Hide thumbs Also See for SecureSync 2400:
Table of Contents

Advertisement

Quick Links

SecureSync
2400
MODEL
User Manual
Document Part No.: 2400-5000-0050
Revision: 2
Date: 15-February-2021
orolia.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SecureSync 2400 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Orolia SecureSync 2400

  • Page 1 SecureSync 2400 MODEL User Manual Document Part No.: 2400-5000-0050 Revision: 2 Date: 15-February-2021 orolia.com...
  • Page 3 Orolia reserves the right to make changes to the product described in this document at any time and without notice. Any software that may be provided with the product described in this document is fur- nished under a license agreement or nondisclosure agreement.
  • Page 4 Blank page. SecureSync 2400 User Manual...
  • Page 5: Table Of Contents

    1.6.3.1 10 MHz Output — Oscillator Phase Noise (dBc/Hz) 1.6.4 Multi I/O 1.6.5 DCLS Output 1.6.5.1 1PPS Output 1.6.6 10/100/1000 Ethernet Port (RJ45) 1.6.7 10/100/1000 Ethernet Port (SFP) 1.6.8 RS-232 Serial Port (Rear Panel) 1.6.9 USB Serial Port (Front Panel) SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 6 2.12.2 Assigning a Static IP Address 2.12.2.1 Setting Up an IP Address via the Front Panel 2.12.2.2 Setting Up a Static IP Address via a DHCP Network 2.12.2.3 Setting Up an IP Address via the Serial Port SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 7 2.15.3 Dis-/Enabling NTP 2.15.4 Viewing NTP Clients 2.15.5 Restoring the Default NTP Configuration 2.15.6 NTP Output Timescale 2.15.7 NTP Reference Configuration 2.15.7.1 The NTP Stratum Model 2.15.7.2 Configuring "NTP Stratum 1" Operation SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 8 2.18.1 BNC DCLS OUT 2.18.2 DB15 Multi I/O 2.18.3 Assigning Signals 2.18.4 Network Ports 2.19 Configuring Input References 2.19.1 How to Configure an Input Reference 2.19.2 Configure a 1PPS Input 2.19.3 Configure an ASCII Input SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 9 3.2.3.2 Leap Second Alert Notification 3.2.3.3 Leap Second Correction Sequence 3.2.3.4 Configuring a Leap Second 3.2.4 Local Clock(s), DST 3.2.4.1 Adding a Local Clock 3.2.4.2 DST Examples 3.2.4.3 DST and UTC, GMT SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 10 4.1 Powering Up/Shutting Down 4.1.1 Powering Up the Unit 4.1.2 Shutting Down the Unit 4.1.3 Issuing the HALT Command Before Removing Power 4.1.4 Rebooting the System 4.2 Notifications 4.2.1 Configuring Notifications VIII SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 11 4.4.2.1 To change the time display on the front panel: 4.4.2.2 To lock or unlock the front panel: 4.4.3 Creating a Login Banner 4.4.4 Show Clock 4.4.5 Product Registration 4.4.6 Synchronizing Network PCs 4.5 Quality Management SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 12 4.7.6 Resetting the Unit to Factory Configuration 4.7.6.1 Resetting All Configurations to their Factory Defaults 4.7.7 Default and Recommended Configurations APPENDIX Appendix 5.1 Troubleshooting 5.1.1 Minor and Major Alarms 5.1.2 Troubleshooting: System Configuration 5.1.2.1 System Troubleshooting: Browser Support SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 13 5.2.3.3 1PPS In/Out, 10 MHz In [1204-01, -03] 5.2.3.4 Frequency Out [1204-08, -1C, -26] 5.2.3.5 Programmable Frequency Out [1204-13, -2F, -30] 5.2.3.6 Programmable Square Wave Out [1204-17] 5.2.3.7 Simulcast (CTCSS/Data Clock) [1204-14] 5.2.4 Telecom Option Cards SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 14 5.4.7 Spectracom Format 2 5.4.8 Spectracom Format 3 5.4.9 Spectracom Format 4 5.4.10 Spectracom Format 7 5.4.11 Spectracom Format 8 5.4.12 Spectracom Format 9 5.4.12.1 Format 9S 5.4.13 Spectracom Epsilon Formats 5.4.13.1 Spectracom Epsilon TOD 1 SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 15 5.5.4 IRIG E Output 5.5.5 IRIG Output Accuracy Specifications 5.6 Technical Support 5.6.1 Regional Contact 5.7 Return Shipments 5.8 List of Tables 5.9 List of Images 5.10 Document Revision History INDEX SecureSync 2400 User Manual • TABLE OF CONTENTS XIII...
  • Page 16 BLANK PAGE. SecureSync 2400 User Manual • TABLE OF CONTENTS...
  • Page 17: Product Description

    Product Description The Chapter presents an overview of the SecureSync 2400 Time and Frequency Synchronization System, its capabilities, main technical features and specifications. The following topics are included in this Chapter: 1.1 Getting Started 1.2 SecureSync Introduction 1.3 SecureSync Front Panel 1.4 Unit Rear Panel...
  • Page 18: Getting Started

    The unit is powered by AC on an IEC60320 connector. SecureSync combines Orolia’s precision master clock technology and secure network-cent- ric approach with a compact modular hardware design to bring you a powerful time and fre- quency reference system at the lowest cost of ownership.
  • Page 19: Securesync's Inputs And Outputs

    SecureSync Front Panel The front panel of a SecureSync unit consists of: an LED time display seven illuminated status LED menu buttons a front panel control keypad an OLED information display menu CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 20: Status Leds

    SecureSync's front panel status LEDs provide a real-time status overview: Seven (7) LEDs indicate the unit's current operating state. Figure 1-2: Front panel LEDs 1.3.1.1 Blinking Intervals The status LEDs can communicate four different operating states: "OFF" "ON" CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 21: Led Lighting Patterns

    GNSS is available as reference (1PPS and Time OK) No valid references FAST Using non-primary reference Using primary reference Unit is in Holdover (valid) In Sync (valid) FAST Not In Sync (Holdover period exceeded, or oscillator damaged) CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 22: Front Panel Keypad, And Display

    Using the Keypad The functions of the five keys are: ◀ ▶ ▲ ▼ arrow keys: Navigate to a menu option (will be highlighted); move the focus on the screen; switch between submenus CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 23: Using The Front Panel Display

    8. Once your editing is done, press the ENTER button. 9. Press ENTER again to confirm your choice in the confirmation menu that will appear on the right side of the screen. CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 24 Board Temp, CPU Temp, and OSC (oscillator) Temp view the Fan(s) Speed System view model number view serial number view software version view licenses view a rolling ribbon of option cards installed GNSS Antenna Menu: Constellations CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 25 Inputs Menu: Settings view reference table enable or disable references (see "Configuring Input Reference Priorities" on page 184 Monitoring CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 26 Settings: Scroll to each ETH connection to view information or perform actions (see "Setting Up an IP Address via the Front Panel" on page 51): enable or disable DHCP view or set IP address view or change gateway view MAC address CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 27: Unit Rear Panel

    CPU usage monitor disk usage Test confirm that the buttons on your front panel are working (highlight Press ✓ VALID to start testing buttons and push the ENTER key). Unit Rear Panel CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 28 Ethernet RJ45 (Eth0) and SFP (Eth1) connectors provide an interface to the network for NTP synchronization and to obtain access to the SecureSync product CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 29: Option Cards

    Model. OR; On the front panel display, press the POWER button, and navigate over to the System submenu. Your part number is listed under Model Number. CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 30 If your product number begins with the numbers 2406, then your unit contains an extension board, and can house up to six option cards. For more information, contact your Orolia sales personnel. Caution: NEVER install an option card from the back of the unit, ALWAYS from the top.
  • Page 31: Option Cards Overview

    * Every option card has a unique 2-digit ID number located on its cover plate, and in the center column of the table below. The complete Oro- lia Part Number for option cards is 1204-xx (e.g., 1204-18). CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 32 (4x) (4x) 1PPS in/out 1PPS/Frequency Var. frequ. + 1PPS (TTL) BNC (3x) + frequ. in 1PPS 1PPS in/out 1PPS/Frequency 10 MHz + 1PPS Terminal + frequ. in RS-485 1PPS block, 10- CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 33 (3x) IRIG out, IRIG Out BNC (4x) IRIG out, IRIG Out, Fiber ST Fiber fiber optic optic (4x) IRIG out, IRIG Out, RS-485 Terminal RS-485 block, 10- STANAG STANAG In DB-25 input (1x) CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 34: Option Card Identification

    ("Failover") Alarm Relay Output Relay Out Terminal Relay Out (3x) block, 10- 1.5.2 Option Card Identification There are several ways to identify which option card(s) are installed in your SecureSync unit: CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 35: Option Card Identification By Id/Part Number

    The ID number is comprised of the two center digits of your option card's Orolia Part Num- ber: 1204-0180-0600. Figure 1-5: Option Card ID number...
  • Page 36 "1PPS Out [1204-18, -19, -21, -2B]" Quad 1 PPS output module 1PPS Out, RS- on page 354 (RS-485 [terminal block]) "IRIG Out [1204-15, -1E, -22]" on IRIG module, RS-485 (4 out- IRIG Out, RS- page 397 puts) CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 37: Option Card Connectors

    "T1/E1 Out [1204-09, -0A, -4C, - Single-ended BNC 4 port E1/T1 Out Quad 53]" on page 390 E1/T1 module 1.5.3 Option Card Connectors The table below lists the connector types used in SecureSync option cards. CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 38: Specifications

    Time and 1PPS input references (in the case of GNSS input, this is with the GNSS receiver operating in Stationary mode).  Specifications for the available option cards are provided in their corresponding topics; see "Option Cards Overview" on page 15. CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 39: Input Power

    Typically < 27 seconds from cold start Antenna requirements : Active antenna module, +5V, powered by SecureSync, 16 dB gain minimum Antenna connector: SMA (SMA to N-type conversion cable included in anxillary kit) CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 40: 10 Mhz Output

    Note: Oscillator accuracies are stated as fractional frequency (i.e. the rel- ative frequency departure of a frequency source), and as such are dimen- sionless. See also "Configuring the Oscillator" on page 230. CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 41: 10 Mhz Output - Oscillator Phase Noise (Dbc/Hz)

    RS232, (2) RS485, IRIG AM OUT, DCLS in, DCLS out Possible Outputs: 1PPS, ASCII Time Code, IRIG (DCLS), IRIG AM, HAVEQUICK, GPIO Possible Inputs ("References"): 1PPS, ASCII Time Code, HAVEQUICK, IRIG (DCLS) Pinout: CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 42 (First signal) RS485 A, non-inverting (Second signal) RS485 A, non-inverting RS232 TX OUT DCLS OUT IRIG AM OUT (First signal) RS485 B, inverting (Second signal) RS485 B, inverting RS232 RX IN CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 43: Dcls Output

    Oscillator Type (1 sigma locked to GPS) After 4 hours After 24 hours Rubidium ±25 ns 0.2 μs 1μs OCXO ±50 ns 1μs 25 μs TCXO ±50 ns 12 μs 450 μs CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 44: 10/100/1000 Ethernet Port (Rj45)

    HTTP, HTTPS SFTP: For remote upload of system logs and (RFC 959) Syslog: Provides remote log storage (RFCs 3164 and 5424) SNMP: Supports v1, v2c, and v3 CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 45: Mechanical And Environmental Specifications

    Vibration: Operating: ETSI EN 300 019-2-3 Class 3.2; IEC 60721-3-3 Class 3m12 Storage: ETSI EN 300 019-2-3 Class 3.2; IEC 60721-3-3 Class 3m12 MIL-STD-810: 501.6, 502.6, 503.6, 507.6, 500.6, 516.7, 514.7 CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 46: The Securesync Web Ui

    MANAGEMENT: Access the NETWORK setup screens, and OTHER setup screens e.g., to configure Reference Priorities, System Time, and the Oscillator. TOOLS: Opens a drop-down menu for access to the system maintenance screens and system logs. CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 47: The Interfaces Menu

    1.7  The SecureSync Web UI HELP: Provides Spectracom Service Contact Information and high-level system con- figurations you may be required to furnish when contacting Orolia Service. 1.7.2 The INTERFACES Menu INTERFACES menu on the Main screen provides access to SecureSync's: External REFERENCES e.g., the GNSS reference input...
  • Page 48: The Tools Menu

    Password: Configure the admin password. 1.7.4 The TOOLS Menu TOOLS menu on the Web UI's Main screen provides access to: The System Upgrade screen System and network monitoring screens Miscellaneous system administration screens Log screens CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 49: Regulatory Compliance

    ICES-003 Issue 6: Class A FCC CFR 47 PART 15 SubPart B: 2020 EN55035:2017: Class A AS/NZS CISPR 32:2015/AMDI1.2019 Radio Spectrum Efficiency: EN 301 489-1 V2.2.3 (2019-11) and EN 301 489-17 V3.2.2 (2019-12) CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 50 2011/65/EU with amendments EU 2015/863 on the Restriction of Hazardous Sub- stance (RoHS3) 2014/53/EU Radio Equipment Directive (RED) Environmental Compliance WEEE (Waste Electrical and Electronic Equipment) REACH (Registration, Evaluation, Authorization and Restriction of Chemicals) CHAPTER 1 • SecureSync 2400 User Manual Rev. 2...
  • Page 51: Setup

    2.13 Accessing the Web UI 2.14 Configure Network Settings 2.15 Configure NTP 2.16 Configuring PTP 2.17 GPSD Setup 2.18 Configurable Connectors 2.19 Configuring Input References 2.20 Configuring Outputs 2.21 The Option Cards Screen 2.22 Signature Control CHAPTER 2 • SecureSync 2400 User Manual...
  • Page 52: Installation Overview

    2. Unpack the unit, and take inventory: "Unpacking and Inventory" on the facing page. 3. Obtain required tools and parts: "Required Tools and Parts" on page 38. 4. Mount the unit: ."Mounting the Unit" on page 41. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 53: Unpacking And Inventory

    (ESD). Observe ESD precautions and safeguards when handling the unit. Unpack the equipment and inspect it for damage. If any equipment has been damaged in transit, or you experience any problems during installation and configuration of your Orolia product, please contact Orolia (see "Technical Support"...
  • Page 54: Required Tools And Parts

    GNSS antenna with mounting bracket GNSS antenna surge suppressor (recommended) GNSS antenna inline amplifier (optional for short cable lengths) For antenna installation guidelines, see the separate documentation shipped with the antenna components. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 55: Safety

    DANGER! If the equipment is used in a manner not specified by the man- ufacturer, the protection provided by the equipment may be impaired. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 56 The interior of this equipment does not have any user-serviceable parts. Contact Orolia Technical Support if this equipment needs to be serviced. Do not open the equipment, unless instructed to do so by Orolia Service personnel. Follow Orolia Safety instructions and observe all local electrical regulatory requirements.
  • Page 57: Mounting The Unit

    Do not modify the equipment. Use only spare parts authorized by Orolia. Always follow the instructions set out in this User Manual, or in other Orolia doc- umentation for this product. Observe generally applicable legal and other local mandatory regulations.
  • Page 58: Rack Mounting (Ears)

    SecureSync front panel. To secure, use the #2 Phillips screwdriver, and 3 each of the HM20R-04R7-0010 M4 flat head Phillips screws per side. Note: if you CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 59: Connecting The Gnss Input

    GNSS operating mode. If using GNSS, verify that GNSS is the synchronization source by navigating to MANAGEMENT > OTHER: Reference Priority: Confirm that GNSS is Enabled, and its Status for TIME and 1PPS is valid (green). CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 60: Connecting Network Cables

    Once the unit is up and running, verify that the green link light on the Ethernet port is illuminated. The amber “Activity” link light may periodically illuminate when net- work traffic is present. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 61: Connecting Inputs And Outputs

    2.9.1 Using AC Input Power Connect the AC power cord supplied in the SecureSync ancillary kit to the AC input on the rear panel and the AC power source outlet. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 62: Hotswap Power Supply

    To install a power supply, insert the sled until the latch clicks and the rear panel of the supply is aligned with the rear panel of the SecureSync. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 63: Powering Up The Unit

    LED light should be OFF (startup behavior) or HEARTBEAT (acquiring fix behavior). A FAST blinking pattern would indicate the unit requires attention. For additional information, see "Status LEDs" on page 4 "Status Monitoring via Front Panel" on page 279. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 64: Zero Configuration Setup

    Windows 7/8 users should install Bonjour Print Services, otherwise access to *.local addresses will not be possible. Windows 10 already supports mDNS and DNS-SD, hence there is no need to install additional software. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 65: Using Zeroconf

    SecureSync, as well as a subnet mask and gateway, unless you are using an address assigned by a DHCP server. There are several ways to setup an address, described below: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 66: Dynamic Vs. Static Ip Address

    IP address, and instead proceed to "Accessing the Web UI" on page 56, in order to complete the SecureSync con- figuration process. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 67: Assigning A Static Ip Address

    DHCP server assign a new IP address to SecureSync. 2.12.2 Assigning a Static IP Address Orolia recommends assigning a static IP address to SecureSync, even if the unit is con- nected to a DHCP server. This can be accomplished in several ways: a.
  • Page 68 ENTER to change the setting. 4. Use the arrow keys to select OFF, and press the ENTER key twice (once to enter the setting, and once to confirm when the confirmation menu appears CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 69: 2.12.2.2 Setting Up A Static Ip Address Via A Dhcp Network

    (the default hostname is "Spectracom"). The start screen of the SecureSync Web UI will be displayed. 2. Log into the Web UI as an administrator. The factory-default user name and pass- word are: Username: spadmin CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 70: 2.12.2.3 Setting Up An Ip Address Via The Serial Port

    (the default password is admin123). 3. Disable DHCP, type: dhcp4set X off <Enter>, where X is the Ethernet port you wish to configure (0 for Eth0, 1 for Eth1). CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 71: 2.12.2.4 Setting Up A Static Ip Address Via Ethernet Cable

    ). For more information, see "The Web UI HOME Screen" on page 30. 2.12.3 Subnet Mask Values Table 2-2: Subnet mask values Network Bits Equivalent Netmask Network Bits Equivalent Netmask 255.255.255.252 255.255.192.0 255.255.255.248 255.255.128.0 CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 72: Accessing The Web Ui

    1. On a computer connected to the SecureSync network, start a web browser, and enter the IP address shown on the SecureSync front panel. 2. When first connecting to the Web UI, a warning about security certificates may be displayed: Select Continue..CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 73 For security reasons, it is advisable to change the default cre- dentials, see: "Managing Passwords" on page 255. 4. Upon initial login, you will be asked to register your product. Orolia recommends to register SecureSync, so as to receive software updates and services notices. See also "Product Registration" on page 278.
  • Page 74: Configure Network Settings

    "General Network Settings" on the facing page. Web Interface Settings: Web interface timeout: Determines how long a user can stay logged on. For more information, see "Web UI Timeout" on page 259. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 75: General Network Settings

    To access the General Settings window: 1. Navigate to MANAGEMENT > Network Setup. In the Actions Panel on the left, click General Settings. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 76: Network Ports

    & configure the port, or the INFO button to view the port status. 3. Ethernet ports are enabled by default. If the port is not already enabled, in the Edit Ethernet Ports Settings window, click the Enable check box. The Edit Ethernet CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 77 64 to follow Linux requirements. Edit IPv6 Address: Click on this button to configure a static IPv6 address. 4. To apply your changes, click Submit (the window will close), or Apply. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 78: Network Services

    "Default and Recommended Configurations" on page 322. 2.14.4 Static Routes Static routes are manually configured routes used by network data traffic, rather than solely relying on routes chosen automatically by DHCP (Dynamic Host Configuration CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 79 To set up a static route, the Ethernet connector must be physically connected to the network. Note: Do not use the same route for different Ethernet ports; a route that has been used elsewhere will be rejected. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 80: Access Rules

    See the table for a list of subnet mask values. IPv6— , representing 2001:db8::/48 2001:db8:0:0:0:0:0:0 2001:d- b8:0:ffff:ffff:ffff:ffff:ffff. 5. Click the button in the Action column to add the new rule. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 81: Https

    2.14.6.1 Accessing the HTTPS Setup Window 1. Navigate to MANAGEMENT > NETWORK: HTTPS Setup (or, navigate to MANAGEMENT > Network Setup, and click HTTPS in the Actions panel on the left): CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 82 HTTPS Setup window will not lose and Subject Alternative Names that have been entered. When switching between tabs within the HTTPS Setup window, the inform- ation you have entered will be retained. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 83: 2.14.6.2 About Https

    2.14.6.3 Supported Certificate Formats SecureSync supports X.509 PEM and DER Certificates, as well as PKCS#7 PEM and DER formatted Certificates. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 84: 2.14.6.4 Creating An Https Certificate Request

    , a previously generated Certificate (or the Spectracom default Certificate) will be overwritten . Note that an invalid Certificate may result in denial of access to SecureSync via the Web UI! CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 85 Certificate Authority for the required fields in an X 509-Certificate request. Orolia recommends all fields be filled out and match the information given to your Certificate Authority. For example, use all abbre- viations, spellings, URLs, and company departments recognized by the Certificate...
  • Page 86 Authority to see which key bit lengths and signature algorithms your web browser supports. Orolia recommends that when completing the Common Name field, the user provide a static IP address, because DHCP-generated IP addresses can change. If the hostname or IP address changes, the X.509 Certificate must be regenerated.
  • Page 87: 2.14.6.5 Adding Https Subject Alternative Names

    MANAGEMENT > NETWORK Setup, and click HTTPS in the Actions panel. 2. In the Subject Alternative Name Extension tab, select the plus icon to access the Add Subject Alternative Name popup. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 88: 2.14.6.6 Requesting An Https Certificate

    5. After adding all the desired Subject Alternative Names, follow instructions for "Creating an HTTPS Certificate Request" on page 68. 2.14.6.6 Requesting an HTTPS Certificate Before requesting an HTTPS Certificate from a third-party Certificate Authority, you need to create a Certificate Request: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 89 Using a Self-Signed Certificate In the process of generating a Certificate Request, a self- signed certificate will auto- matically be generated simultaneously. It will be displayed under the Certificate Request CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 90: 2.14.6.7 Uploading An X.509 Pem Certificate Text

    CA Certificate. Uploading X.509 PEM certificate text To upload an X.509 PEM Certificate text to SecureSync: 1. Navigate to MANAGEMENT > NETWORK: HTTPS Setup. 2. Select the Upload X.509 PEM Certificate tab. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 91: 2.14.6.8 Uploading An Https Certificate File

    1. Store the Public Keys File provided to you by the Certificate Authority in a location accessible from the computer on which you are running the Web UI. 2. In the Web UI, navigate to MANAGEMENT > NETWORK: HTTPS Setup. 3. Select the tab Upload Certificate File. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 92: Ssh

    SSH server. Host keys are used for server authentication and identification. A secure unit permits users to create or delete RSA or DSA keys for the SSH2 protocol. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 93 You can create individual RSA and DSA Host Public/Private Key pairs. Host keys must first be deleted before new Host Keys can be created. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 94 UNIX conventions, not Windows. Changing Key Length Values You may change the key length of the RSA, DSA, ECDSA type host keys. To change the key length of a host key: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 95 Keys are created in the order of RSA, DSA, ECDSA, ED25519. SecureSync will gen- erate all 4 host keys, RSA, DSA, ECDSA, and ED25519. 5. Delete any of the keys you do not want. See "Deleting Host Keys" above. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 96 SecureSync. You can transfer a new public key file using the Web UI. To view and edit the authorized_keys file: 1. Navigate to MANAGEMENT > NETWORK: SSH Setup. The SSH Setup window will open to the Host Keys tab by default. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 97 Creating an SSH session with Password Authentication for the admin account ssh spadmin@10.10.200.5 spadmin@10.10.200.5's password: admin123 You are now presented with boot up text and/or a “>” prompt which allows the use of the Spectracom command line interface. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 98 Creating an SSH session using Public Key with Passphrase Authentication for the admin account You must first provide the secure Orolia product a RSA public key found typically in the OpenSSH id_rsa.pub file. Then you may attempt to create an SSH session.
  • Page 99: Snmp

    You will be presented with the SFTP prompt allowing interactive file transfer and directory navigation. Recommended SSH Client Tools Orolia does not make any recommendations for specific SSH clients, SCP clients, or SFTP client tools. However, there are many SSH based tools available to the user at low cost or free.
  • Page 100 SNMP traps that Managers in other areas also receive. Clicking the PLUS icon in the top-right corner opens the SNMP Traps Settings Screen. See also "SNMP Traps" on page 91 "Setting Up SNMP Notifications" on page 247. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 101 The SNMP Status Settings are sysObjectID, sysContact, and sysLocation. To configure SNMP Status Settings: 1. Navigate to MANAGEMENT > NETWORK: SNMP Setup. 2. In the SNMP Status panel on the left, click the GEAR icon in the top-right corner of the panel. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 102 2. Through the FTP program, locate the Spectracom MIB files in the /home/spec- tracom/mibs directory. 3. FTP the files to the desired location on your PC for later transfer to the SNMP Man- ager. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 103: 2.14.8.1 Snmp V1/V2C

    V1 community based administration model. Creating Communities 1. Navigate to MANAGEMENT > NETWORK: SNMP Setup. 2. In the SNMP V1/V2 panel click the PLUS icon in the top-right corner. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 104 V1 or V2c. 5. Click Submit. The created communities will appear in the SNMP V1/V2 panel: Editing and Deleting Communities To edit or delete a community you have created: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 105: 2.14.8.2 Snmp V3

    Creating Users 1. Navigate to MANAGEMENT > NETWORK: SNMP Setup. 2. In the SNMP V3 panel, click the PLUS icon in the top-right corner. 3. The SNMP V3 Settings window will display. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 106 The cursor will change from an arrow icon to a pointing finger to indicate that the entry is clickable. 3. The SNMP V3 Settings window will display: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 107: 2.14.8.3 Snmp Traps

    To define SNMP Traps (Notifications): 1. Navigate to MANAGEMENT > NETWORK: SNMP Setup. 2. In the SNMP Traps panel, click the PLUS icon in the top-right corner. 3. The SNMP Traps Settings window will display: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 108 If your SNMP manager is not providing an Engine ID, you can generate one yourself according to protocols within RFC 3411 and apply it to your network manager and trap configuration. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 109: Vlan Support

    2. In the popup panel labeled VLAN Setup, click on the plus sign to add your VLAN interfaces. (You can also view or delete any configured VLAN tags from this panel). CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 110: 2.14.10 System Time Message

    MANAGEMENT > Network Setup > Actions panel, and select Sys- tem Time Message. The Settings window will open. 2. Populate the fields Multicast Address, Port Number Message ID, and click Submit. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 111: 2.14.10.1 System Time Message Format

    UID of the message; programmable Unsigned 32 bit integer Message Total message size in bytes Unsigned 32 bit Bytes Size integer Seconds Seconds since epoch (00:00:00 Jan Unsigned 32 bit Seconds 1, 1970 UTC) integer CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 112: Configure Ntp

    The following is a list of configuration settings you may want to consider as you setup your NTP Service. (Not all items may apply to your application, or there may be other con- siderations not included in this list.) CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 113: The Ntp Setup Screen

    Servers: In this display you can view the NTP Servers that SecureSync detects in your network. It is through this display that you configure external NTP ref- erences. See "NTP Servers: Adding, Configuring, Removing" on page 107. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 114 Any settings you have created previously will be lost. "Restoring the Default NTP Configuration" on page 100. The NTP Services panel … is the second panel on the left-hand side of the NTP screen. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 115: Dis-/Enabling Ntp

    Changes made will now take effect and NTP operation will be restored shortly after this operation is performed. 2.15.4 Viewing NTP Clients To view the NTP clients being served by SecureSync: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 116: Restoring The Default Ntp Configuration

    Stratum 1 operation with no other servers or peers, no broadcasting and no access restrictions. External queries or modifications are not permitted, while generally all IPv4 and IPv6 client connections are allowed. To restore SecureSync to its default NTP configuration: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 117: Ntp Output Timescale

    IMPORTANT: Make sure you select your desired timescale! Using the wrong timescale will inevitably result in an undesired time error in your NTP clients. To change the system timescale SecureSync will use for its NTP output (and other out- puts): CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 118: Ntp Reference Configuration

    The NTP Stratum Model The NTP Stratum model is a representation of the hierarchy of time servers in an NTP net- work, where the Stratum level (0-15) indicates the device's distance to the reference CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 119: 2.15.7.2 Configuring "Ntp Stratum 1" Operation

    This option configures NTP to “weigh” the Timing System input heavier than input from other NTP servers for its selection (The Timing System inputs are normally more accurate than other NTP servers). CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 120: 2.15.7.3 Configuring "Ntp Stratum Synchronization

    (unless its quality is determined to be low). Note: If enabled, this function would give GPS additional “weight” for NTP to select the GNSS input over other NTP Servers. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 121: Ntp Servers And Peers

    NTP will report to the network that it is now at Stratum 15. A status of Stratum 15 will cause the network to ignore SecureSync as an NTP time ref- erence. For more information about Holdover, see "Holdover Mode" on page 224. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 122: The Ntp Servers And Ntp Peers Panels

    GPS for its synchronization. Below is a list of potential REF IDs reported by the SecureSync Timing System (other NTP Servers and Peers may report different references): GPS: GNSS reference IRIG: IRIG reference HVQ: HAVE QUICK reference FREQ: Frequency reference CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 123: 2.15.8.2 Ntp Servers: Adding, Configuring, Removing

    POLL: The polling interval, i.e. how often SecureSync is polling this NTP reference for its time. DELAY (ms): The measured one-way delay between SecureSync and its selected reference. 2.15.8.2 NTP Servers: Adding, Configuring, Removing To add, configure, or remove an NTP Server: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 124 ACTION GEAR button, and proceed to the next step. REMOVE a server (and its associated configurations), click the X-button next to it, then confirm by clicking OK. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 125: 2.15.8.3 Ntp Peers: Adding, Configuring, Removing

    Verify the IP address EDIT the settings of an NTP Peer, click the GEAR button next to it, and proceed to Step 3 below. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 126 Preferred: Check this box to prefer this NTP Peer over other NTP Peers ("NTP Peer Preference"). This will result in SecureSync synchronizing more frequently with this Peer. For additional information on NTP Prefer- ences, see "Configuring "NTP Stratum 1" Operation" on page 103. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 127: Ntp Authentication

    To create, edit, or delete Symmetric Keys (MD5 Authentication): 1. Navigate to MANAGEMENT > NETWORK: NTP Setup. 2. In the Actions panel, click the Symmetric Keys button: 3. The NTP Symmetric Keys window will display: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 128 MD5 pairs, and the key must be trusted. ID—The key ID must be a number between 1 and 65532. Digest Scheme—Choose one of the options from the drop-down list. The available options are: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 129 Submit button. 6. The key(s) you have set up will now appear as options in the Symmetric Key field in both the NTP Server screen, and the NTP Peer screen. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 130: 2.15.10 Ntp Access Restrictions

    To configure NTP Access Restrictions: 1. Navigate to MANAGEMENT > NETWORK: NTP Setup. 2. In the Actions panel, click Access Restrictions: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 131 NTP access to SecureSync, but the rest of the network will not have access to SecureSync. By default, SecureSync allows all IPv4 and IPv6 connections. Version—Choose IPv4 or IPv6 Address—Enter the appropriate hostname. Subnet Mask—Enter the appropriate IP mask. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 132: Enabling/Disabling Ntp Broadcasting

    Interval. When NTP Broadcasting is selected, in addition to still responding to NTP time requests sent from network appliances, SecureSync will also send unsolicited NTP time packets to the local broadcast address at the Broad- cast Interval specified by you. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 133: 2.15.12 Ntp Over Anycast

    As soon as the first SecureSync server obtains a valid reference again, it will make itself avail- able to the OSPF router, which will then use it as a time source again, based on the principle of shortest path available. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 134: Configuring Ntp Over Anycast (General Settings)

    ETH0 available). If you desire IPv6 func- tionality, you must also select the IPv6 port address since there may be multiple IPv6 addresses on a single port. 8. Click Submit. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 135: Configuring Ntp Over Anycast (Ospf Ipv4)

    (For more information about TFOM, see "Con- figuring the Oscillator" on page 230.) Navigate to Management > Disciplining, and click the GEAR icon in the top-right corner of the Status panel. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 136: Configuring Ntp Over Anycast (Ospf Ipv6)

    (For more information about TFOM, see "Con- figuring the Oscillator" on page 230.) Navigate to Management > Disciplining, and click the GEAR icon in the top-right corner of the Status panel. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 137: Configuring Ntp Over Anycast (Bgp)

    A small window will cause SecureSync to deliver a more accurate time win- dow, but also will cause it to quickly withdraw from the Anycast server pool, i.e. declare itself an invalid reference. (For more information about TFOM, see CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 138: 2.15.12.5 Configuring Anycast Via Ntp Expert Mode

    If no configuration was done outside of Expert Mode, these will be the factory default files. If Anycast configuration was already done from the Web UI, you will be able to edit the existing Anycast setup. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 139 Interface eth1 line, followed by only IPv6 line, because no IPv4 address is con- figured on that port) ***************************************************** interface eth0 ip address 10.2.100.157/16 interface eth1 ipv6 address 2000:10:2::157/64 interface lo ip address 10.10.14.1/32 ipv6 address 2000:10:10::1/64 CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 140 10.2.0.0/16 area 0.0.0.0 redistribute connected distribute-list default out connected access-list default permit 10.10.14.1/32 access-list default deny any ***************************************************** Example file: ospf6d.conf ***************************************************** interface eth0 router ospf6 router-id 10.2.100.157 interface eth0 area 0.0.0.0 CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 141: 2.15.12.6 Testing Ntp Over Anycast

    The other use case for Orphan Mode is to allow for NTP to be utilized in an isolated timing network that is designed to normally operate without any external ref- erences. To configure NTP Orphan Mode: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 142: 2.15.14 Host Disciplining

    Advanced NTP configuration is possible via the NTP Expert Mode, which allows you to write directly into the NTP.conf file (the syntax is similar to the one used with CISCO routers). CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 143 When Expert Mode is enabled, the user has direct access to the NTP.conf file. Caution: Orolia Tech Support does not support the editing of the NTP con- figuration files while in the Expert Mode. For additional information on edit- ing the NTP.conf file, please refer to http://www.ntp.org/...
  • Page 144 To enable the Expert Mode, and edit the NTP.conf file: 1. Navigate to MANAGEMENT > NETWORK: NTP Setup. 2. In the NTP Services panel locate the Expert Mode switch: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 145: 2.15.16 Orolia Technical Support For Ntp

    NTP Expert Mode is disabled. 2.15.16 Orolia Technical Support for NTP Orolia does not provide technical assistance for configuring and installing NTP on Unix- www.ntp.org based applications. Please refer to for NTP information and FAQs. Another news://comp.protocols.time.ntp...
  • Page 146: The Ptp Screen

    The PTP screen provides PTP status information, and provides access to all configurable PTP settings. To access the PTP screen, navigate to MANAGEMENT > NETWORK: PTP Setup. The PTP screen will open: Figure 2-6: PTP setup screen CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 147: The Ptp Settings Panel

    A b o u t … P T P T r a n s m i s s i o n M o d e s The PTP Card is able to transmit the PTP packets in three transmission modes: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 148 This is usually the priority value that a Slave is set to.) See IEEE 1588-2008, Sec- tion 8.10.1, 8.10.2. Clock Priority 2: [0 to 255] (same as above). Current UTC Offset: to convert to civil time. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 149: The Ptp Statistics Panel

    All statistics shown are based on the traffic that is detectable by SecureSync, i.e. in a Unicast environment, SecureSync may only detect traffic that is addressed to it, based on switch configuration. Figure 2-8: PTP Statistics Panel Node: IP address of PTP node. Clock Identity: [e.g., "a0:36:9f:ff:fe:37:b9:5d"] CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 150: Enabling/Disabling Ptp

    GPSD is a free, open-source package used worldwide to manage GNSS systems and devices. With GPSD support on a SecureSync, users are able to: connect to the unit over a network via TCP at the specified port using any GPSD- compatable software CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 151 GPSD via CLI commands The following CLI commands are used to control the behavior of GPSD via the SecureSync CLI: gpsdserviceportget – Displays the GPSD service port gpsdserviceportset – Sets the GPSD service port CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 152: Configurable Connectors

    Note on the table below: Both RS485 connectors have optional termination on their inputs. To select this feature, choose the Web UI feature as listed below that also includes With Termination in the listing. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 153 IRIG Input IRIG_IN | RS485 HaveQuick Input (Default) HQ_IN | RS485 ASCII Time Code Input ATC_IN | RS485 IRIG AM Output (Default, non-configurable) IRIG AM Output Pin 11 (signal) Pin 12 (ground) CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 154: Assigning Signals

    RS232 RX IN 2.18.3 Assigning Signals Changing the signals on either the rear panel BNC DCLS connector, or on the Multi I/O 15- pin connector requires access to the Web UI. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 155 B. In the Actions panel on the left, click Reload Layout. Saving your unique Pin Layout Before you perform a clean upgrade or restore your unit's default settings, you can choose CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 156: Network Ports

    How to Configure an Input Reference To access the user-editable settings of an Input Reference, choose one of these two meth- ods: Configuring the settings of an input reference, method 1: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 157: Configure A 1Pps Input

    "Configurable Con- nectors" on page 136). To configure the settings of the PPS Input (also referred to as ‘Reference’), go to its Edit window.. The Web UI list entries for these cards are: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 158: Configure An Ascii Input

    An ASCII Input is available by default configuration through the Multi-I/O connector (see "Configurable Connectors" on page 136). To configure the ASCII Input (also referred to as ‘Reference’), go to its Edit window. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 159 Formats. For detailed spe- cifications and limitations on the supported time code formats, see "Time Code Data Formats" on page 519. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 160 System Time when input reference changes occur. These time jumps could affect NTP and normal operation of the system. PPS Source – choices are: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 161: Configure A Havequick Input

    Timescale: Used to select the time base for the incoming time code data. The entered Timescale is used by the system to convert the time in the incoming data stream to UTC time for use by the System Time. The available choices are: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 162: Configuring An Irig Input

    The Edit window allows the configuration of the following settings: Format: Sets the formatting of the IRIG input signal, as defined by the IRIG gen- erator time source. The available choices are: IRIG A IRIG B CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 163 Formats: Variants of IRIG B Fields confirm to Spectracom IEEE C37.118-2005: Has been extended to support one-month leap second notification The available options will vary according to the configurations of Format and Mod- ulation Type. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 164: Configuring Outputs

    Web UI may look differently. 2.20.1 How to Configure an Output To access the user-editable settings of an Output, choose one of these two methods: Configuring the settings of an output, method 1: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 165: Configuring A 1Pps Output

    2. In the panel on the right, click the GEAR button next to the 1PPS Output you want to edit. 3. The 1PPS Output Edit window will display, allowing the following items to be con- figured: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 166: 2.20.3 Configuring The 10 Mhz Output

    [default = 200 ms] 4. Click Submit. 2.20.3 Configuring the 10 MHz Output A 10 MHz Output is available on the rear panel of the SecureSync 2400 Time and Fre- quency Synchronization System. To configure the 10 MHz output: 1. Navigate to INTERFACES >...
  • Page 167: Configure An Ascii Output

    The Output Edit window allows the configuration of the following settings: Format Group – configures the message format type. Choices are: None (no message will be output) Spectracom NMEA ICD-153 EndRun CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 168 UTC time for use by the System Time. The available choices are: UTC: Coordinated Universal Time ("temps universel coordonné"), also referred to as ZULU time TAI: Temps Atomique International CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 169: Configuring A Gpio Output

    Output Mode: Direct Output Value: Output will be low or high, determined by the Output Value section below. Square Wave: Output will generate a programmable square wave determined by the configuration. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 170: Configuring A Havequick Output

    BNC connector on the rear panel (see "Con- figurable Connectors" on page 136). To configure the settings of a HAVE QUICK Output, go to its Edit window. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 171 Time Management Page: This option will appear under the name of the local clock you have set up. Refer to "The Time Management Screen" on page 166 for more information on how to configure CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 172: Configuring An Irig Output

    Outputs, go to its Edit window. For instructions, see: "Configuring Option Card Inputs/Outputs" on page 336. Note: The choices available will change based on the type of IRIG you have chosen to configure. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 173 "IRIG Carrier Fre- quencies" on page 546. Coded Expression: Defines the data structure of the IRIG signal, where: BCD = Binary Coded Decimal TOY = Time of Year CF = Control Field CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 174 TTL outputs, only on AM formats. The value of 128 will cause the Mark amplitude to be about 5V into high impedance. A value of 200 results in an output amplitude of about 9V into high impedance. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 175: 2.20.8 The Outputs Screen

    1PPS signal (by default, the rising edge is the on-time point). There is a fixed phase relationship between the 1PPS and the 10 MHz outputs, as described below: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 176: The Option Cards Screen

    This menu lists all the interfaces on the unit, including the option cards installed on your SecureSync. The rear panel connectors included with a standard SecureSync are all listed in this menu under "Main" and "Option Card 0". CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 177: Signature Control

    E X A M P L E S : You can setup Signature Control such that SecureSync's built in 1PPS output becomes disabled the moment its input reference is lost (e.g., if a valid GNSS signal is lost). CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 178 Signature control output-presence states Out-of-sync, In-sync with Ref. In holdover no holdover external reference III. Configuring Signature Control for an Output To review or configure the Signature Control setting for any output: CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 179 3. Use the arrow keys to select ON (enabled) or OFF (disabled). Press the enter key. 4. In the confirmation menu on the right hand side of the screen, press the enter key again. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 180 2.22  Signature Control BLANK PAGE. CHAPTER 2 • SecureSync 2400 User Manual Rev. 2...
  • Page 181: Managing Time

    The following topics are included in this Chapter: 3.1 The Time Management Screen 3.2 System Time 3.3 Managing References 3.4 Holdover Mode 3.5 Managing the Oscillator CHAPTER 3 • SecureSync 2400 User Manual...
  • Page 182: The Time Management Screen

    From time to time, a leap second is applied to UTC, in order to adjust UTC to the actual pos- ition of the sun. Via the Leap Second Info panel, leap second corrections can be applied to CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 183: System Time

    The flow chart below illustrates how SecureSync obtains the highest available and valid ref- erence, depending on whether an external source is chosen as reference, or an internal (User[x], or Local System). CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 184: System Time

    Time Management screen, click the GEAR icon. 3. The Edit System Time pop-up window will display. In the System Timescale field select a timescale from the drop-down list. The options are: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 185: Timescales

    GPS time as transmitted by the GNSS satellites (in 2018 the GPS time is currently 18 seconds ahead of UTC time. UTC timescale observes leap seconds while GPS timescale does not). CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 186 These outputs have internal conversions that allow the timescale for the outputs to also be independently defined, so that they don’t have to be provided in the same times- cale. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 187: Manually Setting The Time

    Only, this box will show the current time in the format: Year-Month-Day Hour:Minute:Se- cond. To set the time manually, click anywhere in the System Time field. A drop-down calendar with time-setting sliders will appear: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 188 Set Year Only: Some legacy time formats (e.g., IRIG) do not support years. Checking this box will open a data entry field to manually set the year. Orolia recommends not to utilize this feature, unless the IRIG format you are using does not provide a YEAR field.
  • Page 189: Using Battery Backed Time On Startup

    The System Clock will adjust the System Time for any time difference. Note: The Battery Backed Time is also referred to as the time maintained by the integrated Real-Time Clock (RTC). CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 190 To use the battery-backed time as the synchronized time at start-up: 1. Navigate to MANAGEMENT > OTHER: Time Management. 2. In the System Time panel click the GEAR icon. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 191: Timescale Offset(S)

    2. In the Offsets panel on the left, click the GEAR icon in the top-right corner. 3. The Edit GPS Offset window will display. Enter the desired GPS Offset seconds, and click Submit. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 192: Leap Seconds

    SecureSync can be alerted of impending Leap Seconds by any of the following methods: Intercalary: (of a day or a month) inserted in the calendar to harmonize it with the solar year, e.g., February 29 in leap years. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 193: Leap Second Alert Notification

    Leap Second correction may be delayed until the next scheduled interval, unless the software properly handles the advance notice of a pending Leap Second and applies the correction at the right time. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 194: Leap Second Correction Sequence

    Edit Leap Second window. 2. To access the Edit Leap Second information window, click the GEAR icon in the Leap Second Information panel. 3. The Edit Leap Second window will display: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 195: Local Clock(S), Dst

    1. Navigate to MANAGEMENT > OTHER: Time Management. 2. Click the PLUS icon in the Local Clocks panel in the Time Management screen. 3. The Local Clock pop-up window will display. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 196 If you wish to use DST (Daylight Savings Time ["Summer Time"]) rules, click Use DST Rules box. Otherwise the time for the local clock will always be standard time. DST options will appear in the Local Clock window: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 197: Dst Examples

    10. Click Submit. Your local clock will appear in the Local Clocks panel. 3.2.4.2 DST Examples The following two examples illustrate the configuration of Daylight Savings Time (DST) for a Local Clock: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 198: Dst And Utc, Gmt

    GMT switch to a different time zone offset during their DST period. The United Kingdom is not on GMT all year, but uses British Summer Time (BST), which is one hour ahead of GMT, during the summer months. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 199: Managing References

    Note: The References shown on your screen may look different from the illustration below, depending on your SecureSync 2400 Time and Fre- quency Synchronization System model and hardware configuration. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 200: Configuring Input Reference Priorities

    3.3.1.1 Configuring Input Reference Priorities SecureSync can use numerous external time sources, referred to as "references". As external time sources may be subject to different degrees of accuracy and reliability, you CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 201 STATE to either on or off. To confirm you choice, press the ENTER key Press ENTER again in the confirmation menu. Reorder the priority of SecureSync’s references CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 202 2. In the Configure Reference Priorities table click the Delete button on the right- hand side of the entry you wish to delete. 3. In the pop-up window that opens click to confirm. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 203: The "Local System" Reference

    The "Local System" Reference Local System reference is a "Self" reference, i.e. SecureSync uses itself as an input reference for Time, or as a 1PPS reference. The Local System is a unique input reference CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 204: The "User/User" Reference

    Time as an output reference. This concept is referred to as the User/User reference, because both the Time, and the 1PPS reference are not linked to any UTC-based external reference, but hand-set by you. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 205 Holdover period has expired: In the Edit System Time window, the checkbox Manual Time Set must be checked. The System Time displayed in the field below will become valid the moment the Submit button is clicked. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 206 NTP to exit synchronization. If the difference is under 1 second, NTP will remain in sync and will "slew" (over a period of time) to the new reference time. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 207: Reference Priorities: Examples

    3. For all other references, uncheck the Enabled checkbox, so that they are all dis- abled. Since both of these references are default references, no additional references need to be added to the Reference Priority table. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 208 2. Move the reference which has “User 0” in the Time column and “User 0” in the 1PPS column to the top of the table, with a Priority value of 1. Click the Enabled checkbox. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 209 Step-by-step procedure: 1. Add a reference to the Reference Priority by clicking the PLUS icon. Use the fol- lowing settings, then click Submit: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 210: Reference Qualification And Validation

    A data set can be exported, or deleted. To monitor the quality of references, navigate to TOOLS > SYSTEM: Reference Mon- itor. The Reference Monitor screen will display: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 211: Broadshield

    Major Alarm and – depending on your system configuration – invalidate the GPS ref- erence causing SecureSync to either transition into Holdover mode (see"Holdover Mode" page 224), or go out of sync. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 212 Major Alarm AND it will go into Holdover mode. To configure these settings: 1. Navigate to MANAGEMENT > Broadshield. 2. In the BroadShield Service panel on the left, configure the desired setting: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 213 BROADSIGHT BroadSight is a service that allows collection of data from multiple BroadShield units and provides a dashboard view of the data. Note: BroadSight for SecureSync is currently not supported. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 214 (format: xx.xxxxxx degrees) and alt. Note, however, that this may cause a spoofing alarm, since BroadShield detects a difference between the HOME BASE position and the GNSS position. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 215 – will either remain in sync (green SYNC status light), i.e. it will continue to output time and frequency signals considered valid, or it will go out of sync (red SYNC light). CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 216 The Dashboard top graph displays the past signal level over time, divided into a Normal and a Critical signal level (separated by a line). A blue line in the Critical zone indicates CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 217 Used: The number of satellites currently received by SecureSync. This number includes all satellites currently received for all enabled constellations (see "Selecting GNSS Constellations" on page 221). Note that BroadShield uses only GPS signals for jamming/spoofing detection. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 218 Note that the map data is not part of the BroadShield software, but is downloaded from the Internet. Hence, this feature is only available if your SecureSync unit is connected to the Internet. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 219: The Gnss Reference

    While SecureSync’s default GNSS receiver configuration will likely be adequate for most applications, it is advisable that you review the options and change settings as needed, par- ticularly if you are experiencing poor signal reception. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 220: Reviewing The Gnss Reference Status

    2. Click the INFO button next to GNSS 0. The GNSS 0 status window will display; it contains two tabs, explained in detail below: Main [= default], and Satellite Data. The "Main" tab CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 221 3.3  Managing References Under the Main tab, the following information will display: Note: Detailed information on the different parameters can be found in the subsequent GNSS topics. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 222 Server A-GNSS Status: The Rinex Server feature is ENABLED and running, or DISABLED Server A-GNSS Data: A-GPS data is AVAILABLE and can be downloaded by cli- ents, or it is UNAVAILABLE CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 223 Number of Satellites over Time: A graphical track of how many satellites were being tracked over time. SNR over Time: A graphical track of maximum SNR, and minimum SNR. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 224: Determining Your Gnss Receiver Model

    GNSS Receiver: GNSS Receiver Models Orolia strives to equip SecureSync with current technology. Depending on the production date of your SecureSync unit, one of the following GNSS receiver models will be installed in your unit (if any): CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 225: Selecting A Gnss Receiver Mode

    When connected to a GNSS antenna that receives a GNSS signal, SecureSync can use GNSS as an input reference. The factory default configuration allows GNSS satellites to be received/tracked with no additional user intervention required. However, there are several user-configurable GNSS settings: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 226 GNSS satellites become available. The GNSS survey is used to determine the exact position and time; it takes 2000 seconds (33 minutes) to complete a survey. During the survey, the CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 227 Mobile GNSS Receiver Mode Mobile Mode no surveys will be carried out since the position status is updated in near real-time. SecureSync will go into synchronization shortly after beginning to track satel- lites. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 228: Setting Gnss Receiver Dynamics

    GNSS 0 status window, the line item Receiver Dynamics will indicate the current setting. 3. To change the setting, click Edit in the bottom-left corner. The GNSS 0 con- figuration window will display: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 229 Table 3-2: Receiver dynamics, ~modes, ~ dynamics, ~ types Receiver Dynamics Receiver Mode Land Stationary (Resurvey) (No Resurvey) Single Satellite irrelevant irrelevant irrelevant irrelevant Standard Mobile (with u-blox receivers) CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 230: Performing A Gnss Receiver Survey

    To see if SecureSync's GNSS receiver is performing a survey and if so, verify its progress: 1. Navigate to INTERFACES > REFERENCES: GNSS 2. The survey status (ACQUIRING, COMPLETE, or progress in percent) is displayed under the line item Survey Progress. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 231: Gnss Receiver Offset

    Configuring a GNSS receiver offset To configure the GNSS receiver offset: 1. Navigate to Interfaces > References: GNSS Reference 2. Click on the GEAR button next to the GNSS Reference. The GNSS 0 window will open: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 232: Resetting The Gnss Receiver

    Resetting the GNSS Receiver Reset Receiver command causes the GNSS receiver to execute a cold start: All data will be erased from the volatile receiver memory. Only non-volatile memory is preserved. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 233: Deleting The Gnss Receiver Position

    GNSS receiver it is configured to operate in Standard Mode. The objective of the GNSS Survey is to re-discover the current antenna position. Note: self survey will take at least 2000 seconds (33 minutes). CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 234 NOT possible to delete the position and start the GNSS survey. This feature is only available in Standard Mode Single Satellite Mode. In Single Satellite Mode a GNSS survey may take up to 24 hours. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 235: Manually Setting The Gnss Position

    "Determining Your Position" on the next page. 2. Navigate to INTERFACES > REFERENCES: GNSS 0. In the GNSS 0 status win- dow, click Edit in the lower left corner. The GNSS 0 window will open: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 236 & longitude data in degrees/minutes/ seconds, you need to convert this data to the decimal format e.g., by using a conversion tool, such as Earth Point www.earthpoint.us , or https://www.fcc.gov/media/radio/dms- decimal CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 237: 3.3.3.10 Gnss Constellations

    To configure which GNSS constellations SecureSync's GNSS receiver shall track: 1. Navigate to INTERFACES > REFERENCES: GNSS Reference. 2. Click the GEAR button next to GNSS 0. The GNSS 0 window will open: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 238 BeiDou – – – – – – – – – – – – – – Note: The augmentation systems SBAS and QZSS can be enabled only if GPS operation is enabled. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 239 QZSS is disabled by default. In order to receive QZSS signals, you must either be located in the Japan region, or use a GNSS simulator (such as Orolia GSG-5 or -6 Series). QZSS is not considered a standalone constellation and while SecureSync allows you to enable QZSS by itself, it is recommended to use it in combination with GPS.
  • Page 240: Holdover Mode

    The more stable the oscil- lator is without an external reference, the longer this holdover period can be and have it still maintain very accurate outputs. The benefit of Holdover is that time synchronization CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 241 (short) the Holdover Timeout should be. How to configure Holdover Timeout To set the Holdover Timeout value: Navigate to MANAGEMENT > OTHER: Disciplining, and click the GEAR icon in the Status panel: CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 242 UTC time. This results in more accurate tim- ing, over extended durations upon the loss of GPS input. For instance, a Rubidium CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 243 Desired Holdover Length Holdover Length (in seconds) to be entered 2 hours 7200 seconds (default value) 24 hours 86 400 7 days 604 800 30 days 2 419 200 1 year 29 030 400 CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 244: Managing The Oscillator

    1PPS reference during normal operation, in con- junction with an external time reference (for more information, see "Configuring Input Reference Priorities" on page 184.) CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 245: Oscillator Types

    Extending the hold-over period allows the unit to provide very accurate and useable time stamps and a 10 MHz output for a longer period of time once time synchronization has been lost. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 246: Configuring The Oscillator

    External Oscillator : It is possible for an external oscillator to be locked to SecureSync's 10 MHz output via an external PLL, with the lock state of the external PLL monitored by SecureSync. Contact Orolia for more information. 3.5.2 Configuring the Oscillator SecureSync is equipped with an internal oscillator.
  • Page 247: Time Figure Of Merit (Tfom)

    TFOM is SecureSync’s estimation of how accurately it is synchronized with its time and 1PPS reference inputs, based on several factors, known as the Estimated Time Error ETE. The larger the TFOM value, the less accurate SecureSync believes it is aligned with CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 248 This will cause the TFOM to start to decrease faster. Once TFOM no longer exceeds MaxTFOM because the System 1PPS is now much closer to the reference 1PPS, the dis- CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 249: Monitoring The Oscillator

    The states are: "Warm up", "Calibration", "Tracking Setup", "Lock State", "Freerun", and "Fault". 1PPS Phase Error: A tracking measurement [scaled time, in ns, or ms] of the internal 1PPSs' phase error with respect to the selected input reference. Long holdover CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 250 Oscillator temperature is plotted over time in the His- tory panel on the right, while graphs for board and CPU tem- perature can be found under TOOLS > SYSTEM: System Monitor. Last Time Reference Change: [Timestamp: Last occurrence] CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 251: Oscillator Logs

    ARROW icon. in the top-right corner: 3. The log file will be downloaded onto your local computer. Its name is oscil- latorStatusLog.csv. Depending on the operating system you can open the file, or save it locally. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 252 3.5  Managing the Oscillator delete the log file, click the TRASH CAN icon, and confirm. CHAPTER 3 • SecureSync 2400 User Manual Rev. 2...
  • Page 253: System Administration

    The following topics are included in this Chapter: 4.1 Powering Up/Shutting Down 4.2 Notifications 4.3 Managing Users and Security 4.4 Miscellanous Typical Configuration Tasks 4.5 Quality Management 4.6 Updates and Licenses 4.7 Backing-up and Restoring Configuration Files CHAPTER 4 • SecureSync 2400 User Manual...
  • Page 254: Powering Up/Shutting Down

    "Status LEDs" on page 4 "Status Monitoring via Front Panel" on page 279. 4.1.2 Shutting Down the Unit Shutting down SecureSync by interrupting the AC power supply is acceptable and will not damage the unit. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 255: Issuing The Halt Command Before Removing Power

    Reboot/Halt. 2. The Reboot/Halt window will display. Select the Shutdown the Unit checkbox. 3. Click Submit. 4. Wait 30 seconds after entering the HALT command before disconnecting power from the unit. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 256: Rebooting The System

    3. SecureSync will now be rebooted and be accessible again shortly thereafter. Rebooting via LCD/Keypad, Serial Port, Telnet, SSH, SNMP With a serial connection to the front panel serial port, telnet connection or SSH con- nection, type reboot <Enter> to reboot SecureSync. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 257: Notifications

    Note that only one email address can be specified in each Email Address field. If desired, the same email address can be used in all of the fields, or different addresses can be used for different events. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 258: Configuring Notifications

    See "SNMP" on page 83. Email Setup button: Configure SecureSync's interface settings for Exchange email servers and Gmail. For more information on this subject, see the Technical Note Email Notification Setup CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 259 Trap—Check here to configure the event to trigger an SNMP Trap. Email—Check here to configure the event to trigger an email notification. Email Address—Enter the address to which the email should be sent when triggered by the event. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 260: Notification Event Types

    Oscillator Alarm Oscillator Alarm Cleared Reference Change (Cleared) Reference Change 4.2.2.2 GPS Tab: Events Too Few GPS Sat, Minor Alarm Too Few GPS Sat, Minor, Cleared Too Few GPS Sat, Major Alarm CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 261: System Tab: Events

    In Stationary mode, and for SAASM units, the minimum number of satellites is normally 4 (four). Hence, it CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 262 Note that the GNSS receiver must initially be tracking more than the configured number of satellites in order for this alarm to be triggered (the alarm is triggered when the receiver falls below the number of Minimum Satellites you specified above). CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 263: Setting Up Snmp Notifications

    To set up Notification Emails (Standard Mode): 1. Navigate to MANAGEMENT> OTHER: Notifications. 2. In the Email Setup panel, click on the gear icon 3. Enter your email information in the popup window CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 264 4. To configure the applicable example email configuration, delete the comments (“#”) from each line and replace the “<>” with the appropriate values for your particular email server (such as the user name and password for your Email server). CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 265 Test Email Address field, enter an email address. Click the Send Test Email button. A notification that your email has been sent will appear at the top of the win- dow. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 266: Managing Users And Security

    "factory" The default factory account with the username spfactory is meant to provide access to Orolia technical support personnel. You can delete this account, if you so prefer. Note, Clean and Halt however, that executing the command will recreate the Factory account.
  • Page 267 "user" cannot modify any of the network-related configurations (such as telnet, FTP, SSH and HTTP/HTTPS). The switches can be moved, but an error message will be displayed shortly thereafter. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 268: Rules For Usernames

    2. The Users panel on the right shows a list of all user accounts, including their User- name, the Group to which that user account is assigned to, and any Notes about CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 269 SecureSync. Note: The spfactory account is for use by Orolia service personnel. While the spfactory account can be deleted by an administrator, it should be noted that this may potentially limit remotely provided technical support.
  • Page 270 Resetting the SecureSync configuration Clearing log files Changing Disciplining Setup options Changing configuration options for the following protocols or features: HTTPS, SSH LDAP/RADIUS SNMP (with the exception of configuring SNMP notifications). CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 271: Managing Passwords

    To configure password requirements e.g., rules for minimum password length and special characters: 1. Navigate to MANAGEMENT > OTHER: Authentication. 2. In the Actions panel, click Security Policy. 3. The Password Security window will display. Fill in the self-explanatory fields and CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 272: The Administrator Password

    Changing the admin password To change the admin password from a known value to another desired value: 1. Navigate to MANAGEMENT > OTHER: Change My Password. 2. The Change Password window will display. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 273: Lost Password

    (press the power button and select Restore factory defaults), or: contact customer service to request a password reset. Changing the "spadmin" password via Web UI To change the spadmin password: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 274 2. Type: resetpw <Enter>. The spadmin account password is now reset. After resetting the password follow the procedure above to change the spadmin pass- word in the MANAGEMENT > OTHER: Authentication window. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 275: Web Ui Timeout

    This setting affects all users, not just the user changing the value. Note: The Web UI does not allow simultaneous logins. Any subsequent logins will discontinue any prior instances of the Web UI. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 276: Ldap Authentication

    If you plan on using LDAP, configure it with diligence. If not required, Spectracom recommends to keep LDAP disabled. Configuring LDAP authentication 1. Navigate to MANAGEMENT > OTHER: Authentication. 2. In the Actions panel, click the LDAP Setup button. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 277 Advanced: This is where you set up your search filter(s) and login attribute. LDAP Servers Settings Under the Servers tab, you manage the LDAP server(s) to be accessed:. It is necessary to add a server before other settings are configured. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 278 Server Type: This must be the correct type—check with your LDAP server admin- istrator if you are not sure which you are using. You have a choice of: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 279 NTP client key. If your LDAP server requires secure communications with its "clients" (i.e. the use of SSL), the Server Certificate, the Client Certificate, and the Client Key must be uploaded to SecureSync here. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 280 Enable Security if you want to enable SSL security, i.e. use Secure LDAP. Use the checkbox Clean Security Certificates to remove all certificates currently stored on SecureSync (e.g., to eliminate expired certificates). CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 281 Acceptable values are username, uid, and dn. c. Click the Submit button. LDAP Advanced Settings Under the LDAP Advanced tab, you can set the search filter and the LDAP login attribute. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 282 LDAP search filter. Example: objectclass=user. Login Attribute—This is the LDAP login attribute. Example: sAMAccountName. base— Enter the search base to be used for nss_base and nss_shadow. Example: ou=People,dc=example,dc=com Scope:Enter the scope of the NSS search. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 283: Radius Authentication

    To enable or disable the use of RADIUS authentication on a SecureSync unit: 1. In the Web UI, navigate to MANAGEMENT > OTHER: Authentication. 2. In the Actions panel on the left, click RADIUS. The RADIUS Setup window will be displayed: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 284: Adding/Removing A Radius Server

    To add a RADIUS authentication server, or remove a server from the list: 1. Navigate to MANAGEMENT > OTHER: Authentication. 2. In the Actions panel on the left, click RADIUS Setup. The RADIUS Setup window will be displayed: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 285 DISABLED: RADIUS service is disabled. UNREACHABLE: This RADIUS server cannot be reached. REACHABLE: This RADIUS server can be reached. 5. To remove a RADIUS server from the list, click the X-button in the Actions column. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 286 4.3  Managing Users and Security Note: SecureSync supports multiple RADIUS servers. The system per- formance, however, will be negatively affected by a large number of serv- ers or invalid servers, respectively. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 287: Tacacs+ Authentication

    To enable or disable the use of TACACS+ authentication on a SecureSync unit: 1. In the Web UI, navigate to MANAGEMENT > OTHER: Authentication. 2. In the Actions panel on the left, click TACACS+. The TACACS+ Setup window will be displayed. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 288: Adding/Removing A Tacacs+ Server

    The server status can be: DISABLED: The TACACS+ service is disabled. UNREACHABLE: This TACACS+ server cannot be reached. REACHABLE: This TACACS+ server can be reached. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 289: Https Security Levels

    MANAGEMENT > Network Setup. 2. In the Actions Panel on the left, click on Web Interface Settings. The Web Inter- face Settings window will open. 3. Click on the tab Security Level: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 290: Miscellanous Typical Configuration Tasks

    4.4.2 Configuring the Front Panel The front panel of the SecureSync 2400 Time and Frequency Synchronization System can be configured to display your local time and can be locked to prevent unwanted CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 291: To Change The Time Display On The Front Panel

    Creating a Login Banner A login banner is a customizable banner message displayed on the login page of the SecureSync Web UI. The login banner can be used, for example, to identify a unit. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 292 Enabling and using the Web Interface Banner text box will allow you to apply HTML formatting tags to your message (e.g., col- ors). Note that this functionality is limited to browser-based Web UI CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 293: Show Clock

    Instead of the Web UI, a large digital clock can be displayed on your computer screen. Next to the system status, the screen clock will display the UTC time, and the SecureSync time. To display the screen clock instead of the Web UI: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 294: Product Registration

    2. To return to the standard Web UI, click Home. 4.4.5 Product Registration Orolia recommends that you register your SecureSync so as to allow our Customer Service and Technical Support to notify you of important software updates, or send you service bul- letins, if required.
  • Page 295: Quality Management

    Menu provides monitoring of the references and the order of their priority under the MONITORING submenu. The TIMING Menu provides a discription of the current oscillator state in the MONITORING submenu. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 296: Status Monitoring Via The Web Ui

    Status Monitoring via the HOME Screen HOME screen of the SecureSync Web UI provides a system status overview (see also "The Web UI HOME Screen" on page 30). HOME screen is divided into four panels: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 297 Status: If a major or minor alarm is present, it will be displayed here. NTP—Current STRATUM status of this SecureSync unit. Temperature—The current board temperature will be displayed here. Reference Status panel CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 298 To display status information pertaining mainly to SecureSync's current hardware status, navigate to TOOLS > SYSTEM > System Monitor. The information provided on the System Monitor Screen is subdivided into three panels: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 299: Status Monitoring Of Input References

    GNSS Reference). To display one particular reference, click on its entry (indented e.g., GNSS The Reference window will show the validity status for the chosen reference(s): CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 300: Reference Monitoring: Phase

    This is called Reference Mon- itoring. Reference Monitoring helps to understand and predict system behavior, and is an inter- ference mitigation tool. It can also be used to manually re-organize reference priorities e.g., CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 301 Use the checkboxes in the References panel on the right to remove references from the graph, or add them to it. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 302: Ethernet Monitoring

    Additional outputs can be added by means of output option cards. Outputs can be monitored in real time via the INTERFACES drop-down menu. The menu will populate dynamically, depending on which outputs are installed. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 303 To refresh the information displayed, click the REFRESH button (circling arrows icon on the right side of the screen). On the rear panel illustration, click on an output connector to highlight its list entry. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 304 In the illustration of the rear panel, click on a connector to highlight the cor- responding list entry. Displaying the settings of a specific output The outputs installed in your SecureSync unit have specific settings that can be reviewed, and—to some extent—edited. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 305: Monitoring The Oscillator

    See also "Configuring Outputs" on page 148. 4.5.1.7 Monitoring the Oscillator The Oscillator Management screen provides current and history status information on dis- ciplining state and accuracy. To access the Oscillator Management screen: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 306 Error: An internal estimated calculation (in Hertz) of the internal oscillator's frequency error, based on the phase accuracy error at the beginning and end of a frequency measurement window (the length of this window will vary CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 307 Change: [Timestamp: Last occurrence] Last Sync State Change: [Timestamp: Last occurrence] Last Holdover State Change: [Timestamp: Last occurrence] The Oscillator History Panel Oscillator History Panel offers real- time graphical monitoring of SecureSync’s CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 308: Monitoring The Status Of Option Cards

    The menu will populate dynamically, depending on which option cards are installed. Monitoring ALL Option Cards To monitor all option cards, or a specific option card installed in your SecureSync: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 309 To monitor the status of a selected option card: 1. Navigate to INTERFACES > OPTION CARDS, and click on a specific option card, or one of its indented input references, or outputs drop-down menu. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 310: Ntp Status Monitoring

    NTP Status Summary panel, navigate to MANAGEMENT > NETWORK: NTP Setup. 2. The NTP Status Summary panel is at the lower left of the screen. The panel con- tains the following information: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 311 NTP Jitter Performance Graph" on page 298. Note: This panel is updated every 30 seconds, or upon clicking the browser refresh button. The NTP Time Offset Performance Graph To view the NTP Time Offset performance graph: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 312 Select Day for Statistics field. The default date is the present date. Click Apply. 6. To display a higher resolution graph for a shorter time span, move one or both time CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 313 (the data may be displayed with a delay). The X-axis represents time, the Y-axis shows the frequency offset in parts- per-million (PPM); e.g. 290 PPM is equivalent to .0290 percent. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 314 1. Navigate to MANAGEMENT > NETWORK: NTP Setup screen. 2. In the NTP Status Summary panel locate the Jitter graph. 3. Click the graph in the NTP Status Summary panel. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 315: Temperature Management

    Temperature readings are performed once per minute. The temperature data is logged, and can be visualized via graphs integrated into the Web UI. The temperature readings can also be used to control the fan. For details see below under Fan Control Feature. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 316 TOOLS > System Mon- itor. CPU and Board Temperature graphs are displayed under TOOLS > System Monitor: The graph for the Oscillator Temperature is displayed under MANAGEMENT > OTHER: Disciplining: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 317 Setting Temperature Monitoring Alarms Navigate to MANAGEMENT > OTHER: Notifications. In the Events panel, select the Sys- tab: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 318 Major Alarm. If you want to be notified early about a rise in tem- perature, a recommended setting for the Minor Alarm temperature would be 90°C. Please CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 319: Logs

    Logs SecureSync maintains different types of event logs (see below) to allow for traceability, and for record keeping. Should you ever require technical support from Orolia, you may be asked for a copy of your logs to facilitate remote diagnosis.
  • Page 320: Types Of Logs

    GNSS is the highest priority reference with IRIG input being a lower priority. SecureSync is synced to GNSS and so GNSS is the selected reference. The GNSS antenna is disconnected and CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 321 Frequency Error alarm was asserted but was then cleared. Holdover: Input references were available, but all input references have since been lost. If the references are not restored before the Holdover period expires, time sync will be lost. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 322 NTP is synchronized using the PPS ref- erence clock driver (which provides more stable NTP synchronization). Oscillator Log Displays log entries related to oscillator disciplining. Provides the calculated frequency error periodically while synchronizing to a reference. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 323 E x a m p l e G P S Q u a l i f i c a t i o n L o g E n t r y : 6 = 151 7 = 1894 8 = 480 9 = 534 10 = 433 12 = 108 Q = 3600 CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 324: The Logs Screen

    The Logs Screen Logs Screen provides access to settings that apply to all logs. To access the Logs Screen: 1. Navigate to MANAGEMENT > OTHER: Log Configuration. GR = GNSS Reference CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 325 To turn off local logging, simply switch the toggle to OFF in the Local Logging Panel. See "Types of Logs" on page 304 for information on each log type. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 326: Displaying Individual Logs

    2. On the left side of the screen, in the Actions panel, click on the Save and Down- load All Logs button. 3. Select the log bundle save locaion. The file name is logs.tar.gz CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 327: Setting Up A Remote Log Server

    Microsoft Excel . You may want to review and/or keep this data for your own records, or you may be asked by Orolia Technical Sup- port to download and send the oscillator status log in the event of technical problems.
  • Page 328 Remote Log Server panel locate the remote server you wish to change or delete. 3. Choose the button to delete the remote log server. Confirm by clicking OK in the message window. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 329: Clearing All Logs

    To carry out a software update: The terms update and upgrade are both used throughout Orolia technical literature, as software releases may include fixes and enhancements, as well as new features.
  • Page 330 File(s). Note that Delete Upgrade File Update System cannot be selected at the same time. 4. Download the latest upgrade software bundle from the Orolia website onto your PC. 5. Perform the actual upgrade by navigating to TOOLS > Upgrade/Backup >...
  • Page 331: Applying A License File

    If, however, a feature is to be activated after delivery of the SecureSync unit, please contact your local Orolia Sales Office first to have a license file gen- erated. License files are archive files with a tar.gz extension. One license file may con- tain multiple licenses for multiple products.
  • Page 332: Backing-Up And Restoring Configuration Files

    SSH/SSL certificates, cannot be backed up to a PC. 4.7.1 Accessing the System Configuration Screen The System Configuration Screen provides comprehensive information about hardware and software status. To access the System Configuration screen: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 333 Processor—The timing processor in use with this unit. GNSS Receiver—The GNSS receiver in use with this unit. HW Slots 1–6—The Option Cards installed in this unit. Option—The optional features also included on this unit. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 334: Saving The System Configuration Files

    4.7.2 Saving the System Configuration Files To save (back up) the system configuration files: 1. Navigate to TOOLS > SYSTEM: Upgrade/Backup. 2. In the Actions panel, click the Save Configuration button. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 335: Uploading Configuration Files

    2. In the Actions panel, click the Upload Configuration button. 3. Click Choose File in the window that displays, and navigate to the directory on your PC where the bundled file is stored. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 336: Restoring The System Configuration

    Restoring the Factory Defaults For instructions on how to restore the SecureSync's configuration files to their factory default settings see "Resetting All Configurations to their Factory Defaults" on the facing page. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 337: Resetting The Unit To Factory Configuration

    Resetting All Configurations to their Factory Defaults To restore the configuration files to their factory defaults: 1. Navigate to TOOLS > SYSTEM: Upgrade/Backup. 2. In the Actions panel, click the Restore Factory Defaults (Clear) button. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 338: Default And Recommended Configurations

    The factory default configuration settings were chosen for ease of initial setup. However, some of the default settings may deviate from best practices recommendations. The fol- lowing table outlines the differences between factory default and recommended con- figuration settings for your consideration: CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 339 File Transfer Available Disabled (use SFTP or SCP) Web UI SFTP Available Disabled (use SFTP or SCP) Web UI * Orolia recommends that secure clients use only SNMPv3 with authentication for secure installations. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 340 4.7  Backing-up and Restoring Configuration Files BLANK PAGE. CHAPTER 4 • SecureSync 2400 User Manual Rev. 2...
  • Page 341: Appendix

    5.2 Option Cards 5.3 Command-Line Interface 5.4 Time Code Data Formats 5.5 IRIG Standards and Specifications 5.6 Technical Support 5.7 Return Shipments 5.8 List of Tables 5.9 List of Images 5.10 Document Revision History SecureSync 2400 User Manual • APPENDIX...
  • Page 342: Troubleshooting

    5.1.2 Troubleshooting: System Configuration One of the first tasks when troubleshooting a unit is to read out the current system con- figuration (you may also be asked for this when contacting Orolia Technical Support.) SecureSync 2400 User Manual...
  • Page 343: System Troubleshooting: Browser Support

    Recent log entries. 5.1.2.1 System Troubleshooting: Browser Support Orolia recommends using one of the following Web browsers to run the SecureSyncWeb UI on: Google Chrome, Mozilla Firefox, Internet Explorer > Ver. 8. Using different or older browsers may lead to some incompatibility issues.
  • Page 344 Priorities" on page 184 2. Verify that the Reference Status on the HOME page shows “OK” (Green) for all available references. 3. Verify NTP is enabled and con- "NTP Refer- figured correctly. See ence Configuration" on page 102 SecureSync 2400 User Manual...
  • Page 345: Troubleshooting Gnss Reception

    SecureSync will go into the Holdover mode. If GNSS reception is not restored before the Holdover period expires (and no other input references become available) SecureSync will go out of sync. The GNSS reception issue needs to be troubleshot in order to regain time sync. SecureSync 2400 User Manual...
  • Page 346: Troubleshooting - Outputs

    Any other con- "Output figured value will cause the Enabled in Hol- applicable output to be halted if dover", SecureSync is not fully synchronized "Output Dis- with its input references. abled in Hol- dover" or "Output Always Disabled". SecureSync 2400 User Manual...
  • Page 347: Troubleshooting The Serial Port

    In this case, it is recommended to let the unit “warm up” for approximately 30 minutes, in order to allow the unit to get to the appropriate temperature. See also: "Temperature Management" on page 299 SecureSync 2400 User Manual...
  • Page 348: Troubleshooting - Network Pcs Cannot Sync

    In the event of an aborted update process, under Tools > Upgrade/Backup > Disk Status, check Percent Used: If the number is greater than 70%, free up disk space, before starting another attempt to update the System Software. SecureSync 2400 User Manual...
  • Page 349: Option Cards

    The topics below describe Web UI functionality that is common to all Option Cards. 5.2.1.1 Web UI Navigation: Option Cards Figure 5-1: Option card navigation To view or edit option card settings in the SecureSync Web UI (see also image above): SecureSync 2400 User Manual...
  • Page 350: Viewing Input/Output Configuration Settings

    Additional inputs or outputs will be numbered 1 or above. 2. Navigate to INTERFACES > OPTION CARDS, and click the list entry of the option card identified above. The option card’s Status Summary panel opens: SecureSync 2400 User Manual...
  • Page 351 Edit button in the bottom-left corner. The Edit window will open: 5. Information about the configurable settings can be found in the corresponding option card section, see "Option cards listed by their ID number" on page 19. SecureSync 2400 User Manual...
  • Page 352: Configuring Option Card Inputs/Outputs

    The option card’s Status Summary panel opens: 3. Click on the GEAR button next to the input or output you wish to configure (as veri- fied in Step 1 of this procedure). The Edit window of the input or output opens: SecureSync 2400 User Manual...
  • Page 353: Viewing An Input/Output Signal State

    In accordance with the Signature Control setting, and the Lock Status, the current signal state for an output is indicated as: ENABLED (green); or DISABLED (orange) The current state of an input signal is indicated as: SecureSync 2400 User Manual...
  • Page 354: Verifying The Validity Of An Input Signal

    1PPS Validity Time Validity fields will be “Not Valid” (orange). If an INPUT is present, and the signal is considered valid, and qualified, the two indicators will then turn “Valid” (Green). SecureSync 2400 User Manual...
  • Page 355: Option Card Field Installation Instructions

    SecureSync configuration (refer to "[2]: Saving Refererence Priority Con- figuration" on page 341, if applicable to your scenario or environment.) 2. Safely power down the SecureSync unit and remove the top cover of the main chassis (housing). SecureSync 2400 User Manual...
  • Page 356: Safety

    The following additional items are included with the ancillary kit for the field installation of option card(s). Some of the parts listed below will be required for the installation (depend- ing upon option card model, and installation location). SecureSync 2400 User Manual...
  • Page 357: 2]: Saving Refererence Priority Configuration

    "Saving the System Configuration Files" on page 318. Saving the System Configuration Files To save (back up) the system configuration files: 1. Navigate to TOOLS > SYSTEM: Upgrade/Backup. 2. In the Actions panel, click the Save Configuration button. SecureSync 2400 User Manual...
  • Page 358: 3]: Determining The Installation Procedure

    Inspect the back of the SecureSync housing, and select an empty slot for the new card. If the card is to be installed in one of the upper slots (4, or 6), take note if the SecureSync 2400 User Manual...
  • Page 359 Step 4 is for installation in slots 1 or 2 ("[4]: Slot 1 & 2 Installation" on the next page) Step 5 should be followed for bottom card installation in slots 3 and 5 SecureSync 2400 User Manual...
  • Page 360: 4]: Slot 1 & 2 Installation

    NEVER install an option card from the rear of the unit, ALWAYS from the top, after removing the chassis cover. c. Unscrew and remove the blank option card plate from the back of the unit (or the existing option card). Save the screws. SecureSync 2400 User Manual...
  • Page 361 Take the supplied 50-pin ribbon cable and carefully press it into the connector on the mainboard (lining up the red sided end of the cable with PIN 1 on the main- board), then into the connector on the option card (see Figure below). SecureSync 2400 User Manual...
  • Page 362: 5]: Bottom Slot Installation

    Insert the card into the bottom slot by carefully pressing its connector into the main- board connector (see Figure below), and by lining up the screw holes on the card with the screw holes on the chassis. SecureSync 2400 User Manual...
  • Page 363: 6]: Top Slot Installation, Bottom Slot Empty

    Instructions for installing an option card into an upper slot (4, or 6) of the SecureSync unit, with no card populating the bottom slot: a. Safely power down your SecureSync unit and remove the top cover of the main chassis (housing). Save the screws. SecureSync 2400 User Manual...
  • Page 364 Place one of the supplied washers over each of the two chassis screw holes (see Figure below), then screw the 18 mm standoffs (= the longer standoffs) into the chassis (see Figure below), applying a torque of 0.9 Nm/8.9 in-lbs. SecureSync 2400 User Manual...
  • Page 365: 5.2.2.10 [7]: Top Slot Installation, Bottom Slot Occupied

    Instructions for installing an option card into an upper slot (4, or 6), above a populated bot- tom slot: a. Safely power down the SecureSync unit, and remove the top cover of the main chassis (housing). Save the screws. SecureSync 2400 User Manual...
  • Page 366 Insert option card into the slot above the existing card, lining up the screw holes with the standoffs. g. Using the supplied M3 screws, screw the board into the standoffs, and the option plate into the chassis, applying a torque of 0.9 Nm/8.9 in-lbs. SecureSync 2400 User Manual...
  • Page 367: 8]: Frequency Output Cards: Wiring

    10 MHz (PN 1204-1C) For the cable installation, follow the steps detailed below: a. Install the coax cable(s) onto the main PCB, connecting them to the first available open connectors, from J4 to J7. See figure below: SecureSync 2400 User Manual...
  • Page 368: 5.2.2.12 [9]: Verifying Hw Detection And Sw Update

    Re-install the top cover of the unit chassis (housing), using the saved screws. Caution: Ensure that screw holes on the card are properly lined up and secured to the chassis before powering the unit up, otherwise damage to the equipment may result. SecureSync 2400 User Manual...
  • Page 369: 5.2.2.13 [10]: Restoring Reference Priority Configuration

    "Option Card Identification" on page 18 to locate your card. 5.2.3 Time and Frequency Option Cards This section contains technical information and Web UI procedures relevant to SecureSync option cards designed to deliver time and frequency signals. SecureSync 2400 User Manual...
  • Page 370: 1Pps Out [1204-18, -19, -21, -2B]

    Model 1204-19 1PPS Output (10 V): Specifications Outputs: (4) 1PPS output Signal Type and Connector: 10 V (BNC) Output Load Impedance: 50 Ω Rise Time to 90% of Level: <30 ns Programmable Pulse Width: 100 ns to 900 ms with 20 ns resolution Absolute Phase Error: ±50 ns (1σ) SecureSync 2400 User Manual...
  • Page 371 100 ns to 900 ms with 20 ns resolution Absolute Phase Error: ±50 ns (1σ) Programmable Phase Shift: ±5ns to 500 ms with 5ns resolution Maximum Number of Cards:6 Ordering Information: 1204-21 1PPS RS-485 output module, terminal block Figure 5-13: Model 1204-21 option card rear plate SecureSync 2400 User Manual...
  • Page 372 Programmable Pulse Width: 100 ns to 900 ms with 20 ns resolution Absolute Phase Error: ±50 ns (1σ) Programmable Phase Shift: ±5ns to 500 ms with 5ns resolution Maximum Number of Cards: Ordering Information: 1204-12B 1PPS Fiber Optic output module, ST connector SecureSync 2400 User Manual...
  • Page 373 1PPS Output: Status Window To view the current settings of a 1PPS Output, go to its Status window. For instructions, see: "Viewing Input/Output Configuration Settings" on page 334. The Web UI list entries for these option cards are: SecureSync 2400 User Manual...
  • Page 374: 1Pps In/Out [1204-28]

    BNC or ST connectors for the SecureSync platform. Model 1204-28 1PPS Input/Output: Specifications Inputs/Outputs: (1) 1PPS input/(3) 1PPS output Signal Type and Connector: TTL (BNC) Input Impedance: 50 Ω Output Load Impedance: 50 Ω Rise Time to 90% of Level: <10 ns SecureSync 2400 User Manual...
  • Page 375 1PPS In/Out, Fiber The connector numbers are: J2, J3, J4 (model -28) J2, J3 (model -2A) Note: SecureSync starts numbering I/O ports with 0 (only 1PPS and 10 MHz outputs start at 1, because of the built-in outputs). SecureSync 2400 User Manual...
  • Page 376 Status window. For instructions, see: "Viewing Input/Output Configuration Settings" on page 334. The Web UI list entries for these cards are: 1PPS In/Out 1PPS In/Out, Fiber The connector numbers are: J2, J3, J4 (model -28) J2, J3 (model -2A) SecureSync 2400 User Manual...
  • Page 377 "Configuring Option Card Inputs/Outputs" on page 336. The Web UI list entries for these cards are: 1PPS In/Out 1PPS In/Out, Fiber The connector number for the input is: J1 The Edit window allows the configuration of the following settings: SecureSync 2400 User Manual...
  • Page 378 Edge: Displays the selected Edge (rising of falling) of the 1PPS input that defines the on-time point. Offset: Displays the configured 1PPS offset values. The 1PPS Input signal is analyzed and an absence of the signal triggers a “Not Valid” indic- ation. SecureSync 2400 User Manual...
  • Page 379: 1Pps In/Out, 10 Mhz In [1204-01, -03]

    Inputs/Outputs: (1) 1PPS Input, (1) Freq Input (1) 1PPS Output. All input and output signals are RS-485 compatible. Signal Type And Connector: Balanced RS-485 (3.8 mm terminal block) Maximum Number of Cards: 6 Ordering Information: 1204-03: 1PPS/Freq input (RS-485 levels) module Figure 5-17: Model 1204-03 option card rear plate SecureSync 2400 User Manual...
  • Page 380 Jitter: <±500 ns t o achieve oscillator lock, <±50 ns to achieve system performance Programmable Phase Shift: ±5ns to 500 ms with 5ns resolution 1PPS Output Specifications Signal Type And Connector: TTL level (BNC) Output Load Impedance: 50 Ω Rise Time to 90% of Level: <10 ns SecureSync 2400 User Manual...
  • Page 381 "Verifying the Validity of an Input Signal" on page 338. The Web UI list entries for these cards are: 1PPS/Frequency BNC and 1PPS/Frequency RS-485. The connector number is: J2 (Model 1204-03: RS-485 connector: Pins 5 and 6) SecureSync 2400 User Manual...
  • Page 382 "Configuring Option Card Inputs/Outputs" on page 336. The Web UI list entries for these cards are: 1PPS/Frequency BNC and 1PPS/Frequency RS-485. The connector number is: J1 (BNC card); J1 (RS-485 card). The Edit window allows the configuration of the following settings: SecureSync 2400 User Manual...
  • Page 383 The connector number is: J1 (BNC card); J1 (RS-485 card). The Status window displays the following settings: Reference ID: Name used to represent this 1PPS input reference in the Reference Priority table; see "Configuring Input Reference Priorities" on page 184 for more information on reference priorities. SecureSync 2400 User Manual...
  • Page 384 The Offset value is entered and displayed in nanoseconds (ns). The available Offset range is -500 to +500 ms. Edge: The operator can select if the output signal is a positive (reference on the rising edge) or a negative (reference on the falling edge) pulse. SecureSync 2400 User Manual...
  • Page 385 Edge: Shows if the on-time point of the 1PPS output is the rising or falling edge of the pulse. Pulse Width: Displays the configured Pulse Width of the 1PPS output. The Pulse Width is displayed in nanoseconds (ns). The default Pulse Width is 200 milliseconds. SecureSync 2400 User Manual...
  • Page 386: Frequency Out [1204-08, -1C, -26]

    10 MHz Phase Noise (with OCXO oscillator) [Numbers in brackets represent Low Phase Noise OCXO option]: -95 [-100] dBc/Hz @ 1Hz -123 [-128] dBc/Hz @ 10 Hz -140 [-148] dBc/Hz @ 100 Hz -145 [-153] dBc/Hz @ 1kHz -150 [-155] dBc/Hz @ 10 kHz Harmonics: -40 dBc minimum SecureSync 2400 User Manual...
  • Page 387 Maximum Number of Cards: Ordering Information: 1204-1C: 10 MHz output (3X) Module 1204-08: 5MHz output (3X) Module 1204-26: 1MHz output (3X) Module Figure 5-18: Model 1204-1C option card rear plate Figure 5-19: Model 1204-08 option card rear plate SecureSync 2400 User Manual...
  • Page 388 Status window. For instructions, see: "Viewing Input/Output Configuration Settings" on page 334. The Web UI list entry for this card is named: 1/5/10 MHz BNC (or: TNC). The connector numbers are: J1…J3. The Status window displays the following settings: SecureSync 2400 User Manual...
  • Page 389: Programmable Frequency Out [1204-13, -2F, -30]

    Connector: BNC Output Load Impedance: 50 Ω Output Pulse/Frequency Rates: 1Hz to 25 MHz in 0.1-Hz increments Accuracy: Function of input synchronization source (GPS, IRIG, 1 PPS, etc.) Synchronization: Output frequency locked to SecureSync disciplined 10 MHz Jitter, cycle-to-cycle: n/a SecureSync 2400 User Manual...
  • Page 390 Rates: 1PPS to 25 MPPS in 0.1-PPS increments Accuracy: Function of input synchronization source (GPS, IRIG, 1 PPS, etc.) Synchronization: Output frequency locked to SecureSync disciplined 10 MHz Jitter, cycle-to-cycle: <10 ns Phase Noise: n/a Harmonics: n/a Spurious: n/a SecureSync 2400 User Manual...
  • Page 391 Accuracy: Function of input synchronization source (GPS, IRIG, 1 PPS, etc.) Synchronization: Output frequency locked to SecureSync disciplined 10 MHz Jitter, cycle-to-cycle: <10 ns Phase Noise: n/a Harmonics: n/a Spurious: n/a Maximum Number of Cards: 6 Ordering Information: 1204—30, Programmable Frequency Card, TTL, RS-485 SecureSync 2400 User Manual...
  • Page 392 The Web UI list entry for this card is: Prog Freq Out, Sine [or: TTL, or: RS-485, respect- ively]. The connector numbers are: J1…J4 [J1 for the RS-485 model]. The Edit window allows the configuration of the following settings: SecureSync 2400 User Manual...
  • Page 393 The connector numbers are: J1…J4 [J1 for the RS-485 model]. The Status window displays the following settings: Signature Control: Controls when the output will be present. See also: "Signature Control" on page 161. Frequency: Indicates the configured frequency. SecureSync 2400 User Manual...
  • Page 394: Programmable Square Wave Out [1204-17]

    Period: 100 ns to 2,000,000,000 ns in 5ns steps, or to 1,800,000,000 µs in 1µs steps Programmable Pulse Width: 20 ns to 900 ms with 5 ns resolution Maximum Number of Cards: 6 Ordering Information: 1204-17: Square Wave Out Figure 5-24: Model 1204-17 option card rear plate SecureSync 2400 User Manual...
  • Page 395 Click on the INFO button next to one of the outputs to open a detailed Status panel (the displayed settings are described below.) 2. Click on the GEAR button to open the Edit window. SecureSync 2400 User Manual...
  • Page 396 Re-Initialize: Re-initializes square wave generation and aligns to 1PPS. Signature Control: Controls when the output will be present.  See also: "Sig- nature Control" on page 161. Edge: Used to determine if the on-time point of the output is the Rising Falling edge of the signal. SecureSync 2400 User Manual...
  • Page 397: Simulcast (Ctcss/Data Clock)

    SecureSync platform through one DB-9 and one RJ-12 connector. The maximum number of cards installed is six (6). a. Connector: DB-9 Outputs: (3) RS-485 Outputs (Data Clocks, CTCSS frequencies, 1PPS) (1) Alarm SecureSync 2400 User Manual...
  • Page 398 SecureSync. In the Web UI, numbering for alarm outputs for this option card will begin at Alarm 4, which is available on the DB-9 output, while Alarms 5 and 6 are assigned to the RJ-12 connector. SecureSync 2400 User Manual...
  • Page 399 SecureSync. In the Web UI, numbering for alarm outputs for this option card will begin at Alarm 4, which is available on the DB-9 output, while Alarms 5 and 6 are assigned to the RJ-12 connector. SecureSync 2400 User Manual...
  • Page 400 "Viewing an Input/Output Signal State" on page 337. All outputs are listed, displaying their current output states. For a listing of the states, see "CTCSS Outputs: Edit Window" on the facing page, and "Alarm Outputs: Edit Window" page 386. SecureSync 2400 User Manual...
  • Page 401 Edit window. For instructions, see: "Configuring Option Card Inputs/Outputs" on page 336. The Web UI list entry for this card is named: Simulcast. The Edit window allows the configuration of the following settings: SecureSync 2400 User Manual...
  • Page 402 Alarm Outputs: Edit Window To configure one of the ALARM Outputs, go to its Edit window. For instructions, see: "Configuring Option Card Inputs/Outputs" on page 336. The Web UI list entry for this card is named: Simulcast. SecureSync 2400 User Manual...
  • Page 403 "Minor and Major Alarms" on page 326. The Edit window allows the configuration of the following settings: Alarm Type: None—Will not output for an alarm Minor—Will output on a minor alarm Major—Will output on a major alarm. SecureSync 2400 User Manual...
  • Page 404 186.333 69.333 115.000 193.000 72.000 119.000 203.666 74.333 123.000 206.666 77.000 127.333 210.666 79.666 132.000 218.333 82.666 136.666 225.666 85.333 141.333 229.000 88.666 146.333 233.666 91.666 151.333 242.000 95.000 156.666 250.333 97.333 162.333 254.000 100.000 168.000 SecureSync 2400 User Manual...
  • Page 405 9.6 kHz, 18.0 kHz, 64.0 kHz 50% ±2% 17 2/3 Hz 888 µs pulse width 26 2/3 Hz 25% low, 75% high 33 1/3 Hz 208 µs pulse width Table 5-11: 1PPS Duty Cycle Output Duty Cycle 1PPS 20% ±5% SecureSync 2400 User Manual...
  • Page 406: Telecom Option Cards

    Supports Super Frame (SF or D4) and Extended Super Frame (ESF) SSM support mode: 2.048 MHz (square wave) frequency output (2) 2.048 Mb/sec data rate outputs: Outputs are E1 frame all ones Supports CRC4 and CAS Multiframe SSM support SecureSync 2400 User Manual...
  • Page 407 Supports Super Frame (SF or D4) and Extended Super Frame (ESF) SSM support mode: 2.048 MHz (square wave) frequency output (2) 2.048 Mb/sec data rate outputs: Outputs are E1 frame all ones Supports CRC4 and CAS Multiframe SSM support SecureSync 2400 User Manual...
  • Page 408 Ground T1/E1 output A1 GR-499/G.703 T1/E1 output B1 GR-499/G.703 Ring Ground Ground T1/E1 output A2 GR-499/G.703 T1/E1 output B2 GR-499/G.703 Ring Ground Ground Model 1204-53 E1/T1 (75 Ω): Specifications Outputs: (4) Unbalanced E1 or T1 Outputs SecureSync 2400 User Manual...
  • Page 409 Cards: 6 Ordering Information: 1204-53: T1/E1 (75 Ω) module Figure 5-31: Model 1204-53 option card rear plate Model 1204-4C E1/T1 (100/120 Ω): Specifications Outputs: (4) Balanced E1 or T1 Outputs mode: (4) 1.544 Mb/sec data rate outputs: SecureSync 2400 User Manual...
  • Page 410 E1/T1 outputs on J2 to J3 BNC connectors, or all terminal block J1 outputs), navigate to its Edit window. For instructions, see: "Configuring Option Card Input- s/Outputs" on page 336. In the Web UI this card is listed under: E1/T1 Out BNC E1/T1 OUT Terminal. SecureSync 2400 User Manual...
  • Page 411 To view the configuration settings of the E1 OUT or T1 OUT output, go to its Status win- dow. For instructions, see: "Viewing Input/Output Configuration Settings" on page 334. The Web UI list entries for these cards are: E1/T1 Out BNC E1/T1 OUT Terminal. SecureSync 2400 User Manual...
  • Page 412 Encoding: This option selects the encoding method (B8ZS or AMI). T1 SSM Value: This option selects the SSM quality level transmitted when SSM is enabled. E1 SSM Value: This option selects the SSM quality level transmitted when SSM is enabled. SecureSync 2400 User Manual...
  • Page 413: Time Code Option Cards

    Cards: Up to 6 Ordering Information: 1204-15, IRIG module, BNC Connector Figure 5-33: Model 1204-15 option card rear plate IRIG Out (Fiber Optic): Specifications Inputs/Outputs: (4) IRIG Outputs Signal: IRIG A, B, E, G or NASA-36 SecureSync 2400 User Manual...
  • Page 414 Connector: RS-485 levels (terminal block) Output Load Impedance: 120 Ω Accuracy: see "IRIG Output Accuracy Specifications" on page 562 Maximum Number of Cards: 6 Ordering Information: 1204-22 Four IRIG Output Module, RS-485 Figure 5-35: Model 1204-22 option card rear plate SecureSync 2400 User Manual...
  • Page 415 To configure an IRIG Output, go to its Edit window. For instructions, see: "Configuring Option Card Inputs/Outputs" on page 336. The Web UI list entries for these option cards are: IRIG Out BNC, IRIG Out Fiber, IRIG RS-485. SecureSync 2400 User Manual...
  • Page 416 IRIG AM: Amplitude-modulated output. The amplitude of the output is determined by the value entered in the Amplitude field. Frequency: The IRIG modulation frequency. This is determined by the configuration of Format and Modulation Type. See "IRIG Carrier Frequencies" on page 546 details. SecureSync 2400 User Manual...
  • Page 417 Timescale: Used to select the time base for the incoming time code data. The entered Timescale is used by the system to convert the time in the incoming data stream to UTC time for use by the System Time. The available choices are: SecureSync 2400 User Manual...
  • Page 418 To view the specifications of an IRIG Output, go to its Status window. For instructions, see: "Viewing Input/Output Configuration Settings" on page 334. The Web UI list entries for these option cards are: IRIG Out BNC, IRIG Out Fiber, IRIG RS-485. SecureSync 2400 User Manual...
  • Page 419: Irig In/Out [1204-05, -27]

    (AM) OR pulse-width-coded (DCLS); user-select- able, with automatic switching of load on input Carrier: IRIG B 1000 Hz, IRIG A 10 kHz and G 100 kHz AM Signal Level: 500 mV to 10 V (modulated 2:1 to 6:1); 50 Ω load SecureSync 2400 User Manual...
  • Page 420: Optical Connector: St

    IRIG In/Out, Fiber Opt. [1204-27]: Input Specifications Signal: IRIG A, B, G or NASA-36, (DCLS only, unmodulated) Operating Wavelength: 820/850 nm Optical Minimum Sensitivity: -25 dBm @ 820 nm Fiber Optic Compatibility: 50/125 μm, 62.5/125 μm multi-mode cable Optical Connector: ST SecureSync 2400 User Manual...
  • Page 421 The IRIG inputs support the following coded expression combinations for BCD , CF, SBS, and BCD fields: YEAR 0 – BCD , CF, SBS 1 – BCD , CF 2 – BCD 3 – BCD , SBS SecureSync 2400 User Manual...
  • Page 422 A136 IRIG A, AM, 10kHz, BCD , BCD YEAR A137 IRIG A, AM, 10kHz, BCD , BCD , SBS YEAR B-DCLS B000 IRIG B, DCLS, BCD , CF, SBS B001 IRIG B, DCLS, BCD , CF SecureSync 2400 User Manual...
  • Page 423 IRIG E, DCLS, BCD , BCD YEAR E007 IRIG E, DCLS, BCD , BCD , SBS YEAR E-AM (output only) E110 IRIG E, AM, 100 Hz, BCD , CF, SBS E111 IRIG E, AM, 100 Hz, BCD , CF SecureSync 2400 User Manual...
  • Page 424 IRIG G, AM, 100kHz, BCD G145 IRIG G, AM, 100kHz, BCD , BCD , CF YEAR G146  IRIG G, AM, 100kHz, BCD , BCD YEAR NASA-36 NASA-36 NASA-36, AM, 1 msec NASA-36 NASA-36, DCLS, 10 msec SecureSync 2400 User Manual...
  • Page 425 The Edit window allows the configuration of the following settings: Format: Sets the formatting of the IRIG input signal, as defined by the IRIG gen- erator time source. The available choices are: IRIG A IRIG B SecureSync 2400 User Manual...
  • Page 426 NASA Formats: Variants of IRIG B Fields confirm to Spectracom IEEE C37.118-2005: Has been extended to support one-month leap second notification The available options will vary according to the configurations of Format and Mod- ulation Type. SecureSync 2400 User Manual...
  • Page 427 SecureSync when using IRIG input as the only input Time reference. Note: By default, the “year” fields in the IRIG message are ignored and a user-defined value is used. SecureSync 2400 User Manual...
  • Page 428 (also referred to as ‘Reference’), go to its Status window. For instructions, see: "Viewing Input/Output Configuration Settings" on page 334. The Web UI list entries for these cards are: IRIG In/Out BNC IRIG In/Out Fiber. The connector number is: J1. SecureSync 2400 User Manual...
  • Page 429 IRIG DCLS—A TTL (Phase) modulated signal. IRIG AM—An amplitude modulated signal. Frequency—The IRIG modulation frequency. This is determined by the con- figuration of Format and Modulation Type. See also: "IRIG Carrier Fre- quencies" on page 546. SecureSync 2400 User Manual...
  • Page 430 Control: Is used to control when the IRIG modulation will be present. This function allows the modulation to stop under certain conditions; see also "Sig- nature Control" on page 161. Format: Used to configure the desired IRIG output formatting. The available choices are: IRIG A IRIG B SecureSync 2400 User Manual...
  • Page 431 RCC-2004 output (year is offset by one position). Fields conform to Spectracom FAA Format: A unique IRIG output Control Field that contains satellite lock status and time error flags. Fields conform to NASA Formats: Variants of IRIG B SecureSync 2400 User Manual...
  • Page 432 For IRIG frequency and output specifications, see "IRIG Standards and Specifications" on page 546. IRIG Output: Status Window To view the current settings of one of the IRIG Outputs, go to its Status window. For instructions, see: "Viewing Input/Output Configuration Settings" on page 334. SecureSync 2400 User Manual...
  • Page 433 IRIG AM-–An amplitude modulated output. The amplitude of the output is determined by the value entered in the Amplitude field. Frequency—The IRIG modulation frequency. This is determined by the con- figuration of Format and Modulation Type. See also: "IRIG Carrier Fre- quencies" on page 546. SecureSync 2400 User Manual...
  • Page 434: Stanag Out [1204-11, -25]

    STANAG 4372 HAVE QUICK IIA STANAG 4430 Extended HAVE QUICK STANAG 4430 Standard Time Message (STM) ICD-GPS-060A BCD Time Code ICD-GPS-060A HAVE QUICK DOD-STD-1399 BCD Time Code Programmable Pulse Width (1PPS Output): 100 ns to 500 ms with 20 ns res- olution SecureSync 2400 User Manual...
  • Page 435 Pin No. Signal Function Ground TOD1- TOD1 RS-485- Out TOD1+ TOD1 RS-485+ Out 15 TOD2+ TOD2 RS-485+ Out 17 TOD2- TOD2 RS-485- Out Ground 5 MHz Out (1204-11 Only) Ground 1PPS- 1PPS RS-485- Out 1PPS+ 1PPS RS-485+ Out SecureSync 2400 User Manual...
  • Page 436 The outputs are named: Stanag HQ Output [number]. Note: SecureSync starts numbering I/O ports with 0 (only 1PPS and 10 MHz outputs start at 1, because of the built-in outputs). The Edit window allows the configuration of the following settings: SecureSync 2400 User Manual...
  • Page 437 Time Zone and DST rules, as configured in the Local Clock will be applied to the front panel time display. Refer to for more information on Local Clocks. Configurable settings for each Time of Day are: SecureSync 2400 User Manual...
  • Page 438 Width: Configures the Pulse Width of the 1PPS output. The Pulse Width is entered and displayed in nanoseconds (the default Pulse Width is 200 ms). PPS Electrical Format: Selects signaling on either RS-485 or TTL (supporting up to 10 V levels) signal lines. SecureSync 2400 User Manual...
  • Page 439 Enabled: The second STANAG signal (TOD 2) is used to send the BS (Bit Stream) signal used with STANAG 4430-STM. When BS is active, the con- figuration of TOD 2 is superseded and only used for BS. SecureSync 2400 User Manual...
  • Page 440 "Signature Control" on page 161. Format: The user-selectable format being used. Available formats include: STANAG 4246 HQI STANAG 4246 HQII STANAG 4372 HQIIA STANAG 4430 STM STANAG 4430 XHQ ICD-GPS-060A BCD ICD-GPS-060A HQ DOD-STD-1399 BCD SecureSync 2400 User Manual...
  • Page 441: Stanag In [1204-1D, -24]

    Inputs: (2) STANAG Inputs, (1) 1PPS Input Signal Type and Connector: TTL or RS-485 level (user selectable) for STANAG and 1PPS input. DB25. Formats Supported: STANAG 4246 HAVE QUICK I STANAG 4246 HAVE QUICK II STANAG 4372 HAVE QUICK IIA SecureSync 2400 User Manual...
  • Page 442: Maximum Number Of Cards

    Figure 5-41: Model 1204-24 option card rear plate Pin Assignments Pin No. Signal Function Pin No. Signal Function Ground TOD1- TOD1 RS-485- Input TOD1+ TOD1 RS-485+ Input 15 TOD2+ TOD2 RS-485+ Input 17 TOD2- TOD2 RS-485- Input SecureSync 2400 User Manual...
  • Page 443 The Web UI list entries for this card are: STANAG In STANAG In, Isolated. The inputs are named: Stanag HQ Input [number]. The configurable settings are grouped under the following three tabs: General Settings tab SecureSync 2400 User Manual...
  • Page 444 Local Clock will be applied to the front panel time display. Refer to for more information on Local Clocks. Reference Selection: Selects TOD 1 or TOD 2 (configured below) which TOD sig- nal is used for synchronization. Time of Day Settings tab SecureSync 2400 User Manual...
  • Page 445 STANAG 4430 Extended HAVE QUICK STANAG 4430 Standard Time Message (STM) ICD-GPS-060A BCD Time Code ICD-GPS-060A HAVE QUICK DOD-STD-1399 BCD Time Code Electrical Type: Selects synchronization to either RS-485 or TTL (supporting up to 10 V levels) signal lines. SecureSync 2400 User Manual...
  • Page 446 (also referred to as ‘Reference’), go to its Status window. For instructions, see: "Viewing Input/Output Configuration Settings" on page 334. The Web UI list entries for this card are: STANAG In STANAG In, Isolated. The inputs are named: Stanag HQ Input [number]. SecureSync 2400 User Manual...
  • Page 447 ID: This is the identifier given to the input by SecureSync. Validity: Indicates the validity of the Time input and the PPS input. If the input signal is valid the indicator will be green. If the signal is not valid, the indicator will be orange. SecureSync 2400 User Manual...
  • Page 448 Type: Either RS-485 or TTL (supporting up to 10 V levels) signal lines. Time Scale: Used to select the time base for the incoming time code data. The entered Timescale is used by the system to convert the time in the incoming data SecureSync 2400 User Manual...
  • Page 449: Have Quick Out [1204-10, -1B]

    The HAVE QUICK option cards provide (4) HAVE QUICK outputs for the SecureSync plat- form. HAVE QUICK Out, BNC [1204-10]: Specifications Outputs: (4) HAVE QUICK Signal Type and Connector: TTL levels (BNC) Formats Supported: STANAG 4246 HAVE QUICK I STANAG 4246 HAVE QUICK II STANAG 4372 HAVE QUICK IIA SecureSync 2400 User Manual...
  • Page 450: Signal Type And Connector: Rs-485 Levels (Terminal Block)

    Connector: RS-485 levels (terminal block) Formats Supported: STANAG 4246 HAVE QUICK I STANAG 4246 HAVE QUICK II STANAG 4372 HAVE QUICK IIA STANAG 4430 Extended HAVE QUICK STANAG 4430 Standard Time Message (STM) ICD-GPS-060A BCD Time Code SecureSync 2400 User Manual...
  • Page 451: Output Load Impedance: 120 Ω

    HAVE QUICK Output 1 + HAVE QUICK Output 1 - HAVE QUICK Output 2 + HAVE QUICK Output 2 - HAVE QUICK Output 3 + HAVE QUICK Output 3 - HAVE QUICK Output 4 + HAVE QUICK Output 4 - SecureSync 2400 User Manual...
  • Page 452 Format: Used to configure the formatting of the four available HAVE QUICK out- puts. The available output formats are as follows: STANAG 4246 HQ I STANAG 4246 HQ II STANAG 4372 HQ IIA STANAG 4430 Ext HQ (Extended HAVE QUICK) STANAG 4430 STM (Standard Time Message) ICD-GPS-060A BCD SecureSync 2400 User Manual...
  • Page 453 Output, go to its Status window. For instructions, see: "Viewing Input/Output Configuration Settings" on page 334. The Web UI list entries for this card are: HAVE QUICK out, BNC HAVE QUICK Out, RS-485. The outputs are named: HQ Output [number]. SecureSync 2400 User Manual...
  • Page 454 Refer to "The Time Management Screen" on page 166 for more information on how to configure and read the System Time. Local timescale allows a Local Clock to apply a time offset for Time Zone and DST correction. SecureSync 2400 User Manual...
  • Page 455: Have Quick In/Out [1204-29]

    HAVE QUICK Output: Viewing Signal State To quickly view if a HAVE QUICK Output is enabled or disabled, go to the option card’s Status Summary panel. For instructions, see: "Viewing an Input/Output Signal State" on page 337. SecureSync 2400 User Manual...
  • Page 456 Timescale is used by the system to convert the time in the incoming data stream to UTC time for use by the System Time. The available choices are: UTC: Coordinated Universal Time ("temps universel coordonné"), also referred to as ZULU time SecureSync 2400 User Manual...
  • Page 457 If the signal is not valid, the indic- ator will be orange. Format: Used to configure the formatting of the four available HAVE QUICK out- puts. The available output formats are as follows: SecureSync 2400 User Manual...
  • Page 458 HAVE QUICK Output, go to its Edit window. For instruc- tions, see: "Configuring Option Card Inputs/Outputs" on page 336. The Web UI list entry for this card is: HAVE QUICK In/Out. Outputs are named: HQ Output [number]. SecureSync 2400 User Manual...
  • Page 459 Timescale is used by the system to convert the time in the incoming data stream to UTC time for use by the System Time. The available choices are: UTC: Coordinated Universal Time ("temps universel coordonné"), also referred to as ZULU time TAI: Temps Atomique International SecureSync 2400 User Manual...
  • Page 460 Control: Signature Control is used to control when the HAVE QUICK modulation is present, see "Signature Control" on page 161. Format: Used to configure the formatting of the four available HAVE QUICK out- puts. The available output formats are as follows: SecureSync 2400 User Manual...
  • Page 461: Ascii Time Code In/Out [1204-02, -04]

    HAVE QUICK outputs. The Offset values are entered in nanoseconds (ns). The available Offset range is –500 to +500 ms. 5.2.5.7 ASCII Time Code In/Out [1204-02, -04] The ASCII Time Code Option Card, Model 1204-02 (RS-232) provides: SecureSync 2400 User Manual...
  • Page 462 GGA message followed imme- diately by the corresponding RMC message for that same second, followed immediately by SecureSync 2400 User Manual...
  • Page 463 Accuracy: ±100…1000 µs (format dependent) Maximum Number of Cards: 6 Ordering Information: 1204-02: ASCII Time Code Module (RS-232) Figure 5-45: Model 1204-02 option card rear plate Pin Assignments: OUTPUT connector J1 Figure 5-46: OUTPUT connector J1 SecureSync 2400 User Manual...
  • Page 464 No connection No connection No connection No connection Pin Assignments: INPUT connector J2 Figure 5-47: INPUT connector J2 Table 5-20: Pin-out, INPUT connector "J2" Pin Number Signal Function Notes Top row of 5 pins PPS_IN 1PPS input SecureSync 2400 User Manual...
  • Page 465 Information: 1204-04 ASCII Time Code Module (RS-485) Figure 5-48: Model 1204-04 option card rear plate Pin Assignments Table 5-21: Pin-out, RS-485 terminal block connector J1 Pin No. Signal Function 1 (left) SERIALTX_RS485+ + RS-485 data output SecureSync 2400 User Manual...
  • Page 466 ASCII Input (also referred to as ‘Reference’), go to its Edit window. For instructions, see: "Configuring Option Card Inputs/Outputs" on page 336. The Web UI list entries for this card are: ASCII TIMECODE RS-232 ASCII TIMECODE RS-485. SecureSync 2400 User Manual...
  • Page 467 Choices are: Auto Spectracom NMEA ICD-153 EndRun Format: Once a Format Group has been selected, one or more Format fields may appear, allowing you to select one or more time code Formats. For detailed spe- SecureSync 2400 User Manual...
  • Page 468 With the Timescale field set to “Local”, select the name of a previously created Local Clock. The Time Zone and DST rules, as configured in the Local Clock will be applied to the front panel time display. See for more information on Local Clocks. SecureSync 2400 User Manual...
  • Page 469 ASCII Time Code Output: Edit Window To configure the ASCII Output, go to its Edit window. For instructions, see: "Configuring Option Card Inputs/Outputs" on page 336. The Web UI list entries for this card are: ASCII TIMECODE RS-232 ASCII TIMECODE RS-485. SecureSync 2400 User Manual...
  • Page 470 1: Selects either the first of up to three, or the only format message to be output. Format 2: Selects the second consecutive format message to be outputted. Select “None” if only one output format is desired. “None” will be the only choice available if Format 1 is “None.” SecureSync 2400 User Manual...
  • Page 471 GPS: The raw GPS time as transmitted by the GNSS satellites (as of 15-Febru- ary-2021, this is currently 18 seconds ahead of UTC time). If GPS or TAI time is used, then the proper timescale offsets must be set on the MANAGEMENT/OTHER/Time Management page. (See "The Time Management SecureSync 2400 User Manual...
  • Page 472 Control: Indicates whether Signature Control is enabled (Signature Con- trol determines when the ASCII data stream will be enabled to be present). See also: "Signature Control" on page 161. Format 1: Indicates the configured format of the ASCII time code input data stream. SecureSync 2400 User Manual...
  • Page 473 Flag: Displays whether the incoming data stream is indicating that a pending leap second is to be added to the UTC timescale at the end of the month. See "Leap Seconds" on page 176. Format: Indicates the configured format of the ASCII time code input data stream. SecureSync 2400 User Manual...
  • Page 474: Network Interface Option Cards

    1204-4A option card rear plate Dual 1 Gb NTP Server [-49]: Specifications Inputs/Outputs: (2) Gigabit Ethernet Connectors: SFP Ports (2x) Management: Enabled or Disabled (NTP server only) Maximum Number of Cards: 1 Ordering Information: 1204-49: Dual Gigabit Ethernet SecureSync 2400 User Manual...
  • Page 475 In the xxxx 1GBE (Slot x) Network Status window, each of your Ethernet ports will be lis- ted, along with their status. To view the network information for each port, click on the information icon. To edit the network information, click on the gear icon. SecureSync 2400 User Manual...
  • Page 476 To configure NTP on this set of option cards, navigate to MANAGEMENT > NTP Setup. In the Actions panel, select the Configure xxxx 1GBE (Slot x) button. In the xxxx 1GBE (Slot x) NTP Status window are four tabs: SecureSync 2400 User Manual...
  • Page 477 In the NTP Peers window, click on the plus sign to add additional servers by entering information into the following fields: Host Min Poll Interval Max Poll Interval Symmetric Key Enable Burst [checkbox] Enable Iburst [checkbox] Mark ad Preferred [checkbox] SecureSync 2400 User Manual...
  • Page 478: Ptp Grandmaster [1204-32]

    PTP Version supported: PTP 2 (IEEE 1588-2008) PTP Profiles supported: Default, Telecom, Enterprise Transmission modes: Unicast [default], Multicast Maximum Number of Cards: 6 Ordering Information: 1204-32: PTP/Precision Timing Protocol Option Module Figure 5-51: Model 1204-32 option card rear plate SecureSync 2400 User Manual...
  • Page 479 If you have only one input or output of any type, SecureSync will number that input or output 0. Additional inputs or outputs will be numbered 1 or above. 2. The Gb PTP Edit window will display. It includes the panel, and offers access SecureSync 2400 User Manual...
  • Page 480 Main: These settings pertain to network connectivity. Contract: These settings pertain to the unicast contract. Advanced: These setting pertain to time Sync information. Main tab settings Domain Number: Sets the current PTP Domain Number, as defined in IEEE Std 1588-2008 Section 7.1 SecureSync 2400 User Manual...
  • Page 481 Interval: The minimum value of Sync interval granted by the Master Clock. In packets per second. [128 Per Second] Max Sync Duration: The maximum value of Sync interval granted by the Master Clock. In seconds. [10000] SecureSync 2400 User Manual...
  • Page 482 : The Minicast/Hybrid mode is a method to minimize the PTP packets payload on the network, where: The transmissions initiated by the Master (Announce, Sync/Follow-Up) run in Multicast mode. The transmissions initiated by the Slaves (Delay_Req/Delay_Resp) run in Unicast mode. SecureSync 2400 User Manual...
  • Page 483 This will appear both in the ESMC message, and in the Clock Class (if the “Clock Class Set” is set to ITU). It is also possible to control whether the ESMC message chosen degrades to QL-DNU when out of sync. SecureSync 2400 User Manual...
  • Page 484 Disabled: The output is not present, even if any SecureSync references are present and considered qualified. QL-DNU SSM code is broadcast. SSM Code : The Sync Status Messaging (SSM) code to be used. Choice of code is made through the drop-down list. SecureSync 2400 User Manual...
  • Page 485 Network Settings options. Initializing: Ethernet link is unplugged/PTP Module is in power-up state. A Master Clock doesn’t leave this state while it can’t get the current time and synchronization references from the SecureSync to synchronize with it. SecureSync 2400 User Manual...
  • Page 486 Scale: Indicates the timescale that the Master is using to broadcast its time. TAI is the default PTP timescale. Time source: The Time Source that the Master is using. Refer to IEEE Standard 1588-2008, Section 7.6.2.6. SecureSync 2400 User Manual...
  • Page 487 If the PTP Module is set up for DHCP but fails to obtain an IP address, it will use the Static IP instead. To reacquire a DHCP address, reset the module via the Main tab in the PTP settings window. SecureSync 2400 User Manual...
  • Page 488 The current implementation of One-Step Mode involves a software oriented timestamping. The Two- Step Mode imlements a hardware oriented timestamping, insensitive to software execution time variations. The Two- Step Mode is recommended, as it increases the PTP Clock's accuracy SecureSync 2400 User Manual...
  • Page 489 The current TAI to UTC offset (required even if the reference’s time is in TAI) Pending leap second information at least a day in advance. If the reference does not transmit this information, it must be provided by the user in order for the Master Clock to function properly. SecureSync 2400 User Manual...
  • Page 490 PTP network will have the incorrect UTC time after a leap second event. d. If there are multiple multicast Master Clocks on the network, the PTP Module uses the Best Master Clock (BMC) algorithm specified in the PTP Specification to decide SecureSync 2400 User Manual...
  • Page 491 To enter Multicast mode, perform the following steps: 1. In the GB PTP Edit window, navigate to the Advanced tab. 2. Select the Multicast Sync checkbox. 3. Select the Multicast Sync Rate from the drop-down list. SecureSync 2400 User Manual...
  • Page 492 4. Select the Multicast Announce Rate from the drop-down list. 5. Confirm that Unicast Sync is checked. The 1204-32 PTP module should always respond to unicast negotiations. Configuring PTP on the Network SecureSync 2400 User Manual...
  • Page 493 Gateway: When a DHCP server is not requested or is requested but not available, the PTP Module will use this Default Gateway. In the format “#.#.#.#” with no leading zeroes or spaces, where each ‘#’ is a decimal integer from the range [0,255]. Configuring PTP Contracts SecureSync 2400 User Manual...
  • Page 494: Miscellaneous Option Cards

    4000 slaves (unicast contracts). 5.2.7 Miscellaneous Option Cards This section contains technical information and SecureSync Web UI procedures pertaining to option cards that do not fall into other categories, e.g. cards that serve as signal relays. SecureSync 2400 User Manual...
  • Page 495: Stl Option Module [1204-3E]

    The ideal location for the antenna is near the ceiling of the room in which your SecureSync unit is located, or near an outside wall. In general, a higher location is preferable over a lower location. Do not cover the antenna with electronic equip- ment or other metal objects. SecureSync 2400 User Manual...
  • Page 496 NOTE: It can take approximately 10 minutes or longer until the receiver is locked. This depends on the burst rate (see "Burst Rate" on page 485 Both LEDs have equivalent indicators in the Web UI STL 0 status window: SecureSync 2400 User Manual...
  • Page 497 Configuring STL Settings Note: If you do not yet have a subscription key, you will need to obtain one before continuing with installation. Please contact Orolia customer service: stlsubscription@orolia.com US: +1 585 321 5800; France: +33 (0)1 64 53 3980...
  • Page 498 The default setting is recommended for most applications. Sensitivity Level: [default = 40] This value determines the sensitivity of the STL receiver towards the STL signal bursts transmitted by the satellites. The SecureSync 2400 User Manual...
  • Page 499 Reviewing the STL Status Validity Status To check or monitor the validity of the STL reference: 1. Navigate to INTERFACES > REFERENCES. 2. In the References status panel, under 0, check the status indicator light: Detailed Status SecureSync 2400 User Manual...
  • Page 500 Validity – TIME: Should always be green; if red, the -3E card is not installed correctly, or there is a defect; – PPS: If green, indicates the STL receiver is sending a PPS signal to SecureSync. SecureSync 2400 User Manual...
  • Page 501 Typically, a number of received strong bursts per minute is greater than 60, the location has sufficient STL service for the receiver to converge and provide a timing solution. SecureSync 2400 User Manual...
  • Page 502 UTC: ±500 ns (specified); ±200 ns (typical) Coverage: Global Time-to-first-fix (Timing): Several seconds (the PPS pulse will become available once the positioning fix has been obtained) Jamming resilience: Signal is 30 to 40 dB stronger than GPS signal Spoofing resilience: Encrypted signal SecureSync 2400 User Manual...
  • Page 503: Alarm Relay Out [1204-0F]

    Switch Capacity: 30 V, 2A Maximum switch voltage: 220 VDC Maximum switch power: 60 W Maximum switch current: 2A Breakdown voltage: 1000 VDC between contacts Switch time: 4ms, max. Maximum Number of Cards: 1 Ordering Information: 1204-0F: Relay Outputs Module SecureSync 2400 User Manual...
  • Page 504 Terminal block pin-out, alarm relay out SIGNAL Relay 0 NO Relay 0 NC Relay 0 COMMON Relay 1 NO Relay 1 NC Relay 1 COMMON Relay 2 NO Relay 2 NC Relay 2 COMMON Operation of the Alarm Relay Card SecureSync 2400 User Manual...
  • Page 505 Each of the three available relays on this option card can be configured to be either a Minor or a Major alarm relay. The three relays are dry contact closures that can either open or SecureSync 2400 User Manual...
  • Page 506 Alarm Relay Output: Viewing Signal State To quickly view the signal state of all three alarm outputs, see: "Viewing an Input/Output Signal State" on page 337. Each alarm output will be in one of these 3 states: SecureSync 2400 User Manual...
  • Page 507 The Web UI list entry for this card is: Relay Output. The name of the output is: Alarm Out- [number]. Note: SecureSync starts numbering I/O ports with 0 (only 1PPS and 10 MHz outputs start at 1, because of the built-in outputs). SecureSync 2400 User Manual...
  • Page 508: Nena-Compliant Option Card [-1F]

    (1) ASCII RS-485 1344/C37.118-2005 Relay/Alarm (AM/TTL)  Connectors: BNC (J1) DB9F (J2) 3.81 mm Terminal block (J3) Accuracy: ±20 to ±200 μs of UTC, ±100-1000 μs ±100-1000 μs Switch time format-dependent (format-depend- (format-depend- 4ms, max. ent) ent) Table 5-23: NENA module specifications SecureSync 2400 User Manual...
  • Page 509 ±5V minimum, ±5.4 V typical Signal Type and Connector RS-232 DB-9F RS-232 Input: -25 V to +25 V +0.6V , +1.2V IL min IL TYP +1.5V , +2.4V IH TYP IH MAX Input impedance > 3kΩ SecureSync 2400 User Manual...
  • Page 510 Pin No. Signal Name Function Top row of 5 pins PPS_OUT 1PPS output SERIAL_OUT_TX RS-232 Transmit data SERIAL_OUT_RX RS-232 Receive data No connection Ground Bottom row of 4 pins No connection No connection No connection No connection SecureSync 2400 User Manual...
  • Page 511 120 Ω load RS-485 TX- 0V to 3V differential, 120 Ω load GROUND GROUND Relay 1 NO Normally Open 30 V , 2A max. switching power Relay 1 NC Normally Closed 30 V , 2A max. switching power SecureSync 2400 User Manual...
  • Page 512 Configuring the IRIG Time Code Output INTERFACES >  OUTPUTS [or: INTERFACES > OPTION CARDS], navigate to IRIG Output 0. Depending on which path you take, you will need to click the GEAR button, or the Edit button in order to open the Edit window. SecureSync 2400 User Manual...
  • Page 513 Modulation: Changes the type of output signal modulation: IRIG AM is an amplitude modulated output. The amplitude of the output is determined by the value entered in the “Amplitude” field. IRIG DCLS is a TTL modulated output. SecureSync 2400 User Manual...
  • Page 514 (see "Local Clock (s), DST" on page 179). Local timescale allows a Local Clock to apply a time offset for Time Zone and DST correction. SecureSync 2400 User Manual...
  • Page 515 > OPTION CARDS], navigate to the ASCII Output you want to configure. Depending on which path you take, you will need to click the GEAR button, or Edit button in order to open the Edit window: SecureSync 2400 User Manual...
  • Page 516 NENA-Spectracom (Formats 0, 1, 2, 3, 4, 7, 8, 9, 1S) NMEA (GGA, RMC, ZDA message) (Formats 1, 2, 3 PSTN, 4, 5 RMC) ICD-153 (Buffer Box, Time Transfer, Current Status) EndRun (EndRun Time Format, Endrun X Format) SecureSync 2400 User Manual...
  • Page 517 Timescale: Used to select the time base for the incoming ASCII time code data. The entered Timescale is used by the system to convert the time in the incoming ASCII data stream to UTC time for use by the System Time. The available choices are: SecureSync 2400 User Manual...
  • Page 518 Configuring the Relay/Alarm Output To manage the alarm relays: 1. Via the INTERFACES > Alarm Output drop-down menu, navigate to the Alarm Output entry for the card you wish to configure. Depending on the path taken, … SecureSync 2400 User Manual...
  • Page 519: Revertive Selector Card [1204-2E]

    As soon as input “A” becomes valid again, the output switches back to use “A” as source. At power-up or module reset, there is a timed delay before input “A” is presented. This allows reference at input “A” to stabilize before being used. SecureSync 2400 User Manual...
  • Page 520 “B”; until a valid signal on input "A" is detected, causing the switch state to change to "A". Maximum Number of Cards: 6 Ordering Information: 1204-2E: Revertive Selector Option Module Figure 5-59: Model 1204-2E option card rear plate SecureSync 2400 User Manual...
  • Page 521: Event Broadcast [1204-23]

    Request Character is received. The output format used is selected among a small group of formats with the capability to output data at 5ns resolution. Event Broadcast Output formats are detailed in "Event Broadcast Time Code Formats" on page 511. SecureSync 2400 User Manual...
  • Page 522 Output connector DB-9: pin-out Pin Number Signal Name Function Top row of 5 pins No Connection SERIAL_OUT_TX RS-232 Transmit data SERIAL_OUT_RX RS-232 Receive data No connection Ground Bottom row of 4 pins No connection No connection SecureSync 2400 User Manual...
  • Page 523 The Event Broadcast card only supports two formats (Event Broadcast Format 0 and Event Broadcast Format 1), and only supports the output of one message per event. If format is set to “None”, no messages will be queued in the Message Buffer. SecureSync 2400 User Manual...
  • Page 524 These time jumps could affect NTP and normal operation of the system. Baud Rate: Determines the speed that the output port will operate at. Data Bits: Defines the number of Data Bits for the output port. SecureSync 2400 User Manual...
  • Page 525 If a new event happens while an older message is being broadcast, the new message will be queued in a “First-in, First-out” manner. When the message has finished, the next message out of the queue will be broadcast. SecureSync 2400 User Manual...
  • Page 526 To configure the Event Broadcast Input (also referred to as ‘Reference’), go to its Edit window. For instructions, see: "Configuring Option Card Inputs/Outputs" on page 336. The Web UI list entry for this card is: Event Broadcast. SecureSync 2400 User Manual...
  • Page 527 Edge: The signal edge used for triggering events on Event Input port Latest Event Message: The last message sent. This can be cleared with the Clear button. Event Broadcast Time Code Formats The following ASCII-based time code formats are available: SecureSync 2400 User Manual...
  • Page 528 YYYY DDD HH:MM:SS.XXXXXXXXX<CR><LF> Where: YYYY Year Space Separator Day of Year (001-366) Space Separator Hour of the Day (00-23) Colon Separator Minutes of the Hour (00-59) Colon Separator Seconds (00-59), (00-60 for leap second) Period Separator SecureSync 2400 User Manual...
  • Page 529: Command-Line Interface

    SecureSync Web UI can be used. While it is also possible to retrieve selected logs, a terminal emulator does not replace the SecureSync Web UI. Orolia does not distribute or support its own terminal emulator, and newer Microsoft oper- ating systems no longer include HyperTerminal. However, there are several third-party ®...
  • Page 530: Cli Commands

    You can scroll up or scroll down through the output by using the Page Up/Page down keys, or the arrow keys. c. Type “q” (lower-case) to quit. d. Pressing the up/down keys scrolls through previously typed commands. SecureSync 2400 User Manual...
  • Page 531 Used to obtain the current Day of Year doyset Used to set the current Day of Year gpsdop Displays GNSS receiver positional accuracy estimates gpsdserviceportget Displays the GPSD service port gpsdserviceportset Sets the GPSD service port SecureSync 2400 User Manual...
  • Page 532 Used to obtain the IPv6 IP address "Network Services" on page 62 iptables for more information. licenses Displays configured licenses installed (if any) list Outputs a list of commands loadconf Restore a saved configuration and reboot locallist Used to display local clocks SecureSync 2400 User Manual...
  • Page 533 Used with DHCP to release the IPv4 address release6 Used with DHCPv6 to release the IPv6 address renew4 Used with DHCP to renew the assigned IPv4 address renew6 Used with DHCPv6 to renew the assigned IPv6 address SecureSync 2400 User Manual...
  • Page 534 Performs system upgrade using the update bundle provided syncstate Display timing system synchronization state testevent Generates SNMP events in the enterprise MIB tfomget Displays current estimated system time error (TFOM – Time Figure of Merit) SecureSync 2400 User Manual...
  • Page 535: Time Code Data Formats

    The GGA Format provides essential fix data which includes 3D location and accuracy data. E x a m p l e m e s s a g e : $GPGGA,123519.00,4807.038,N,01131.000,E,1,08,0.9,545.4,M,-164.0,M,,,,*47 Note: Not all fields below are available on all products in all applications. SecureSync 2400 User Manual...
  • Page 536: Nmea Rmc Message

    NMEA RMC Message NMEA Message Format RMC, (Recommended Minimum) provides fix information, speed over ground and Magnetic Variance information. E x a m p l e m e s s a g e : $GPRMC,123519.00,A,4807.038,N,01131.000,E,,,230394,,,A*6A Where: SecureSync 2400 User Manual...
  • Page 537: Nmea Zda Message

    The Format ZDA Data message provides Date and Time information. E x a m p l e m e s s a g e : $GPZDA,HHMMSS.00,DD,MM,YYYY,XX,YY*CC Where: HHMMSS.00 HrMinSec(UTC) DD,MM,YYYY Day, Month, Year Local zone hours -13…13 Local zone minutes 0…59 Checksum SecureSync 2400 User Manual...
  • Page 538: Spectracom Format 0

    ? When the receiver is unable to track any satellites and the time synchronization lamp is red. * When the receiver time is derived from the battery backed clock or set manually through the Setup Port Interface. The Daylight Saving Time indicator (D) is defined as: SecureSync 2400 User Manual...
  • Page 539 Format 1S. F o r m a t 1 d a t a s t r u c t u r e : CR LF I ^ WWW ^ DDMMMYY ^ HH:MM:SS CR LF SecureSync 2400 User Manual...
  • Page 540 The example data stream provides the following information: Sync The clock is not time synchronized to GNSS. Time is derived from the battery backed Status clock or set manually Date Friday, April 23, 2015 Time 12:45:36 SecureSync 2400 User Manual...
  • Page 541: Spectracom Format 1S

    Month (JAN, FEB, MAR, APR, MAY, JUN, JUL, AUG, SEP, OCT, NOV, DEC) Year without century (99, 00, 01, etc.) Hours (00-23) Colon separator Minutes (00-59) Seconds (00-60) The leading edge of the first character (CR) marks the on-time point of the data stream. SecureSync 2400 User Manual...
  • Page 542: Spectracom Format 2

    Data Format 2 with either a Time Zone Offset or automatic DST rule will result in an error message. E x a m p l e m e s s a g e : CR LF IQYY ^ DDD ^ HH:MM:SS.SSS ^ LD Where: SecureSync 2400 User Manual...
  • Page 543 GNSS receiver 1PPS stability, and the time elapsed tracking no satellites. The Tracking Zero Satellites timer and the quality indicator reset when the receiver reacquires a satellite. SecureSync 2400 User Manual...
  • Page 544 The clock has lost GNSS time sync. The inaccuracy code of “A” indicates the expected time Status error is <10 milliseconds. Date Day 271 of year 2015. Time 12:45:36 UTC time, Standard time is in effect. SecureSync 2400 User Manual...
  • Page 545: Spectracom Format 3

    ? When the receiver is unable to track any satellites and the time synchronization lamp is red. * When the receiver time is derived from the battery backed clock or set manually through the Setup Port Interface. SecureSync 2400 User Manual...
  • Page 546: Spectracom Format 4

    Format 4 provides a format indicator, time synchronization status character, modified Julian date, time reflecting UTC with 0.1 millisecond resolution and a leap second indicator. Format 4 data structure is shown below: E x a m p l e : FFFFIMJDXX^HHMMSS.SSSS^L CR LF SecureSync 2400 User Manual...
  • Page 547 When a leap second correction is scheduled for the end of the month. E x a m p l e : 0004 50085 124536.1942 L The example data stream provides the following information: Data format Sync Status Time synchronized to GNSS. Modified Julian Date 50085 SecureSync 2400 User Manual...
  • Page 548: Spectracom Format 7

    Where: Carriage Return Line Feed Time Sync Status (space, ?, *) Year without century (99, 00, 01, etc.) Space separator Day of Year (001-366) Hours (00-23 UTC time) Colon separator Minutes (00-59) Seconds (00-60) Decimal Separator SecureSync 2400 User Manual...
  • Page 549: Spectracom Format 8

    12:45:36 UTC time, Standard time is in effect. 5.4.11 Spectracom Format 8 Format 8 includes a time synchronization status character, the four digit year, day of year, time reflecting Time Zone Offset and DST corrections when enabled. Format 8 also SecureSync 2400 User Manual...
  • Page 550 When SecureSync time is set manually. When SecureSync has not achieved or has lost synchronization to UTC source. The time and date can be set to either local time or UTC time, depending upon the con- figuration of the output port. SecureSync 2400 User Manual...
  • Page 551: Spectracom Format 9

    The leading edge of the first character (CR) marks the on-time point of the data stream. 5.4.12.1 Format 9S Format 9S is a variation of ASCII Format 9 that uses Sysplex compatible fields indicating sychronization status: SecureSync 2400 User Manual...
  • Page 552: Spectracom Epsilon Formats

    2-digit Hour separator 2-digit Minutes separator 2-digit Seconds 1-digit Timescale ( 'N' None, 'G' GPS, 'U' UTC, 'A' TAI, 'L' Local, 'M' Manual) (CR) Carriage Return (ASCII Character 13 0x0D) (LF) Line Feed (ASCII Character 10 0x0A) SecureSync 2400 User Manual...
  • Page 553: Spectracom Epsilon Tod

    This format is based on string ASCII characters, and is sent once per second. It provides year, month, day, day of week, day of month, hours, minutes, and seconds. Number of characters: 24 (including CRLF and '.') SecureSync 2400 User Manual...
  • Page 554: Format Bbc-02

    07 DA 06 Leap- Leap- Leap- Time Millisecond Daylight second second second Zone Week Sign Month Zone 80 00 00 1A 2A GPS Second GPS to UTC Offset Check-sum END 09 3A 7E 12 99 99 SecureSync 2400 User Manual...
  • Page 555 Second of week 000000 up to 093A7F (604799 decimal) GPS to UTC offset: 2’s complement binary signed integer, seconds Checksum: Sum of all bytes up to and including the checksum (sum includes the AAAA start identifier but excludes the 9999 end identifier) SecureSync 2400 User Manual...
  • Page 556: 5.4.14.3 Format Bbc-03 Pstn

    Output format: YYMMDD<CR> Number of output characters: 7 (including CR) ‘s’ command SecureSync transmits the status information on request. Input format: s<CR> Output Format: status Number of output characters: 1 Where returned, values for status are: SecureSync 2400 User Manual...
  • Page 557: Format Bbc-04

    E x a m p l e m e s s a g e : T:ho:mi:sc:dw:da:mo:ye:lp:cs<CR><LF> Where: Indicates the synchronous moment for the time setting. Hours (00-23) Minutes (00-59) Seconds (00-59) Day of week (01=Monday to 7=Sunday) SecureSync 2400 User Manual...
  • Page 558: Format Bbc-05 (Nmea Rmc Message)

    The BBC RMC message (BBC-05) corresponds to Version 2 of the NMEA 0183 standard, following the description below: E x a m p l e m e s s a g e : $GPRMC,123519,A,4807.038,N,01131.000,E,022.4,084.4,230394,003.1,W*6A Where: Recommended Minimum sentence C SecureSync 2400 User Manual...
  • Page 559: Gssip Message Format

    The ASCII Output supports two configurations for supporting SINCGARS: A configuration of Time Transfer as Message Format1 and Current Status as Format2 causes the SINCGARS protocol to be emulated and the machine state to be initializated. GSSIP = GPS STANDARD SERIAL INTERFACE PROTOCOL SecureSync 2400 User Manual...
  • Page 560: Endrun Formats

    8 indicates error <±10 milliseconds 7 indicates error <±1 millisecond 6 indicates error <±100 microseconds YYYY Year Day of Year (001-366) Hour of the day (00-23) Colon Separator Minutes of the hour Seconds (00-59), (00-60 for leap second) SecureSync 2400 User Manual...
  • Page 561: 5.4.16.2 Endrunx (Extended) Time Format

    YYYY Year Day of Year (001-366) Hour of the day (00-23) Colon Separator Minutes of the hour Seconds (00-59), (00-60 for leap second) The sign of the offset to UTC, + implies time is ahead of UTC SecureSync 2400 User Manual...
  • Page 562: Irig Standards And Specifications

    Each IRIG code specifies a carrier frequency that is modulated to encode date and time, as well as control bits to time-stamp events. Initially, IRIG applications were primarily military and government associated. Today, IRIG is commonly used to synchronize voice loggers, SecureSync 2400 User Manual...
  • Page 563 IRIG-A A134 10 kHz , BCD , CF 1000 0.1 sec YEAR and SBS IRIG-A A135 10 kHz , BCD , and 1000 0.1 sec YEAR IRIG-A A136 10 kHz , BCD 1000 0.1 sec YEAR SecureSync 2400 User Manual...
  • Page 564 IRIG-E E000 DCLS , CF and SBS 10 pps 1 sec IRIG-E E001 DCLS , CF 10 pps 1 sec IRIG-E E002 DCLS 10 pps 1 sec IRIG-E E003 DCLS , SBS 10 pps 1 sec SecureSync 2400 User Manual...
  • Page 565 SBS IRIG-E E125 1kHz , BCD , and 10 pps 10 sec YEAR IRIG-E E126 1kHz , BCD 10 pps 10 sec YEAR IRIG-E E127 1kHz , BCD , and 10 pps 10 sec YEAR IRIG-G SecureSync 2400 User Manual...
  • Page 566 IRIG Standard 200-04. IRIG Standard 200-04 incorporated the year information after P5 and reduced the allocated control bits to 18 for format B and 36 for format E. SecureSync 2400 User Manual...
  • Page 567: Irig B Output

    (AM) or pulse width coded (TTL) formats. A signature control feature may be enabled for any IRIG output. Signature control removes the modulation code when a Time Sync Alarm is asserted. 5.5.3 IRIG B Output The IRIG B Time Code description follows. Figure 5-62: IRIG B time code description SecureSync 2400 User Manual...
  • Page 568 Year information consists of the last two digits of the current year (i.e. 97, 98, 99 etc.). Elements 60 through 63 contain the binary equivalent of year units. Elements 65 through 68 contain the binary equivalent of tens of years. In keeping with IRIG SecureSync 2400 User Manual...
  • Page 569 Pulse width coded signal: 10 milliseconds. Amplitude modulated signal: 1 millisecond. Carrier frequency: 1kHz when modulated. Table 5-29: IRIG B control function field C.F. Element # Digit # Function Space Space Space Space Space Time Sync Status Space SecureSync 2400 User Manual...
  • Page 570: Faa Irig B Code Description

    The FAA modified the IRIG B code by including satellite lock status and time error flags in the Control Function Field. The error flags provide an inaccuracy estim- ate based on the time elapsed since loss of GPS lock. In addition, the Straight Binary SecureSync 2400 User Manual...
  • Page 571 6 for hours, and 10 for days) until the code word is complete. An index marker occurs between decimal digits in each group to provide sep- aration for visual resolution. Least significant digit occurs first. SecureSync 2400 User Manual...
  • Page 572 Unlocked Error < 1ms 00:16:41 to 01:23:39 Unlocked Error < 5ms 01:23:40 to 13:53:19 Unlocked Error < 50 ms 13:53:20 to 5 days Unlocked Error < 500 18:53:19 >5 days 18:53:20 Unlocked Error Unknown Power On SecureSync 2400 User Manual...
  • Page 573 530 ms which indicates satellite lock. The ±1ms error flag occurs at 550 ms. The ±5ms error flag occurs at 560 ms. The ±50 ms error flag occurs at 570 ms. The ±500 ms error flag occurs at 580 ms. SecureSync 2400 User Manual...
  • Page 574: Irig E Output

    Binary 0 when the lamp is red. Year information consists of the last two digits of the current year (i.e. 98, 99, etc.). Ele- ments 60 through 63 contain the binary equivalent of year units. Elements 65 through 68 SecureSync 2400 User Manual...
  • Page 575 Reference marker: 80 millisecond duration, 1 per 10 seconds. The reference marker appears as two consecutive position identifiers. The second position identifier or ref- erence marker is the on-time point for the succeeding code word. Figure 5-64: IRIG E time code description SecureSync 2400 User Manual...
  • Page 576 "one" during any specified number of time frames. Each control element is iden- tified on the Control Function Field Table. Table 5-31: IRIG E control function field BIT No. CF ELEMENT No. FUNCTION SPACE SPACE SPACE SPACE SPACE TIME SYNC_STATUS SPACE SPACE SPACE PID P6 POSITION IDENTIFIER SecureSync 2400 User Manual...
  • Page 577 YEAR TENS Y80 PID P7 POSITION IDENTIFIER SPACE SPACE SPACE SPACE SPACE SPACE SPACE SPACE SPACE PID P8 POSITION IDENTIFIER SBS 20 SBS 21 SBS 22 SBS 23 SBS 24 SBS 25 SBS 26 SBS 27 SecureSync 2400 User Manual...
  • Page 578: Irig Output Accuracy Specifications

    The IRIG outputs deliver signals with the following 1PPS accuracy: IRIC DCLS Measured Signal Category Accuracy IRIG A 30 ns IRIG B 30 ns IRIG G 30 ns IRIG NASA 30 ns IRIG E 30 ns SecureSync 2400 User Manual...
  • Page 579: Technical Support

    "Saving and Downloading Logs" on page 310). Thank you for your cooperation. 5.6.1 Regional Contact Orolia operates globally and has offices in several locations around the world. Our main offices are listed below: Country Location Phone France Les Ulis...
  • Page 580: Return Shipments

    Freight to Orolia is to be prepaid by the customer. Note: Should there be a need to return equipment to Orolia, it must be shipped in its original packing material. Save all packaging material for this purpose.
  • Page 581 Table 5-26: Output connector DB-9: pin-out Table 5-27: Quality indicators Table 5-28: Available IRIG output signals Table 5-29: IRIG B control function field Table 5-30: FAA Time Error Indicators Table 5-31: IRIG E control function field SecureSync 2400 User Manual...
  • Page 582: List Of Images

    APPENDIX Table 5-32: Orolia contact information List of Images Figure 1-1: SecureSync front panel layout Figure 1-2: Front panel LEDs Figure 1-3: Status LED menu buttons Figure 1-4: Standard rear panel Figure 1-5: Option Card ID number Figure 1-6: Multi I/O connector, viewed in mating direction on front of unit...
  • Page 583 Figure 5-50: 1204-49 option card rear plate Figure 5-51: Model 1204-32 option card rear plate Figure 5-52: Model 1204-3E option card rear plate Figure 5-53: Model 1204-3E option card rear plate Figure 5-54: Model 1204-0F option card rear plate SecureSync 2400 User Manual...
  • Page 584: Document Revision History

    Figure 5-63: FAA modified IRIG B Figure 5-64: IRIG E time code description 5.10 Document Revision History Description Date DOC- First generation SecureSync 2400 product manual September 2019 DOC- 2400-5000-0050p release for special configuration December 2019 Updated option card availability, added security pages for LDAP, RADIUS, February and TACACS+.
  • Page 585 NTP Expert Daylight Savings Time Mode Desktop operation Authentication disk status Authorized keys file memory status Duplex, FULL, HALF Battery Battery Backed Time BBC Message Formats EMC compliance BGP (Border Gateway Pro- tocol) SecureSync 2400 User Manual • INDEX...
  • Page 586 Standards keypad IRIG Carrier Frequencies layout IRIG output resolution status LEDs time display Keys, host GNSS Connecting GNSS receiver modes LDAP GNSS reference, about Leap second GPSD 529- GSSIP Message Format license file applying Local clock SecureSync 2400 User Manual...
  • Page 587 Expert Mode Preferred NTP Peer Peers 105-106 Preferred NTP Server 105-107 Servers Primary Navigation menu Setup screen Private keys, SSH stratum Symmetric Keys one-step mode time stamp two-step mode timescale Public keys, SSH NTP Peer Preference SecureSync 2400 User Manual...
  • Page 588 Subnet, default Sanitization Summer Time Survey, GNSS Screen clock Symmetric keys Self survey Synchronizing Windows Self survey, GNSS position 217-218 computers Self survey, GNSS receiver System on-time point SFTP System Time Shipment, return Show Clock TACACS+ Authentication SecureSync 2400 User Manual...
  • Page 589 Technical support Temperature operating, range Terminal emulator TFOM Timeout Timeout, Web UI, automatic Troubleshooting Unicast Update, software Upgrade, software User time, manually setting Usernames, rules VLAN Web Interface Settings Web UI, opening Zero Configuration Setup zeroconf SecureSync 2400 User Manual...

Table of Contents

Save PDF