configures the DEPI L2TP control-plane. Use the [no] version of this command
to remove the DEPI control-plane.
Syntax [no] depi control-plane
depi disconnect connection
Purpose Removes the incoming DEPI session from the specified connection.
Syntax depi disconnect connection <1-65535> {force | session <1-
65535> [force]}
Privilege EXEC D5#
<1-65535> Local connection ID
force Force immediate teardown
session <1-65535> [force] L2TP session ID. Use the option [force] parameter for immediate teardown.
depi dmpt dest-ip * * sessionid
Purpose Configures the DEPI addressing associated with each QAM channel, the
following configuration for each QAM channel is required. The number after
dmpt is the dest-ip address which identifies the ingress gigabitEthernet port
on the D5 UEQ that the L2TPv3 DEPI stream must be sent to (this is used to
manually allocate input bandwidth over the available gigabitEthernet ports)
followed by the L2TPv3 sessionI D for the particular QAM channel. Use the
[no] version of the command to remove the depi session.
Syntax depi dmpt dest-ip <N.N.N.N> [src-ip <addr>] sessionid <1-
4294967295>
no depi
NOTE
correctly to match what is being sent, and a DEPI rule for UDP port 1-65535
was created, that rule will also allow an L2TPv3 sessionID of 1-65535 to pass.
Example:
depi dmpt dest - i p N. N. N. N udp 1000
A backup rule of depi dmpt dest-ip 1234 sessionid 1000 will also be
configured. If the user sends in UDP 1000, the traffic matches the rules. If the
system is misconfigured, traffic using L2TPv3 sessionId 1000 would still pass.
Example:
depi dmpt dest - i p N. N. N. N sessi oni d 1000
QAM Sub-interface D5(config-qam-if)#
<N.N.N.N> Destination IP address from IP header
src-ip <addr> Source IP address
<0-4294967295> Session ID in the L2TP header
A backup rule of depi dmpt dest-ip 1234 udp 1000 will also be configured.
If the user sends in L2TPv3 traffic using sessionID 1000, the traffic matches
the rules. If the system is misconfigured, traffic using UDP port 1000 would still
pass.
depi dmpt dest-ip * * udp
Purpose Configures the DEPI addressing associated with each QAM channel, the
following configuration for each QAM channel is required. The number after
dmpt is the dest-ip address which identifies the ingress gigabitEthernet port
on the D5 UEQ and the output QAM channels. Use the [no] version of the
command to remove the udp session.
Syntax depi dmpt dest-ip <input> [src-ip <addr>] udp <1-65535>
no depi
NOTE
correctly to match what is being sent, and a DEPI rule for UDP port 1-65535
was created, that rule will also allow an L2TPv3 sessionID of 1-65535 to pass.
Example:
depi dmpt dest - i p N. N. N. N udp 1000
A backup rule of depi dmpt dest-ip 1234 sessionid 1000 will also be
configured. If the user sends in UDP 1000, the traffic matches the rules. If the
system is misconfigured, traffic using L2TPv3 sessionId 1000 would still pass.
Example:
depi dmpt dest - i p N. N. N. N sessi oni d 1000
Modes Prompt
QAM Sub-interface D5(config-qam-if)#
<input> Destination IP address from IP header
src-ip <addr> Source IP address
<1-65535> Destination UDP port
A backup rule of depi dmpt dest-ip 1234 udp 1000 will also be configured.
If the user sends in L2TPv3 traffic using sessionID 1000, the traffic matches
the rules. If the system is misconfigured, traffic using UDP port 1000 would still
pass.
depi timeout session close
Purpose Sets to DEPI session timeout.
Syntax depi timeout session close <1-65> {
Privilege EXEC D5#
<1-65> Seconds
description
Purpose Allows user to a textual description to be used as a reference for this specific
interface. Use the [no] version of the command to remove the textual descrip-
tion for the interface.
Syntax [no] description <string>

FastEthernet Sub-Interface
GigabitEthernet Sub-Interface
QAM Channel Sub-Interface
ERM Configuration
D5<config-if>#
D5(config-gig-if)#
D5(config-qam-channel)#
D5(config-erm)#
<string> Textual description
diagnostics bootup level
Purpose Runs the hardware diagnostics whenever a QAM card is inserted, reset or
present in the slot when the system starts up.
Syntax diagnostics bootup level <complete | minimal>
Related Command(s) show interfaces qam * diagnostics
QAM Card Interface D5(config-qam-card)#
<complete> Runs complete hardware diagnostics at card bootup time.
<minimal> (Default) Runs minimal hardware diagnostics at card bootup time.
diagnostics enable module qam
Purpose Enables manufacturing mode on the QAM card in the specified slot.
Syntax diagnostics enable module qam <1-6> >
Privilege EXEC
D5#
D5(config)#
<1-6> QAM slot number
diagnostics ondemand iteration
Purpose Sets the number of test iterations.
Syntax diagnostics ondemand iteration <input> >
Privilege EXEC
D5#
D5(config)#
<input> Test iteration number. Valid range is 0-1000 where 0 is continuous.
diagnostics start module qam
Purpose Performs an ad hoc diagnostics check on the QAM card in the specified slot and
displays the results. Two diagnostics mode are currently available, minimal and
complete. Minimal diagnostics runs the critical tests that will ensure that the
QAM card is in working order. Complete diagnostics runs the minimal tests as
well as a battery of extensive and lengthy tests such as a complete RAM sweep.
CAUTI ON
During the diagnostics run, the QAM card will be taken out of service as most
tests are intrusive and prevent normal operation.
Syntax diagnostics start module qam <1-6> test <complete |
minimal>
Privilege EXEC
D5#
D5(config)#
<complete> Runs a complete diagnostic test suite.
<minimal> Runs a minimal diagnostic test suite.
diagnostics stop module qam
Purpose Stops an ad hoc diagnostics check on the QAM card in the specified slot.
Syntax diagnostics stop module qam <1-6> >
Privilege EXEC
D5#
D5(config)#
diagnostics su qam * do
Purpose Runs a DnlMgr command on the QAM card in the specified slot.
Syntax diagnostics su qam <1-6> do
Privilege EXEC D5#
diagnostics su qam * show
Purpose Displays the DnlMgr information for the QAM card in the specified slot.
Syntax diagnostics su qam <1-6> do
Privilege EXEC D5#
dig
Purpose The domain information groper (dig) sends domain name query packets to
name servers to look up an IP address or hostname.
Syntax dig <fqdn | ip_addr>
Privilege EXEC D5#
<fqdn> Fully qualified domain name. Enter this parameter to discover the IP address.
<ip_addr> IP address. Entering this parameter to discover the FQDN.
dir
Purpose Displays a list of all files in the current directory or the specified directory path.
Syntax dir [<path>]
Privilege EXEC D5#
[<path>] The specified directory path.
disable
Purpose Exits the Privilege EXEC mode and drops the user into the User mode. The
prompt will change from D5# to D5>.
Syntax disable
Privilege EXEC D5#
disconnect
Purpose Disconnects telnet or SSH sessions even if not fully logged in. Valid range: 0
to 3.
NOTE
The disconnect command will not disconnect Web Manager sessions.
Syntax disconnect {vty <0-3> | ssh <0-3>}
Privilege EXEC D5#
vty <0-3> Telnet connection. Valid range is 0-3.
ssh <0-3> SSH connection. Valid range is 0-3.
dti offset
Purpose Sets the DOCSIS timing interface.
Syntax dti offset <-30000-30000>
<-30000-30000> Ticks from 1024Hz clock
dualwan
Purpose Enables dual WAN mode. Use the [no] version of the command to disable dual
WAN mode.
Syntax [no] dualwan
<1-65> Seconds.
duplex
Purpose By default, the port is set to auto-negotiate. If desired, you can set the oper-
ating mode to full duplex with the following command.
Syntax D5<config-if>#duplex <auto | full | hal f >
D5(config-gig-if)#duplex <auto | full>
FastEthernet Interface
GigabitEthernet Interface
D5(config-if)#
D5(config-gig-if)#
<auto> Auto-negotiate mode (for both duplex and speed)
<full> Full-duplex mode
<half> Half-duplex mode. Available in FastEthernet Interface mode only.
ecm-group * super-cas-id
Purpose Specifies an ECM group. The ECM group id must be unique per
CA_system_super-cas-id. Up to two ecm-groups can be described. Use the
[no] version of the command to remove the ECM group from this SCG.
Syntax [no] ecm-group <0-65535> super-cas-id <xxxx.yyyy> [access-
criteria <HH-HH-HH-HH-..>]

<0-65535> ECM ID unique for SCG.
<xxxx.yyyy> Super-cas-id in xxxx.yyyy format.
<HH-HH-HH-HH- ... > Access criteria in a hexidecimal string with dashes
ecm-group * transport
Purpose Configures the PID to be used on the specified QAM channel to transmit the
ECM tables associated with this ECM group. Use the [no] version of the
command to remove the ECM group from the SCG.
Syntax [no] ecm-group <0-65535> transport <0-65535> pid <0-65535>
<0-65535> ECM ID unique for SCG
<0-65535> Transport associated with PID and PID number.
ecm-wakeup
Purpose Enables a non-persistent ECM channel connection. Use the [no] version of the
command to disable the non-persistent ECM channel connection.
Syntax [no] ecm-wakeup <0-65535>

<0-65535> Specify preamble duration before next ECM datagram (in seconds).
enable
Purpose Enters Privilege EXEC mode after receiving a valid enable password. See
undebug snmp on page 17-453 for more details.
NOTE
The User is allowed three invalid login attempts before the login fails. If the
login fails, you will need to type enabl e again.
Syntax enable [global-password <password>] [password <password>]
[secret <password>]
Example To enter Privilege EXEC Mode, type the following command:
D5> enable
Password:
D5#
NOTE
Notice that the D5> prompt changes to D5# prompt when the D5 UEQ
enters the enable mode.
Mode Prompt
User EXEC D5>
global-password <password> Sets the global password
password <password> Sets the enable password
secret <password> Sets the secret password to use
Purpose Configures the default authentication list.
Syntax [no] enable authentication default
enable-login
Purpose Enables TACACS+ users to login directly to Enable mode. Use the [no] version
of the command to turn it off.
Syntax [no] enable-login
Example TACACS+ users can login directly to enable mode by configuring on a line with
the following sequence:
D5(config)# line vty 0 3
D5(config-line)# enable-login
Mode Prompt
encapsulation dot1q
Purpose Assigns a VLAN tag number to this sub-interface. Outbound data is not
encoded with this tag. There can only be one native VLAN specified per subin-
terface. Use the [no] version of the command to remove a specific VLAN tag
number for this interface.
Syntax [no] encapsulation dot1q <1-4094>
FastEthernet Interface
GigabitEthernet Interface
D5(config-if)#
D5(config-gig-if)#
D5(config-if)#
<1 - 4094> VLAN tag number.
end
Purpose Exits the current command mode.
Syntax end

All All
erase startup-config
Purpose Erases the startup configuration file.
WARNI NG
This command erases startup configuration file!
Syntax erase startup-config
Privilege EXEC D5#
erm
Purpose Binds a gigabit interface to an ERM. Use the [no] version of the command to
remove the ERM
Syntax [no] erm <name>
GigabitEthernet Sub-interface D5(config-gig-if)#
<name> Name of the configured ERM that this ethernet is available to
exception auto-reboot
Purpose Enables or disables automatic reboot upon system crash. Use the [no] version
of the command to disable automatic reboot upon a system crash.
Syntax [no] exception auto-reboot
exception auto-reboot mon
Purpose Enables or disables automatic reboot upon MON crash. Use the [no] version of
the command to disable automatic reboot upon a MON crash.
Syntax [no] exception auto-reboot mon
exit
Purpose Exits the current command mode. Typing exit in the Global Configuration
mode, exits the user back to the Privilege EXEC mode. Typing exit from the
User mode will terminate the CLI session.
Syntax exit
Mode Prompt
All All
file prompt
Purpose Sets the confirmation level for file commands and instructs the D5 UEQ to
prompt the user before executing certain file commands.
Syntax file prompt [alert |noisy | quiet]
[alert] Prompts only for destructive operations.
[noisy] Confirms all operations
[quiet] Prompts the user to confirm format or erase commands only.
format system
Purpose This command completely erases and reformats a Compact Flash card.
WARNI NG
This command reformats the compact flash card!
Syntax format system
Privilege EXEC D5#
gratuitous arp
Purpose Enables transmission of gratuitous arps and sets transmission parameters on
ports configured in a video mode. Use the [no] version of the command to
disable transmission of gratuitous arps.
Syntax [no] gratuitous arp [interval <5-600>]

<5-600> Transmission interval in seconds.
hostname
Purpose Sets the D5 UEQ host name. The host name is shown as part of the command
line prompt and included with the system log information.
Syntax hostname <string>
<string> Host name
interface
Purpose Defines the configuration on the specified interface, including subnet mask.
Use the [no] version of the command to disable configuration for a specified
interface.
Syntax [no] interface {dti | fastethernet <X/Y.Z> |
gigabitethernet <X/Y> | loopback <1-31> | port-channel <1-
2> | pwr-convertor <1-2> powerup | qam <X | X/Y | X/Y.Z>}
NOTE
Configuration changes will be applied after the exit command is executed.
Port-channel Sub-Interface
QAM Card
QAM Port Sub-Interface
ERM Configuration
D5(config)#
D5<config-if>#
D5(config-gig-if)#
D5(config-if)#
D5(config-qam-if)#
D5(config-erm)#
dti DTI
fastethernet <X/Y.Z> Slot/port.channel
gigabitethernet <X/Y> Slot/port.channel
loopback <1-31>
Loopback number. NOTE: Only loopback sub-interfaces numbered 1-15 are
currently available.
port-channel <1-2> Port-channel number
pwr-convertor <1-2>
powerup
Powers up the specified power convertor
qam <X | X/Y | X/Y.Z> QAM Card [1-6] | QAM Port [1-4] | QAM Channel interface [1-8]
ip address
Purpose Defines IP configuration on this interface, including subnet mask. The IP
address can be set as secondary. Use the [no] version of the command to
disable IP configuration on this interface.
Syntax [no] ip address <N.N.N.N> <M.M.M.M> [secondary]>

ECMG Configuration
EIS Configuration
D5<config-if>#
D5(config-gig-if)#
D5(config-if)#
D5(config-ecmg)#
D5(config-eis)#
D5(config-psig)#
<N.N.N.N> IP address. The IP address can be set as secondary.
<M.M.M.M> Subnet mask
[secondary] Secondary address
ip broadcast-address
Purpose Defines broadcast IP configuration on this interface.
Syntax ip broadcast-address <N.N.N.N>
D5<config-if>#
D5(config-gig-if)#
D5(config-if)#
<N.N.N.N> IP Mask.
ip bundle fastethernet
Purpose Sets up IP bundle spare fastethernet interface relationship. Use the [no] option
to remove the spare port.
Syntax [no] ip bundle fastethernet <0/1>
Fastethernet Interface D5<config-if>#
<0/1> Slot/port
ip bundle gigabitethernet
Purpose Sets up IP bundle spare gigabitEthernet interface relationship. Use the [no]
option to remove the spare port.
Syntax [no] ip bundle gigabitethernet <0/1>
<0/1> Slot/port
ip bundle policy non-revertive
Purpose Sets the IP redundancy option to remain on the spare port when the primary
port becomes operational.
Syntax [no] ip bundle policy non-revertive
ip bundle policy revertive
Purpose Sets the IP redundancy option to switch from the spare port to the primary port
when the primary port becomes operational.
Syntax [no] ip bundle policy revertive {wait-time <sec>}
{wait-time <sec>} Amount of time in seconds before switching
ip bundle revert
Purpose Sets the IP redundancy option.
Syntax ip bundle revert <to | from>
to Forces a switch from the spare port to the current port.
from Forces a switch from the current port to the spare port.
ip domain-name
Purpose Sets the domain name for the D5 UEQ. Use the [no] version of the command
to disable the domain name.
Syntax [no] ip domain-name <string>
<string> Domain name
ip http authentication aaa login-authentication
Purpose Enables the AAA support in the Web Manager. Use the [no] version of the
command to disable.
Syntax [no] ip http authentication aaa login-authentication

ip http enable
Purpose Enables the Web Manager to process HTTP requests. Use the [no] version of
the command to disable the Web Manager from processing HTTP requests.
Syntax [no] ip http enable

ip igmp
Purpose Enables IGMP message processing on the gigabitEthernet interface.
Syntax ip igmp
D5(config-gig-if)#
D5(config-if)#
ip igmp process-remote-queries
Purpose Allows processing queries from any subnet.
Syntax ip igmp process-remote-queries
D5(config-gig-if)#
D5(config-if)#
ip igmp query-max-response-timeout
Purpose Sets the maximum interval, in 1/10 second increments.
Syntax ip igmp query-max-response-timeout <10-255>
D5(config-gig-if)#
D5(config-if)#
<10-255> Tenths of seconds.
ip igmp robustness
Purpose Variable for tuning the expected packet loss on a subnet.
Syntax ip igmp robustness <1-255>
D5(config-gig-if)#
D5(config-if)#
<1-255> Value of robustness.
ip igmp static-group
Purpose Adds the specified static group on this interface. Use the [no] version of the
command to remove a specific static group from this interface.
Syntax [no]ip igmp static-group <N.N.N.N> [source <M.M.M.M>]
D5(config-gig-if)#
D5(config-if)#
<N.N.N.N> Multicast group IP address
source <M.M.M.M> Source specific IP address
ip igmp static-group source
Purpose Adds the specified static group on this interface. Use the [no] version of the
command to remove a specific static group from this interface.
Syntax [no] ip igmp static-group <N.N.N.N> [source <S.S.S.S>]
D5(config-gig-if)#
D5(config-if)#
<S.S.S.S> Source IP address
ip igmp verify ip-router-alert-option
Purpose Enables checking for the presence of the IP Router Alert option in IGMPv2 and
IGMPv3 messages. Use the [no] version of the command to disable checking
for the presence of the IP Router Alert option in IGMPv2 and IGMPv3 mess-
sages.
Syntax [no] ip igmp verify ip-router-alert-option
D5(config-gig-if)#
D5(config-if)#
ip igmp version
Purpose Enables IGMP version 1, 2, or 3.
Syntax ip igmp version <1-3>
D5(config-gig-if)#
D5(config-if)#
<1-3> IGMP Version
ip local-address
Purpose Explicitly sets the source IP address used in the D5 UEQ to ERM IP commun-
cations. Setting this address ensures that the D5 UEQ can be unambiguously
identified by a fixed IP address from the ERM point of view. Use the [no]
version of the command to remove the local configured IP address.
Syntax [no] ip local-address <ip-addr/dhcp>
ip-addr
The local IP address configured on the D5 UEQ to uses as the source iP
address for ERM communications.
dhcp Sets the local-address to use the DHCP supplied IP address.
ip name-server
Purpose Specifies the domain name servers for the D5 UEQ. Use the [no] version of the
command to return to the default setting.
Syntax [no] ip name-server {retries <1-10>} {N.N.N.N [primary |
secondary]}
<retries>
Sets the number of times the resolver libraries retry name lookups. Valid range
is 1-10. The default is 1. Note: this can slow down the system if too high.
N.N.N.N [primary | secondary]
Adds the IP address of the Domain Name Server to the list of servers. Using
the optional primary or secondary parameter specifies if this is the primary or
secondary (max. 2) Domain Name Server.
ip remote address
Purpose Sets the remote IP address of the desired ERM device as well as identify which
of its own local addresses it should select for the source for ERM communica-
tions. Use the [no] version of the command to remove the remote IP address.
Syntax [no] ip remote address <ip-addr> [secondary]
<ip-addr>
The IP address of the remote ERM to connect to. This can be set using dotted
decimal notation (n.n.n.n) or a Fully Qualified Domain Name (FQDN).
[secondary]
This is used to qualify the remote ERM address as a backup ERM. The D5 UEQ
will switchover to this ERM if the primary configured ERM fails and the D5 UEQ
gives up connection attempts to that ERM.
ip route
Purpose Creates a static route on the D5 UEQ. The administrative distance can be
adjusted and different gateways may be given for the same route with
different administrative distances. The D5 UEQ uses the lowest administrative
distance until the route fails, then it uses the next higher administrative
distance and so on. Up to six static routes may be configures in this manner.
Use the [no] version of the command to remove a specific static route.
The route to a connected subnet (subnet of a sub-interface) always has an
administrative distance of 0, this is the first route selected if there is any
conflict with a static route. After a reboot, the D5 UEQ uses the first static route
defined in the startup-configuration file.
Syntax [no] ip route <N.N.N.N> <N.N.N.N> <N.N.N.N> <1-255>

<N.N.N.N> Destination IP address
<N.N.N.N> Destination IP mask
<N.N.N.N> IP address of forwarding router
<1-255> Distance metric for this route. The default value is 1.
ip routing
Purpose Enables IP routing. Use the [no] version of the command to disable IP routing.
Syntax [no] ip routing
ip ssh authentication-retries
Purpose Sets the number of authentication retries for SSH access. Use the [no] version
of the command to remove the authentication retries.
Syntax [no] ip ssh authentication-retries <number>
<number> Retries. The valid range is 0-65535.
ip ssh authentication-timeout
Purpose Sets the maximum number of seconds the SSH server waits for authentication
input. Use the [no] version of the command to reset the default.
Syntax [no] ip ssh authentication-timeout <sec>
<sec> Seconds. Valid range is 0-65535 seconds. Use 0 (zero) to disable.
ip ssh port
Purpose Sets the TCP port at which the D5 UEQ listens for SSH connections. Use the
[no] version of the command to remove the port at which the D5 UEQ listens
for SSH connections.
Syntax [no] ip ssh port <1-65535>
<1-65535> SSH IP port number
ip ssh server
Purpose Enables or restarts the SSH server. Use the [no] version of the command to
disable the SSH server.
Syntax [no] ip ssh server <enable | restart>
ip ssh version
Purpose Specifies the version of SSH to run. Use the [no] version of the command to
remove the version of SSH.
Syntax [no] ip ssh version <1 | 2 | both>
1 Enables only SSH1 mode.
2 Enables only SSH2 mode
both> Enables both SSH1 and SSH2 mode.
ip telnet server disable
Purpose Inhibits the establishment of new telnet sessions. Existing telnet sessions will
continue. The default setting is telnet sessions enabled. Use the [no] version
of the command to re-enable the telnet server.
Syntax [no] ip telnet server disable
line
Modifies terminal parameters for the current specified interactive cli session.
NOTE
These settings revert to the defaults on the next login.
Syntax line {console | ssh | http | vty [0-3]}
Example To enter line console, type the following command:
D5(config)# line console
The system response would be (and the prompt would change):
Conf i gur i ng consol e
D5(config-line)#
Example To enter line ssh, type the following command:
D5(config)# line ssh
Conf i gur i ng SSH l i nes 0 t o 3
D5(config-line)#
console Configures the console.
ssh Configures SSH.
http Configures HTTP (web manager)
vty <0-3> Configures VTY (telnet).
Example To enter line vty, type the following command:
D5(config)# line vty
Conf i gur i ng t el net l i nes 0 t o 3
D5(config-line)#
load-balancing
Purpose Enables load-balancing. Use the [no] version of the command to disable load-
balancing.
Syntax [no] load-balancing
Redundancy Group Configuration D5(config-redund-grp)#
load-interval
Purpose Defines load interval for averaging data rates on this interface.
Syntax load-interval <30-600>
D5<config-if>#
D5(config-gig-if)#
<30-600> Seconds
logging alarm clear
Purpose Clears a specified alarm condition or all alarm conditions on the D5 UEQ.
Syntax logging alarm clear <alarmId | all>
alarmId Alarm ID.
all Clears all alarm conditions.
logging buffered
Purpose Configures the buffered logging parameter. Use the [no] version of the
command to disable the buffered logging.
Syntax [no] logging buffered [<1-8> | <50-1000>]
[<1-8>] Sets the logging severity level. The higher number reveals more information.
[<50-1000>] Sets the logging buffer size. Default is 300.
logging console
Purpose Enables logging on the console. Use the [no] version of the command to
disable console logging.
NOTE
The logging console configuration is not saved in the startup-config file when
wr i t e memor y command is executed. Hence, the configuration will not
persist on reboot and will need to be reconfigured each time you reload.
Syntax [no] logging console <1-8>
<1-8> Sets the logging level. Default is Errors level.
logging monitor
Purpose Configures the monitor logging level. Use the [no] version of the command to
disable the monitor logging level.
Syntax [no] logging monitor [<1-8>]
logging ngod
Purpose Enables NGOD logging. Use the [no] version of the command to disable all
logging.
Syntax [no] logging ngod
logging on
Purpose Enables all logging. Use the [no] version of the command to disable all logging.
Syntax [no] logging on
logging override event
Purpose Customizes the severity of the specified event. Use the [no] version of the
command to return to the default value.
Syntax [no] logging override event <eventId> {inhibit | severity
<1-8>}
eventId Event ID
inhibit Inhibits
severity <1-8>} Severity value
logging override event * trap
Purpose Enables the specified event ID to be transmitted using the generic D5 UEQ
trap. This command overrides the sending of any D5 UEQ specific trap that
may have been associated with the eventID originally.
Syntax logging override event <eventId> trap [none]
eventId Event ID
[none] Disables trap generation
logging override event * trap none
Purpose Disables the specified event ID from generating any kind of trap, regardless of
whether it was a generic D5 UEQ trap or a specific D5 UEQ trap associate with
the eventID.
Syntax logging override event <eventId> trap none
eventId Event ID
logging severity
Purpose Configures the event generation by the severity level of the event.
Syntax logging severity <1-8> <local | no-local> <trap | no-trap>
<sys | no-sys> <vol | no-vol>
<1-8> Sets the logging severity level. The higher number reveals more information.
local | no local Enables or disables local logging.
trap | no-trap Enables or disables trap logging.
sys | no-sys Enables or disables syslog logging.
vol | no-vol Enables or disables local volatile logging.
logging syslog
Purpose Enables syslog logging for events. Use the [no] version of the command to
disable syslog logging of events.
Syntax [no] logging syslog [<1-8>]
logging syslog host
Purpose Configures the syslog host. Use the [no] version of the command to disable
the syslog host.
Syntax [no] logging syslog host <N.N.N.N>
logging thresh all
Purpose Blocks logging of all events.
Syntax logging thresh all
logging thresh at
Purpose Stops logging when specified threshold is reached.
Syntax logging thresh at <0-2147483647>
<0-2147483647> Number of events to allow.
logging thresh below
Purpose Maintains logging below specified threshold.
Syntax logging thresh below <0-2147483647>
<0-2147483647> Number of events per interval.
logging thresh interval
Purpose Sets the event logging threshold interval.
Syntax logging thresh interval <0-2147483647>
<0-2147483647> Seconds
logging thresh none
Purpose Sets the event logging threshold to be unconstrained.
Syntax logging thresh none
logging trap
Purpose Enables transmission of SNMP logging traps to an external SNMP management
system. Use the [no] version of the command to disable logs.
Syntax [no] logging trap [<1-8>]
<1-8> Sets the logging severity level. The higher number reveals more information.
logging trap-control
Purpose Configures trap control.
Syntax logging trap-control <HHHH>
<HHHH> Sets valid docsbevCmtsTrapControl (value in HEX).
login authentication
Purpose Configures authentication parameters.
Syntax [no] login authentication {default | <input>}
default The default exec authentication list
<input> Named exec authentication list.
login user name
Purpose Changes login user name.
Syntax login user name <string>
<string> User name.
login user password
Purpose Changes login user password.
Syntax login user password <string>
<string> User password.
logout
Purpose Closes the connection to the D5 UEQ.
Syntax logout
All All
mac-address
Purpose Modifies the MAC address on this interface. Use the [no] version of the
command to remove a specific MAC address from this interface.
Syntax [no] mac-address <nnnn.nnnn.nnnn>
<nnnn.nnnn.nnnn> New MAC address
mac-address-table static
Purpose Manually creates an entry in the forwarding database (FDB), associating
packets with the specified incoming MAC address to an external or internal
(IPP) interface. Use the [no] version of the command to remove entries in the
forwarding database.
Syntax [no] mac-address-table static <H.H.H> {fastethernet <X/Y>
[<1-4094>] | gigabitethernet <X/Y> [<1-4094>]}
<H.H.H> MAC address
<X/Y> The fastethernet interface card/port.
<1 - 4094> The VLAN tag.
<X/Y> The gigabitethernet interface card/port.
management-access
Purpose Enables local management through this interface. Use the [no] version of the
command to disable local management on this interface.
Syntax [no] management-access
D5<config-if>#
D5(config-gig-if)#
D5(config-if)#
mkdir
Purpose Creates a new directory on the Compact Flash card.
Syntax mkdir <dirname>
Privilege EXEC D5#
<dirname> New directory name.
mpeg-section
Purpose Sets the expected data format to the MPEG sections for the stream. Use the
[no] version of the command to set the default for the MPEG frames.
Syntax [no] mpeg-section
more
Purpose Displays the contents of the specified file one page at a time. If no option is
given, this command will ignore missing carriage returns in Unix files.
Press c to display the entire file without pausing, press enter to view one line
at a time, press space to page down, or press esc to quit viewing the file.
Syntax more <file name> [binary | crlf]
Privilege EXEC D5#
<file name> File name
binary Displays the contents of a binary file.
crlf
Properly displays a text file transferred from an MS-DOS or Windows operating
system.
network-id
Purpose Changes the DVB network-id used in the output QAM(s). Use the [no] version
of the command to reset the network ID to the default value.
Syntax [no] network-id <0-65535>
<0-65535> Original network ID. The default network ID is 4369.
ntp server
Purpose Configures D5 UEQ to use an external Network Time Protocol (NTP) server for
its time source. Use the [no] version of the command to remove the NTP
servers or an individual server.
NOTE
Default value for first NTP server added is: Interval 300 seconds, Master
enabled and Server enabled. Additional servers can be added but they will not
be made Master by default.
Syntax [no] ntp server <N.N.N.N> [delete | disable | enable |
interval <1-2147483647> | master]
<N.N.N.N> NTP server IP address.
delete Removes the specified NTP server from the list.
disable Disables polling of the specified server.
enable Enables polling of an existing but previously disabled server.
interval
The time, in seconds, the D5 UEQ waits between NTP updates. Valid range: 1
- 2147483647 seconds. Default is 300 seconds.
master Designates the specified server as the master. Default is master enabled.
pid
Purpose Sets the PID to be used to transmit the EMM for the stream. Use the [no]
version of the command to set the default to use the input PID value on the
output QAM.
Syntax [no] pid <16-8191>
Video Channel Configuration
EMMG Configuration
D5(config-video-channel)#
D5(config-emmg)#
<16-8191> QAM output PID
ping
Purpose Sends a series of ICMP echo requests to the specified IP address, and reports
whether the D5 UEQ received an echo response for each packet.
The ping operation may be terminated at any time by pressing any key on the
CLI.
NOTE
This command can be used in multiple combinations within the various
parameters.
Syntax ping <N.N.N.N> [interval <n> | repeat <n> | size <n> |
source <N.N.N.N> | timeout <n>]
User EXEC
Privilege EXEC
D5>
D5#
<N.N.N.N> IP address <N.N.N.N>.
interval <n>
Specifies the interval, in seconds, between successful, successive ping
attempts. If the ping attempt is unsuccessful, the timeout setting will take
priority over the interval setting. Valid range is 0 to 3600. The default is 0
seconds.
repeat <n>
Specifies the number of ping attempts to be made. Valid range is 1 to
2,147,483,647.
size <n>
Specifies the size (in bytes) of the ping packet generated. This size includes
the IP packet header and the ICMP payload (i.e. not the L2 header size). Valid
range is 36 to 4079. The default is 64 byte ip packet.
source <N.N.N.N>
Specifies the source IP address to be included in the IP header of the ping
packet. This IP address must be configured on an operational interface
otherwise the command will fail. The source IP address specifies does not
determine the outbound interface of the ping request. Instead, it is used to
select the inbound interface that the responding host will issue its
corresponding ping response to.
timeout <n>
Specifies the timeout, in seconds, between successive unsuccessful pint
attempts (e.e the period that will be waited for a ping request after a ping
request has been issued). Valid range is 0 to 3600. The default is 2 seconds
port
Purpose Enables the DTI interface.
Syntax port <input>
DTI Interface
ECMG Configuration
EMMG Configuration
EIS Configuration
D5(config-dti}#
D5(config-ecmg)#
D5(config-emmg)#
D5(config-eis)#
D5(config-psig)#
<port> Select a port number to use.
port-selection-criteria destination-ip
Purpose Configures the algorithm for forwarding packets using the destination IP
address.
Syntax port-selection-criteria destination-ip
Port-channel Sub-interface D5(config-if)#
port-selection-criteria destination-mac
Purpose Configures the algorithm for forwarding packets using the destination MAC
address.
Syntax port-selection-criteria destination-mac
port-selection-criteria source-destination-ip
Purpose Configures the algorithm for forwarding packets using the source and destina-
tion IP address.
Syntax port-selection-criteria source-destination-ip
port-selection-criteria source-destination-mac
Purpose Configures the algorithm for forwarding packets using the source and destina-
tion MAC address.
Syntax port-selection-criteria source-destination-mac
port-selection-criteria source-ip
Purpose Configures the algorithm for forwarding packets using the source IP address.
Syntax port-selection-criteria source-ip
port-selection-criteria source-mac
Purpose Configures the algorithm for forwarding packets using the source MAC
address.
Syntax port-selection-criteria source-mac
post
Purpose Enables the ability to run Power On Self Tests (POST) during system reboot.
Use the [no] version of the command to disable the POST during system
reboot.
Syntax [no] post <disable | enable | status>
<disable>
Future D5 UEQ reboots are executed without a POST. This is also known as a
quick reboot.
<enable> Future D5 UEQ reboots are executed featuring a POST.
<status> Displays the status of the POST feature.
primary
Purpose Makes the ECMG a primary. Use the [no] version of the command to set the
ECMG as backup.
Syntax [no] primary
privilege exec level
Purpose Sets the minimum level required to execute a command.
Syntax privilege exec level <0-15> [reset]
<0-15> Privilege levels.
[reset] Resets the minimum level required to execute a command.
protocol-mapping erm
Purpose Maps the specified ERM to an SDV protocol.
Syntax protocol-mapping erm <name>
<name> ERM name
protocol-mapping rpc input gigabitethernet
Purpose Specifies the primary input port for the QAM when using SDV RPC. Use the [no]
version of the command to reset the default input port for the QAM.
Syntax [no] protocol-mapping rpc input gigabitethernet <x/y>
QAM Card Interface
QAM Port Sub-Interface
D5(config-qam-card)#
D5(config-qam-if)#
<X/Y> Primary input port. Valid range is 0/1 or 0/2.
pwd
Purpose Displays the current directory.
Syntax pwd
Privilege EXEC D5#
radius-server host
Purpose Configures a Radius server. Use the [no] version of the command to remove a
specific Radius server.
Syntax [no] radius-server host <ip_addr>
<ip_addr> IP address of the Radius server (in a.b.c.d form)
radius-server key
Purpose Configures the Radius encryption key. Use the [no] version of the command to
remove a specific Radius encryption key.
Syntax [no] radius-server key <input>
<input>
Key used to set authentication and encryption. This key must match the key
used on the Radius daemon.
radius-server retransmit
Purpose Configures the number of transmissions for each Radius request. Use the [no]
version of the command to reset the number of transmissions.
Syntax [no] radius-server retransmit <0-5>
<0-5> Number of retransmissions. Default value is set at 3.
radius-server source-address
Purpose Configures the source IP address of the outbound Radius packets. Use the [no]
version of the command to remove the source IP address of the outbound
Radius packets.
Syntax [no] radius-server source-address <ip_addr>
<ip_addr> IP address of the Radius server (in a.b.c.d form)
radius-server timeout
Purpose Configures the global timeout. Use the [no] version of the command to delete
the global Radius timeout.
Syntax [no] radius-server timeout <0-1000>
<0-1000> Timeout value in seconds. Valid range is 0-1000. Default is set at 5 seconds.
reboot
Purpose Reboots the D5 UEQ WAN.
Syntax reboot <post | nopost>
Privilege EXEC D5#
post Reboots the D5 UEQ WAN with POST
nopost Reboots the D5 UEQ WAN without POST
redundancy-group
Purpose Adds the ECMG to a specified redundancy group. Use the [no] version of the
command to remove ECMG from its current grouping and put it into the default
redundancy-group.
Syntax [no] redundancy-group <group>
<group> Group name
reload
Purpose Restarts the D5 UEQ. If changes to the configuration file have been made, the
D5 UEQ will prompt the user to save the running configuration to the startup
configuration. If the user chooses not to save the running configuration to the
startup configuration, the D5 UEQ appends a copy of the running configuration
to the shut downdebug. l og file on the Compact Flash disk.
WARNI NG
This command restarts the D5 UEQ.
Syntax reload [at <hh:mm> [reason] | cancel | in <hh:mm> [reason]
| nopost | post]
Example To restart the D5 UEQ, use the following command:
D5# reload
Save configuration when rebooting (Y/N)?Y
Ar e you sur e you want t o r eboot t he syst em( Y/ N) ?N
Privilege EXEC D5#
at <hh:mm> [reason]
Specifies the clock time, in <hh:mm> notation, to reboot the D5 UEQ. You can
add an optional reason string, describing why the reboot was necessary.
cancel Cancels a scheduled reboot.
in <hh:mm> [reason]
Specifies the amount of time, in <hh:mm> notation, to wait before rebooting
the D5 UEQ (max of 99:59). You can add an optional reason string, describing
why the reboot was necessary.
nopost
Reboots the D5 UEQ without performing any Power-On-Self-Tests (POST).
The result is a quicker reboot sequence.
post Reboots the D5 UEQ and performs the Power-On-Self-Tests (POST).
rename
Purpose Changes the name of a specified file name to a new file name on the Compact
Flash dish.
CAUTI ON
Use caution when renaming boot image or startup configuration files.
Syntax rename <OLD_FILENAME> <NEW_FILENAME>
Privilege EXEC D5#
<OLD_FILENAME> Old name of file to be changed.
<NEW_FILENAME> New file name.
revertive
Purpose Forces a switchover to the primary DTI link whenever it recovers after a failure.
Use the [no] version of the command to disable and force the D5 UEQ to
remain on its current DTI link without switching back to any recovering links.
Syntax [no] revertive
DTI Interface D5(config-dti}#
rmdir
Purpose Removes the specified directory.
NOTE
The D5 UEQ will not remove a directory until the contents in it are deleted.
Syntax rmdir <DIRNAME>
Privilege EXEC D5#
<DIRNAME> Name of directory
rtsp connection-timeout
Purpose Sets the RTSP TCP timeout in seconds.
Syntax rtsp connection-timeout <1-65535>
<1-65535> The RTSP Connection timeout in seconds.
rtsp message-timeout
Purpose Sets the maximum time in seconds allowed between RTSP request and
response messages.
Syntax rtsp message-timeout <1-65535>
<1-65535> The RTSP message timeout in seconds.
rtsp port
Purpose Sets the RTSPTCP listening port number.
Syntax rtsp port <1-65535>
<1-65535> The RTSP TCP listening port number.
rtsp session-timeout
Purpose Sets the maximum time in seconds an RTSP session may persist without an
RTSP PING message.
Syntax rtsp session-timeout <1-65535>
<1-65535> Time in seconds.
script execute
Purpose Executes a recorded script in the specified file.
Syntax script execute <string>
Privilege EXEC D5#
<string> Name of file containing script.
script start
Purpose Begins recording a command script to the specified file.
Syntax script start <string>
Privilege EXEC D5#
<string> Name to call recorded script file.
script stop
Purpose Finishes recording a command script.
Syntax script stop
Privilege EXEC D5#
send
Purpose Sends a text message to the specified CLI user logged into the D5 UEQ.
Syntax send {all | console | ssh <0-3> | vty <0-3>} <string>
Example
D5# send all testing
***
***
*** Message f r omvt y0 t o al l t er mi nal s:
***
t est i ng
Privilege EXEC D5#
all Sends a message to all users.
console Sends a message to the console user.
ssh <0-3>
Sends a message to the SSH user on specified session. Valid session number
is 0 to 3.
vty <0-3> Sends a message to the specified VTY. Valid range is 0 to 3.
<string> Message to be sent.
service
Purpose Enables scrambling on specific or all QAM channels. There are no default
values. This command can be repeated for different combinations of Service
and Transport Stream IDs. Use the [no] version of the command to enable
scrambling on all programs on all QAM channels.
Syntax [no] service <1-65535 | all> transport {1-65535 | all>
[exclude]}
<1-65535> Service or Transport Stream ID.
<all> All channels or transport streams
[exclude] Excludes specified channel or stream
Example To enable scrambling on all programs on all QAM channels, use the following
command:
D5(config)# video scg <name>
D5(config-scg)# network id 1234
D5(config-scg)# cp-duration 120
D5(config-scg)# ecm group 1 super-cas-id 8100.0001
D5(config-scg)# service all transport all
D5(config-scg)# no shutdown
D5(config)# exit
service-id
Purpose Assigns a common service-id for replicated programs. Use the [no] version of
the command to remove the assigned service-id for replicated programs.
Syntax [no] service-id <1-65535>

<1-65535> Program number
service-use docsis
Purpose Reserves the QAM channel bandwidth.
Syntax service-use docsis <name> bandwidth <bits/s>
QAM Channel Sub-interface D5(config-qam-if)#
<name> CMTS hostname
<bits/s> Maximum allowed bitrate
show aaa line console
Purpose Displays the console method list configuration.
Syntax show aaa line console
show aaa line console
Purpose Displays the console method list configuration.
Syntax show aaa line console
Privilege EXEC
D5#
D5(config)#
show aaa line http
Purpose Displays the HTTP (web manager) method list configuration.
Syntax show aaa line http [<0-3>[ [<0-3>]
Privilege EXEC
D5#
D5(config)#
<0-3> First line number.
<0-3> Last line number
show aaa line ssh
Purpose Displays the SSH method list configuration.
Syntax show aaa line ssh {<0-3>] [<0-3>]
Privilege EXEC
D5#
D5(config)#
<0-3> First line number
show aaa line vty
Purpose Displays the VTY (telnet) method list configuration.
Syntax show aaa line vty [<0-3>] [<0-3>]
Privilege EXEC
D5#
D5(config)#
<0-3> First line number
show aaa methods-list
Purpose Displays the method lists defined in the AAA subsystem.
Syntax show aaa methods-list <aacounting | authorization | all |
authentication>
Privilege EXEC D5#
accounting Displays the accounting method lists
authorization Displays the authorization method lists
all Displays all AAA method lists.
authentication Displays the authentication method lists
show aliases
Purpose Displays any defined aliases for commands.
Syntax show aliases
User EXEC
Privilege EXEC
D5>
D5#
show all-commands
Purpose Displays all commands available in the D5 UEQ CLI.
NOTE
This command will produce a large amount of output. To reduce the output,
filter the information.
Syntax show all-commands
Privilege EXEC D5#
show arp
Purpose Displays the associated MAC and IP addresses for interfaces or addresses,
learned through ARP.
Syntax show arp
User EXEC
Privilege EXEC
D5>
D5#
show bootvar
Purpose Displays the current boot image device and filenames.
Syntax show bootvar
User EXEC
Privilege EXEC
D5>
D5#
show bridge
Purpose Displays the WAN-side bridging details.
Syntax show bridge
Privilege EXEC D5#
show calendar
Purpose Displays the current date and time known to the D5 UEQ.
Syntax show calendar
User EXEC
Privilege EXEC
D5>
D5#
show cli accounts
Purpose Displays configured user accounts.
Syntax show cli accounts
Privilege EXEC D5#
show cli host
Purpose Displays which WAN is hosting the CLI session.
Syntax show cli host
Privilege EXEC D5#
show cli logging session
Purpose Displays contents of the command log files for the specified session.
Syntax show cli logging [session [<0-8>]]
Privilege EXEC D5#
<0-8> Session number.
show clock
Purpose Displays the current date and time known to the D5 UEQ.
Syntax show clock [timezone]
User EXEC
Privilege EXEC
D5>
D5#
[timezone] Displays the current time zone and its offset from GMT.
show configuration
Purpose Displays system configuration.
Syntax show configuration
Privilege EXEC D5#
show context
Purpose Displays context information about recent system crashes.
Syntax show context
Privilege EXEC D5#
show controllers
Purpose Displays hardware controller status.
Syntax show controllers [fastethernet <x/y> | <type x/y>]
Privilege EXEC D5#
fastethernet <x/y> Slot and port of the fastEthernet.
type x/y> Interface <port/slot>
show crypto key mypubkey
Purpose Displays the SSH server host public key.
Syntax show crypto key mypubkey <dsa | rsa>
User EXEC
Privilege EXEC
D5>
D5#
<dsa> Displays this system's DSA public key.
<rsa> Displays this system's RSA public key.
show crypto key pubkey-chain rsa
Purpose Displays the installed RSA public key for the specified D5 UEQ user ID.
Syntax show crypto key pubkey-chain rsa <name>
User EXEC
Privilege EXEC
D5>
D5#
<name> Userid
show debug history
Purpose Displays buffered debug output.
Syntax show debug history
Privilege EXEC D5#
show debug logging
Purpose Displays debug logging configuration.
Syntax show debug logging
Privilege EXEC D5#
show depi control-plane connection
Purpose Displays the specified DEPI L2TP control-plane connection information.
Syntax show depi control-plane connection <1-65535> [verbose]
Privilege EXEC D5#
<1-65535>] Local connection ID
show depi sessions
Purpose Displays all configured depi sessions.
Syntax show depi sessions [verbose]
Privilege EXEC D5#
[verbose] Displays all DEPI sessions and counters.
show environment
Purpose Displays telemetry data that has been recorded in the current minute, past
minutes (up to 1440) and the minimum and maximum thresholds that have
occurred over a 24 hour period. This command is robust and has numerous
variants because it is designed for monitoring critical D5 UEQ information on
temperatures of various subsystems, fan speeds, and voltages of different
hardware components. This information can be compared against thresholds
and displayed to the user in a variety of ways. Telemetry data from the QAMs,
WANs, MON, PMODs, power supplies, fans, voltage sensors and temperature
sensors all report to the user via this command
Syntax show environment
Privilege EXEC D5#
show environment minmax all
Purpose Displays past minimum and maximum information for installed modules.
Syntax show environment minmax all <all | mon | pmod | qam | wan>
Privilege EXEC D5#
all All installed cards
mon All MON modules
pmod All PMOD modules
qam All QAM modules
wan All WAN modules
show environment minmax speed
Purpose Displays past minimum and maximum speed information.
Syntax show environment minmax speed
Privilege EXEC D5#
show environment minmax temperature
Purpose Displays past minimum and maximum temperature information.
Syntax show environment minmax temperature <all | mon | pmod | qam
| wan>
Privilege EXEC D5#
all All installed modules
mon All MON modules
qam All QAM modules
wan All WAN modules
show environment minmax voltage
Purpose Displays past minimum and maximum voltage information.
Syntax show environment minmax voltage <all | mon | pmod | qam |
wan>
Privilege EXEC D5#
all All installed modules
mon All MON modules
qam All QAM modules
wan All WAN modules
show environment speed threshold
Purpose Displays environment speed information based on threshold levels.
Syntax show environment speed threshold
Privilege EXEC D5#
show environment speed time
Purpose Displays speed information for a specified time period.
Syntax show environment speed time {current | past <1-1439>}
Privilege EXEC D5#
current Displays information for the current time period.
past <1-1439>
Displays information in minutes for a time period in the past. Valid range is 1-
1439 minutes.
show environment temperature all threshold
Purpose Displays temperature information for all installed cards based on threshold
levels.
Syntax show environment temperature all threshold <all | up_warn
| up_fatal>
Privilege EXEC D5#
<all | up_warn | up_fatal> Threshold type.
show environment temperature all time
Purpose Displays temperature information for all installed cards for a specified time
period.
Syntax show environment temperature all time {current | past <1-
1439>}
Privilege EXEC D5#
past <1-1439>
1439 minutes.
show environment temperature mon * threshold
Purpose Displays temperature information for the MON board based on threshold
levels.
Syntax show environment temperature mon <psu> threshold <all |
up_warn | up_fatal>
Privilege EXEC D5#
<psu> Test point.
show environment temperature mon * time
Purpose Displays temperature information for the MON board for a specified time
period.
Syntax show environment temperature mon <psu> time {current | past
<1-1439>}
Privilege EXEC D5#
<psu> Test point.
past <1-1439>
1439 minutes.
show environment temperature pmod * * threshold
Purpose Displays temperature information for the power module in the specified slot
based on threshold type.
Syntax show environment temperature pmod <1 | 2> <center>
threshold <all | up_warn | up_fatal>
Privilege EXEC D5#
<1 | 2> Slot number.
<center> Test point.
show environment temperature pmod * * time
Purpose Displays temperature information for the power module in the specified slot for
a specified time period.
Syntax show environment temperature pmod <1|2> <center> time
{current | past <1-1439>}
Privilege EXEC D5#
<center> Test point.
past <1-1439>
1439 minutes.
show environment temperature qam * * threshold
Purpose Displays temperature information for the QAM module in the specified slot
based on threshold levels.
Syntax show environment temperature qam <1-6> <all|phy|psu>
threshold <all|up_warn|up_fatal>
Privilege EXEC D5#
<1-6> Slot number.
<all|phy|psu> Test point.
<all|up_warn|up_fatal> Threshold type.
show environment temperature qam * * time
Purpose Displays temperature information for the QAM module in the specified slot for
Syntax show environment temperature qam <1-6> <all|phy|psu> time
Privilege EXEC D5#
<1-6> Slot number.
<all|phy|psu> Test point.
past <1-1439>
1439 minutes.
show environment temperature wan * * threshold
Purpose Displays temperature information for the WAN module in the specified slot
based on threshold levels.
Syntax show environment temperature wan <7>
<all|front|back|middle> threshold <all | up_warn |
up_fatal>
Privilege EXEC D5#
<7> Slot number.
<all|front|back|middle> Test point.
show environment temperature wan * * time
Purpose Displays temperature information for the WAN module in the specified slot for
Syntax show environment temperature wan <7>
<all|front|back|middle> time {current | past <1-1439>}
Privilege EXEC D5#
<7> Slot number.
<all|front|back|middle> Test point.
past <1-1439>
1439 minutes.
show environment voltage all threshold
Purpose Displays voltage information for all installed cards based on threshold levels.
Syntax show environment voltage all threshold
<all|up_warn|low_warn|up_fatal|low_fatal>
Privilege EXEC D5#
<all|up_warn|low_warn|
up_fatal|low_fatal>
Threshold type.
show environment voltage all time
Purpose Displays voltage information for all installed cards for a specified time period.
Syntax show environment voltage all time {current | past <1-1439>}
Privilege EXEC D5#
{current | Displays information for the current time period.
past <1-1439>}
1439 minutes.
show environment voltage mon * threshold
Purpose Displays voltage information for the MON board based on threshold levels.
Syntax show voltage temperature mon <all|5.0|3.3|2.5|1.2>
threshold <all|up_warn|low_warn|up_fatal|low_fatal>
Privilege EXEC D5#
<all|5.0|3.3|2.5|1.2> Test point.
up_fatal|low_fatal>
Threshold type.
show environment voltage mon * time
Purpose Displays voltage information for the MON board for a specified time period.
Syntax show environment voltage mon <all|5.0|3.3|2.5|1.2> time
Privilege EXEC D5#
<all|5.0|3.3|2.5|1.2> Test point.
past <1-1439>
1439 minutes.
show environment voltage pmod * threshold
Purpose Displays voltage information for the power module in the specified slot based
on threshold levels.
Syntax show environment voltage pmod <1 | 2>
<all|12.0(2)|9.0|5.0> threshold
Privilege EXEC D5#
<all|12.0(2)|9.0|5.0> Test point.
up_fatal|low_fatal>
Threshold type.
show environment voltage pmod * * time
Purpose Displays voltage information for the power module in the specified slot for a
specified time period.
Syntax show environment voltage pmod <1 | 2>
<all|12.0(2)|9.0|5.0> time {current | past <1-1439>}
Privilege EXEC D5#
<all|12.0(2)|9.0|5.0> Test point.
past <1-1439>
1439 minutes.
show environment voltage qam * * threshold
Purpose Displays voltage information for the QAM module in the specified slot based on
threshold levels.
Syntax show environment voltage qam <1-6>
<all|11.0|9.0|5.0|3.3(4)|2.5|1.5> threshold
Privilege EXEC D5#
<1-6> Slot number.
<all|11.0|9.0|5.0|3.3(4)|2.5|
1.5>
Test point.
up_fatal|low_fatal>
Threshold type.
show environment voltage qam * * time
Purpose Displays voltage information for the QAM module in the specified slot for a
Syntax show environment voltage qam <1-6>
<all|11.0|9.0|5.0|3.3(4)|2.5|1.5> time {current | past <1-
1439>}
Privilege EXEC D5#
<1-6> Slot number.
<all|11.0|9.0|5.0|3.3(4)|2.5|
1.5>
Test point.
past <1-1439>
1439 minutes.
show environment voltage wan * * threshold
Purpose Displays voltage information for the WAN module in the specified slot based on
threshold levels.
Syntax show environment voltage wan <7> <all|5.0|3.3|3.25|2.5|
1.25|1.2> threshold <all|up_warn|low_warn|
up_fatal|low_fatal>
Privilege EXEC D5#
<7> Slot number.
<all|5.0|3.3|3.25|2.5|
1.25|1.2>
Test point.
up_fatal|low_fatal>
Threshold type.
show environment voltage wan * * time
Purpose Displays voltage information for the WAN module in the specified slot for a
Syntax show environment voltage wan <7> <all|5.0|3.3|3.25|2.5|
1.25|1.2> time {current | past <1-1439>}
Privilege EXEC D5#
<7> Slot number.
<all|5.0|3.3|3.25|2.5|
1.25|1.2>
Test point.
past <1-1439>
1439 minutes.
show exception
Purpose Displays information from the autopsy file.
Syntax show exception
Privilege EXEC D5#
show file descriptors
Purpose Displays all open file descriptors.
Syntax show file descriptors
Privilege EXEC D5#
show file systems
Purpose Displays all file systems and information.
Syntax show file systems
Privilege EXEC D5#
show history
Purpose Displays a list of recently entered commands
Syntax show history
User EXEC
Privilege EXEC
D5>
D5#
show images
Purpose Displays all software versions present on the D5 UEQ flash card.
Syntax show images
Privilege EXEC D5#
show interfaces
Purpose Displays information for all interfaces present on the D5 UEQ.
Syntax show interfaces
Privilege EXEC D5#
show interfaces dti
Purpose Displays information for specified DTI on the D5 UEQ.
Syntax show interfaces dti <counters | 1-2>

Limbă

Bine ați venit la Scribd!

d5 Ueq User Doc 3 0 1 Std(Arris Ipqam d5用户手册)

Încărcat de

Informații document

Descriere:

Data încărcării

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Descriere:

Drepturi de autor:

Formate disponibile

d5 Ueq User Doc 3 0 1 Std(Arris Ipqam d5用户手册)

Încărcat de

Descriere:

Drepturi de autor:

Formate disponibile

Titluri conexe

D5 Universal Edge QAM

Edge QAMs. Under this scheme the QAM card is deter-

ARRI S D5 Universal Edge QAM