098-00029-000 Revision C October 2009

Copyright 2009, Symmetricom. All Rights Reserved

Software Release Notice
TimeProvider 5000
IEEE 1588 Grand Master Clock
Introduction
The TimeProvider 5000 is a purpose-built, carrier-class PTP (IEEE 1588-2008) Grand Master. It
utilizes hardware time stamping to deliver extremely precise timing and frequency for critical
applications such as synchronization of GSM and UMTS base stations operating over
packet-based IP/Ethernet networks.
This software release notice (SRN) describes the key features and known issues associated with
Version 1.1.8 of the Information Management Card (IMC) and Version 1.1.8 of the Input/Output
Clock Card (IOC) of the TimeProvider 5000 Grand Master Clock.
Notes
Serial port settings are 57600 baud, 8N1, Flow Control None.
After configuring IP and VLAN parameters, be sure to use the CLI command to restart the IP
interface in order to apply the changes. It is recommended that the settings be verified with
the show ip status command.
In the port redundancy mode (bonded), the configuration from IOC Ethernet port 1 will be
used for both ports.
In the port redundancy mode (bonded), the same type of SFP (multi-mode, single-mode, or
electrical) must be installed in both IOC ports. Symmetricom highly recommends that both
SFPs have the same performance specifications, especially timing characteristics.
For card redundancy, the configuration for IOC1 is used for both cards. The IOC1
configuration is also used if the system includes only one IOC which is installed in the IOC2
slot.
Parameter Default Value
CLI Administrator User Name: admin
Password: symmadmin**
IMC IP Address 192.168.0.100
IOC IP Addresses 192.168.1.11
192.168.2.11
Page 2 098-00029-000 Revision C October 2009
TimeProvider 5000, by default, uses IP addresses 172.16.250.8 through 172.16.250.47
internally. These addresses should not be used for external devices attached to the unit.
If using a gateway, then all IP interfaces and VLAN interface should be configured with the
proper gateway IP address. If not using a gateway, then configure the gateway address to
0.0.0.0.
During power-up and rebooting, messages will be displayed on the EIA-232 console port.
The messages are normal and should be ignored.
Both -48VDC power supply inputs should be connected to avoid generating -48V alarms.
PTP slaves (clients) should not send unicast negotiation requests faster than once every 10
seconds.
SNMP supports adding/deleting one row at a time for SNMP users, trap users, communities,
SNMP managers, and CLI users. This also includes multiple accesses to the TimeProvider
5000 from the same or different SNMP managers. Refreshing after making changes is
necessary.
If the IP interface is disabled, with the port in non-redundant mode, some PTP configurations
for that interface can't be set.
Upgrades use SCP for secure FTP transfer and therefore SSH firewall applies. Both SSH
and SFTP firewalls need to be allowed for upgrades.
TimeProvider 5000 IOC only supports full-duplex 100/1000 connections. Ethernet hubs are
half-duplex and therefore not supported.
For SNMPv3, the following protocols are supported:
Authentication: HMAC-MD5 and HMAC-SHA
Privacy: CBC-DES and CFB-AES128
For SNMPv3 traps, both a user and a trapuser need to be configured identically. In addition,
the manager should use the desired user to connect to the TimeProvider 5000. This will
ensure that a SNMPv3 trap will be successfully received by the manager using the
corresponding trapuser username.
The active IOC may switch during insertion of an IMC.
Modules should not be removed and inserted more frequently than once every 2 hours.
The number of SNMP managers and trapusers that are supported was reduced to 3 of each
in v1.1. When upgrading from v1.0 with more than 3 SNMP managers or trapusers
configured, only the first 3 will be used.
The TimeProvider 5000 only supports the active mode of FTP; it does not support the passive
(PASV) mode.
Upgrading from Versions Prior to 1.1.x
The following procedure must be followed when upgrading from previous version.
1. Upgrade the IOC with the following command, but don't reboot.
098-00029-000 Revision C October 2009 Page 3
upgr ade i oc1 <f i l ename> [ f t p: | sf t p: ] <f t p ser ver I P addr ess> <user name>
Example
For an SFTP server with IP address sftp:192.168.5.65, a user name of user1, and a
upgrade file named upgrades/ioc_upd.bin, the command is:
t p5000> upgr ade i oc1 upgr ades/ i oc_upd. bi n sf t p: 192. 168. 5. 65 user 1
When prompted, enter the password for the server.
2. Upgrade the IMC with the following command, but don't reboot the card by itself.
upgr ade i mc <f i l ename> [ f t p: | sf t p: ] <f t p ser ver I P addr ess> <user name>
Example
For an FTP server with IP address 192.168.5.66, a user name of user1, and an upgrade
file named upgrades/imc_upd.bin:
t p5000> upgr ade i mc upgr ades/ i mc_upd. bi n f t p: 192. 168. 5. 66 user 1
When prompted, enter the password for the server.
3. Reboot the IMC and IOC with the following command.
r eboot syst em
See user's guide for more information on commands
.
Summary of Features
Unicast IEEE 1588-2008 messages
PTP Static and Dynamic (unicast negotiation)
Free-run mode
External reference mode using E1 and 2048 kHz inputs
E1 and 2048 kHz outputs (new in release 1.1)
Note: The FTP firewall is set to Block by default. Use the following
command to set the IMC firewall to Allow for FTP:
set f i r ewal l i mc f t p al l ow
Note: For more details and alternative procedures to minimize output
disruption with redundant IOC cards, see the Upgrading section in
Chapter 6 of the User's Guide.
Page 4 098-00029-000 Revision C October 2009
Ports 1 and 2 on the I/O card can be configured as inputs or outputs (new in release 1.1)
GPS reference, using L1 antenna
Port redundancy
IOC card redundancy (new in release 1.1)
Command-line interface on serial port, SSH, and telnet
Authentication with RADIUS (now supports SSH in release 1.1)
Capacity of 33000 packets/second per port (increased in release 1.1)
Up to 500 PTP clients per port
VLAN support on IOC ports up to 16 different VLANs
DiffServ on PTP packets
IOC Ethernet port auto-negotiation can be configured (new in release 1.1)
SFP connectors on IOC - 100BT and 1000BT electrical.
SFP connectors on IOC - optical 1000BASE-LX 1000BASE-SX.
Upgrade from SFTP or FTP server
Dual -48VDC power supply connections.
Optional 10MHz, 1PPS outputs
Event log and command log
CLI and SNMP management
Firewall
Remote syslog
Optional PTP probe measurement capability (new in release 1.1)
Proxy capabilities to manage TimeProvider 500 (new in release 1.1)
Whats New in This Release
Resolved Issues
06259: SNMP alarm and event trap container OID did not match MIB.
24936: SNMP sysObjectID returned incorrect enterprise object identifier.
23950: Should create event when I/O card is inserted or removed.
23952: Add feature to page display for PTP show clients CLI command.
23982: SSH did not authenticate using RADIUS.
24042: Add display of software images in SNMP.
098-00029-000 Revision C October 2009 Page 5
24093: Should add display of IOC uptime in "show status".
Add capability for user to modify their own password.
24157: Some MIB Tables did not refresh correctly after making changes.
24219: Duplication of several rows of data had been observed with some MIB browsers when
using get bulk.
24220: The SNMP ptpClientTable may take up to an hour or more for 500 clients. Fewer than
200 clients will typically take less than 1 minute. May also impact SNMP Walk.
24250: Remote-syslog CLI command needs to be entered twice to be enabled.
24254: VLAN ID values greater than 999 did not display properly on CLI command show ip
status.
24825: An error message may be displayed on some SNMP browsers when a row, other than
the last row, is deleted from an SNMP table.
24458: Link status alarm is sometimes read incorrectly and generates extraneous alarms.
24460: E1 outputs generate occasional code errors - a bipolar violation is being generated
about every 500 frames. (E1 outputs were only available on a few Beta software builds.)
24670: Possible issues if SNMPv2 community and a SNMPv3 user have the same name.
24742: Some PTP delay requests would occasionally be dropped.
24851: Could not independently route the 2 Ethernet ports on the IOC. Release 1.0.6 would
only support a single gateway. Release 1.0.7 supports independent gateways for each port
and routes response packets correctly. However, for "ping" initiated on the TimeProvider
5000, only one default gateway will be used. "Ping" sent to the TImeProvider 5000 will be
responded to correctly.
24874: Disabling VLAN on one Ethernet port can block traffic on the other Ethernet port when
in non-redundant mode.
24902: When changing the VLAN configuration, sometimes PTP operation is interrupted.
This usually occurs if many VLANs have been configured.
24924: SNMP get-bulk sometimes did not return correct data.
24925: Should add implementation to protect SNMP PTP client table data during reads.
25096: Events were sent as SNMP alarm traps rather than event traps.
25198: System sometimes did not recover from holdover for large offsets.
25271: ClockAccuracy and timeSource fields in PTP message had incorrect values in sys
mode (non-GPS).
Page 6 098-00029-000 Revision C October 2009
25280: In non-GPS mode, 1PPS output may have jumped during boot-up process of
newly-installed IMC.
25314: Restore to factory configuration did not remove existing configuration of SNMP
manager, user, trap-user, and v2-community.
25317: Restore of IMC configuration from configuration stored in IOC did not remove existing
configuration of SNMP manager, user, trap-user, and v2-community.
25337: If optical SFP was replaced by an electrical SFP, then the Ethernet port didn't link at
100M.
Known Issues
23909: SNMPv3 improper HMAC-validation allows authentication bypass. See
http://www.kb.cert.org/vuls/id/878044
Workaround: Attach IMC Ethernet port to protected network.
25268: IP address of standby card could be different from active card. If the IP address is
changed, and the IP interface is not restarted, and one IOC is rebooted, then the standby
card will have the new configuration and the active card will have the old configuration.
Workaround: Restart the IP interface after configuring an IP interface.
25247: The SNMP ethAutoNegState, in ethAutoNegTable, sometimes takes several seconds
to update after being changed.
Workaround: Wait 20 seconds after changing the setting before reading.
25390: SSH authentication may not complete if public key has been configured on the SSH
client. The TP5000 only supports SSH password authentication.
Workaround: Remove public/private keys for the user running the SSH client.
Using the Release CD
To launch the CD for Microsoft Windows, insert the CD into your computers CD-ROM drive, then
do the following:
In Windows Explorer, double-click on the PDF documentation file for your product.
Available Documentation for Setup and Configuration
Software Release Notice (this document, 098-00029-000)
TimeProvider 5000 User's Guide (098-00028-000)
SNMP MIBs
This Software Release Notice and the Users Guide are included in PDF format on the CD. Use
Adobe Acrobat Reader to open the appropriate file on the CD.
098-00029-000 Revision C October 2009 Page 7
You will need the version of Adobe Acrobat Reader that is appropriate for your Operating System
to view and print these documents. If you dont have Acrobat Reader already installed on your
system, you can install it from the CD or download it from Adobes Web site
(http://www.adobe.com).
Where to Find Installation Procedures
Please refer to the TimeProvider 5000 Users Guide for instructions for installing and updating
the software.
Contacting Technical Support
If you encounter any difficulty installing the update or operating the product, contact
Symmetricom Global Services at:
U.S.A. Call Center:
including Americas, Asia, and Pacific Rim
Symmetricom, Inc.
2300 Orchard Parkway
San J ose, CA 95131-1017
Toll-free in USA: 888-367-7966 (1-888-FOR-SYMM)
Telephone: 408-428-7907
Fax: 408-428-7998
E-mail: support@symmetricom.com
Internet: http://www.symmetricom.com
Europe, Middle East, and Africa (EMEA) Call Center:
Symmetricom Global Services EMEA
Altlaufstrasse 42
85635 Hoehenkirchen-Siegertsbrunn
Germany
Telephone: +49 700 3288 6435
Fax: +49 8104 662 433
E-mail: emeasupport@symmetricom.com
Internet: http://www.symmetricom.com