lms052_ap_01

8/6/2019 lms052_ap_01

1/152

LMS8000 / LMS4000Managing the Network

lms052_ap_01

8/6/2019 lms052_ap_01

2/152

8/6/2019 lms052_ap_01

3/152

lms052_ap_01 i

Preface

Conventions

The following conventions are used throughout this document:

WARNING!

Whenever you see this icon and heading, the associated text

addresses or discusses a critical safety or regulatory issue.

CAUTION: Whenever you see this icon and heading, theassociated text discusses an issue, which, if not followed, could

result in damage to, or improper use of, the equipment or

software.

TIP: Whenever you see this icon and heading, the associated

text provides a tip for facilitating the installation, testing, or

operation of the equipment or software.

Regulatory Notices

LMS8000 / LMS4000 devices have been designed to operate with several different antenna

types. The gain of each antenna type must not exceed the maximum antenna system gain

given in the installation manuals for your LMS8000 / LMS4000 equipment. Antennas having a

higher gain are strictly prohibited by Industry Canada and FCC regulations. The required

antenna impedance is 50 ohms.

Industry Canada

LMS8000 / LMS4000 devices have been certified with Industry Canada for operation

in Canada. See the installation manual for your LMS8000 / LMS4000 equipment for

certification details.

Operators must be familiar with IC RSS-210 and RSS-102. The CCU and EUM have

been designed and manufactured to comply with IC RSS-210 and RSS-102.

8/6/2019 lms052_ap_01

4/152

ii lms052_ap_01

Federal Communications Commission

LMS8000 / LMS4000 devices have been designed and manufactured to comply with

FCC Part 15. See the installation manual for your LMS8000 / LMS4000 equipment

for certification details.

Operators must be familiar with the requirements of the FCC Part 15 Regulations priorto operating any link using this equipment. For installations outside the United States,

contact local authorities for applicable regulations.

Warnings and Advisories

Operator and maintenance personnel must be familiar with the related safety requirements

before they attempt to install or operate the LMS8000 / LMS4000 equipment.

It is the responsibility of the operator to ensure that the public is not exposed to excessive

Radio Frequency (RF) levels. The applicable regulations can be obtained from local

authorities.

Getting Support

An extensive knowledge base is available at www.wr.vecimasupport.com. Visit the web page

to:

Get the latest announcements from Vecima Networks.

Download product related software, manuals, application notes, or other information about

the WaveRider product line.

Consult the KnowledgeBase for troubleshooting information.

Register and contact technical support to help you with unexpected problems.

Training

Vecima offers a complete training program. Please contact you sales representative for training

information.

Priority support

Vecima also offers priority telephone and email support. Please contact your sales

representative for details.
http://www.wr.vecimasupport.com/http://www.wr.vecimasupport.com/

8/6/2019 lms052_ap_01

5/152

lms052_ap_01 iii

Contents

Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .i

1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

1.1 Document Scope . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

1.2 LMS8000 / LMS4000 Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

2 Configuring the CCU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

2.1 Serial Number, MAC Address, and Station ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

2.2 Setting the CCU Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

2.3 Configuring the CCU RF Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

2.4 Configuring CCU Protocol Modes and IP Addresses . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.4.1 Configuring Routed Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.4.2 Configuring Switched Ethernet Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2.4.3 Configuring Through Only Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2.5 Configuring DHCP Relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

2.6 Configuring Port Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

2.7 Configuring the SNTP UTC Time Clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

2.8 Configuring SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

2.9 Configuring VoIP Detection and Priority Classification . . . . . . . . . . . . . . . . . . . . . . . . 22

2.10 Adding EUMs to the Authorization Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

2.11 Configuring the CCU RADIUS Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

3 Configuring the EUM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

3.1 Setting the EUM Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

3.2 Configuring the EUM RF Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

3.3 Configuring EUM IP Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

3.4 Configuring Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

3.5 Configuring Port Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

3.6 Configuring SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

3.7 Configuring the Customer List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

4 Configuring a DHCP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

4.1 CCU DHCP Relay and Relay Agent Information Option. . . . . . . . . . . . . . . . . . . . . . . 38

4.2 EUM DHCP Client. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

5 Configuring a RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

5.1 RADIUS Authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

5.2 RADIUS and Autoconfiguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

5.3 RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

5.4 RADIUS Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

5.4.1 Vecima-Grade-of-Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

5.4.2 Vecima-Priority-Enabled . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

5.4.3 Vecima-Authentication-Key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

5.4.4 Vecima-Current-Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

5.4.5 Vecima-New-Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

5.4.6 Vecima-Radio-Frequency . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-

8/6/2019 lms052_ap_01

6/152

lms052_ap_01 iv

5.4.7 Vecima-SNMP-Read-Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

5.4.8 Vecima-SNMP-Write-Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

5.4.9 Vecima-SNMP-Trap-Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

5.4.10 Vecima-SNMP-Contact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

5.4.11 Vecima-SNMP-Location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

5.4.12 Vecima-SNMP-Name (and Prompt) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

5.4.13 Vecima-Max-Customers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475.4.14 Vecima-Rf-Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

5.4.15 Vecima-Downlink-Min-Modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

5.4.16 Vecima-Downlink-Max-Modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

5.4.17 Vecima-Uplink-Min-Modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

5.4.18 Vecima-Uplink-Max-Modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

5.5 RADIUS Server Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

5.5.1 RADIUS Packet Transmission . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

6 Spectrum Analyser . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

7 Monitoring the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

7.1 Radio Received Signal Strength and Quality . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

7.2 CCU Transmit Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 647.3 CCU Receive Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

7.4 CCU Watch Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

7.5 EUM Transmit Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

7.6 EUM Receive Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

7.7 User Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

7.8 Logging CCU or EUM Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

7.9 CCU Registration (Air) Table Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

7.10 CCU Radio Meter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

8 Upgrading the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

8.1 Field Upgrade Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

8.2 FTPing CCU and EUM Configuration Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

Appendix A Operating Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

Appendix B CCU/EUM Data Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

Appendix C Access Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

Appendix D Windows Ping Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139

8/6/2019 lms052_ap_01

7/152

lms052_ap_01 v

Tables

Table 1 Modulation Scheme Names and Numbers . . . . . . . . . . . . . . . . . . . . . . . . . 24

Table 2 FreeRADIUS Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Table 3 FreeRadius dictionary File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51Table 4 FreeRadius dictionary.waverider File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Table 5 FreeRadius clients File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Table 6 FreeRadius users File Example Entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Table 7 Example - RADIUS Access Request . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Table 8 Example - RADIUS Access Response . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Table 9 Radio Analyser Configuration Parameters . . . . . . . . . . . . . . . . . . . . . . . . . 57

Table 10 LMS4000 Signal Quality Troubleshooting Guide . . . . . . . . . . . . . . . . . . . . 63

Table 11 Possible Transmission Outcomes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

Table 12 Typical CCU Receive Statistic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69Table 13 EUM Transmit Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

Table 14 FTPing Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Table 15 Ethernet Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

Table 16 Radio Driver Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Table 17 Radio Link Monitor Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

Table 18 DPMAC Interface Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87

Table 19 LMS8000 Radio RSSI Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

Table 20 LMS4000 Radio RSSI Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94

Table 21 Received Signal Strength Figure of Merit . . . . . . . . . . . . . . . . . . . . . . . . . . 96Table 22 Received Signal Quality Figure of Merit . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Table 23 Radio Modulation Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Table 24 Routing/Bridging Protocol Statistics for CCU in Routed Mode . . . . . . . . . . 99

Table 25 Routing/Bridging Protocol Statistics for CCU in Switched Ethernet or Through

Only Mode 99

Table 26 Routing/Bridging Protocol Statistics for EUM . . . . . . . . . . . . . . . . . . . . . . 100

Table 27 Common Routing/Bridging Protocol Statistics . . . . . . . . . . . . . . . . . . . . . 101

Table 28 RADIUS Client Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Table 29 Authorization Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106

Table 30 Network Interface Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

Table 31 Load Statistics (Radio Meter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

Table 32 CCU Watch Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

Table 33 System Log Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

Table 34 Port Filter Table Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118

Table 35 Basic Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

8/6/2019 lms052_ap_01

8/152

vi lms052_ap_01

Table 36 Routing Table Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

Table 37 Numeric Routing Table Flags. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

Table 38 Non-numeric Routing Table Flags. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

Table 39 ARP Table Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122

Table 40 Registration Table Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

Table 41 ARP MAP Table Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126

Table 42 Bridge Table Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128

Table 43 Serial Port Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134

Table 44 Windows Ping Test Command Options . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

8/6/2019 lms052_ap_01

9/152

lms052_ap_01 1

1 Introduction

The LMS8000/LMS4000 900 MHz Radio Network provides wireless high-speed Internet

connectivity to business, SOHO (small office, home office) and residential customers.LMS8000/LMS4000 operates in a point-to-multipoint configuration, with one base station

efficiently serving many subscriber stations. LMS8000/LMS4000 transmission is based on a

high-performance MAC protocol, and industry-standard IP routing, Ethernet switching and

data encryption technology. No radio license is required, since LMS8000/LMS4000 operates

in the 900 MHz ISM band. LMS8000/LMS4000 can deliver Internet service over long ranges

and often where the radio paths between the base station and subscribers are partially or even

totally obscured, that is, non-line-of-sight. Connection between the end-users computer and

the subscriber station is through an Ethernet port.

1.1 Document Scope

LMS4000 Managing the Networkprovides information for the system operator to configure,

monitor and manage LMS8000 / LMS4000 900 MHz networks. Related information can be

found in the suite of available LMS8000 / LMS4000 manuals, which includes the following:

LMS8000/LMS4000 Data Networking Concepts

LMS8000/LMS4000 Radio Networking Concepts

LMS8000/LMS4000 SNMP Reference Manual

LMS8000/LMS4000 CLI Reference Manual

LMS8000/LMS4000 Feature Support Matrix

NOTE: Individual manuals for hardware elements, including EUMs and

CCUs, can be found on Vecimas Web site.

This manual describes the LMS8000 / LMS4000 system as of versions 7.0, 11.3, 20.4, 30.1

and 40.1 of the EUM/CCU software. See LMS8000/LMS4000 Feature Support Matrixfor

which versions apply to which models.

8/6/2019 lms052_ap_01

10/152

8/6/2019 lms052_ap_01

11/152

1: Introduction

lms052_ap_01 3

License-free Radio Bands: The main advantage of using the ISM band is that you

need not apply to the FCC or Industry Canada for an operating license. This freedom

reduces your time to market and the effort and high cost associated with obtaining a

license.

Secure Authentication and User Data Encryption: For the LMS4000 network, only

EUMs authorized by the CCU can access the wireless network. Mutual authentication

of EUM and CCU is handled using the secure 4-way handshake mechanism of WPA2.All user data flowing over the air can be encrypted using the industry standard

IEEE802.11 TKIP cypher. Traffic to and from each EUM is encrypted using a key

specific to that EUM, ensuring message integrity and privacy for each user.

RADIUS Support: The LMS system supports RADIUS Authorization and RADIUS

Accounting for EUM registration, configuration and accounting.

Robust Hardware and Software: LMS hardware and software have been rigorously

tested in lab and field environments. The hardware, which is mechanically robust,

works over a broad range of temperatures and operating conditions. The software is

equally robust and has been designed to recover automatically from unplanned

events and abnormal operating conditions.

Automatic End-user Modem Configuration: The end-user modem (EUM) can beautomatically configured through DHCP and RADIUS. Out of the box, the EUM will

discover the best frequency and CCU and obtain IP, SNMP and configuration

parameters from the network. Configuration changes can be made centrally, without

contacting individual modems.

Simple End-user Modem Installation and Operation: It is very easy to install and

operate the EUM. The outdoor EUM can be quickly and easily installed by a single

person. The EUM uses a standard Ethernet interface which means it can be located

up to 100 meters from the end-users PC.

Flexible Network Topology: The LMS 900MHz Radio Network has a flexible

topology, allowing it to line up with the operators existing Internet points of presence

and site facilities. It supports a connection between the end-user modem and the

Internet through the network operators gateway router and optionally a directconnection between end-user modems through the LMS 900MHz channel units

(CCUs) or connection between end-user modems on different CCUs.

Multiple IP Subnets: In routed mode, the CCU supports up to eight IP subnets on the

radio side. This capability facilitates the delivery of Open Access applications, where

the system operator can support multiple ISPs, each concurrently delivering service to

their customers EUMs and PCs over the operators LMS facilities. A mix of public and

private IP address ranges can be supported, saving limited public IPs.

Bundling: Bundling, or payload aggregation, improves efficiency and allows for

multiple simultaneous VoIP calls per EUM as well as error recovery. Multiple small

Ethernet frames are bundled together as one radio transmission, reducing overhead

and increasing capacity.

DHCP Relay: CCUs support DHCP relay, which, once enabled, allows end-user PCs

to automatically obtain their IP and DNS server addresses from the network operators

DHCP servers. DHCP relay simplifies the EUM installation even further and makes it

easier for the modem to be installed by the end user.

The CCU supports Relay Agent Information option (RFC3046), which allows

operators to assign IP addresses to PCs based on the EUM to which they are

attached and facilitates the delivery of Open Access applications.

8/6/2019 lms052_ap_01

12/152

4 lms052_ap_01

1: Introduction

VLAN Transparency: The LMS system passes VLAN-tagged Ethernet frames

transparently, including packets up to 1522 bytes in length.

Port Filtering: The network operator can configure CCUs and EUMs to filter IP

packets on specific TCP and UDP ports to improve network performance, security,

and privacy.

Remote System Configuration and Diagnostics: The network operator can

configure and monitor CCUs and EUMs from anywhere. This remote access allows

the operator to make configuration changes, download new features, and diagnose

problems remotely without having to visit distant network sites or end-user premises.

Spectrum Analyser: The CCU and EUM Spectrum Analyser tool is very useful for

site surveys, installation and troubleshooting. It provides an indication of signal level

and interference from external sources and from frequency re-use. The radio

analyse command steps across the 900 MHz ISM frequency band measuring peak,

average and noise floor powers.

SNMP Support: Using Vecima-supplied SNMP MIBs, network operators can

integrate the LMS with their existing network management system to allow monitoring

of CCUs and EUMs from an existing and/or centralized SNMP manager. The operator

can monitor system events, parameters, and statistics in real time. Statistics can beprocessed in the SNMP manager to provide alarms, trend data, graphical outputs, and

derived performance data.

Accurate Time Stamping (SNTP): The CCUs and EUMs can be programmed to

synchronize their internal clocks with one or more NTP servers. Time stamping

enables all logged events in the CCUs and EUMs to be correlated with events that

have taken place at other locations in the network or with events logged by equipment

installed outside the network, if this equipment is equipped with accurate time-

stamping. Accurate time-stamping facilitates diagnosis of complex network problems.

Field-replaceable Equipment: In the event of an equipment failure, LMS

components are easily replaced with minimal or no disruption to the operation of other

components.

System Upgradability: The LMS network architecture supports orderly growth from

simple installations, through single-CCU CAP (Communication Access Point) sites

and multi-CCU CAP sites, to multi-CAP networks.

Low Maintenance: CCUs and EUMs require no routine maintenance, other than

maintenance of their operating environments within the specified temperature and

humidity range.

8/6/2019 lms052_ap_01

13/152

1: Introduction

lms052_ap_01 5

Extensive Installation, Maintenance and Diagnostic Support: The CCU and EUM

are equipped with a wide range of features and utilities to facilitate unit installation,

operation, maintenance, monitoring, and diagnostics:

Visual status indicators

Simple-to-use command-line interface, offering full unit configuration

capability

Automatic EUM configuration through DHCP and RADIUS. RSSI (receive signal strength indication) and SQ (receive signal quality)

output, to simplify antenna pointing and performance indication.

MDB1000 Antenna pointing tool.

Ability to remotely FTP files to and from CCUs and EUMs

Wide range of operating and performance statistics

SNMP support

RADIUS authorization and accounting

Simple and reliable field-upgrade process

Remote download of equipment configuration files to CCUs and EUMs

Your decision to implement an LMS8000 / LMS4000 900MHz Radio Network enables you todeliver high-quality, high-speed wireless Internet service to the business and residential

subscribers in your serving area.

8/6/2019 lms052_ap_01

14/152

This page is intentionally left blank

8/6/2019 lms052_ap_01

15/152

lms052_ap_01 7

2 Configuring the CCU

This section explains the following procedures and topics:

Serial Number, MAC Address, and Station ID, on page 8

Setting the CCU Password, on page 8

Configuring the CCU RF Parameters, on page 9

Configuring CCU Protocol Modes and IP Addresses, on page 11

Configuring DHCP Relay, on page 15

Configuring Port Filtering, on page 17

Configuring the SNTP UTC Time Clock, on page 18

Configuring SNMP, on page 20

Configuring VoIP Detection and Priority Classification, on page 22Adding EUMs to the Authorization Table, on page 23

Configuring the CCU RADIUS Client, on page 26

Before you configure the CCU

Familiarize yourself with the CLI commands, syntax and shortcuts, outlined in

LMS8000/LMS4000 CLI Reference Manual. This document provides a complete list of

the available CCU commands, some of which are not discussed in this section.

Start a command line session as outlined in Appendix C.

CAUTION: Remember to regularly entersave orcommit andpress Enter,to save your configuration changes to the file system.

As well, some parameters and configuration files (refer to

LMS8000/LMS4000 CLI Reference Manualfor details) do not take

effect until you reboot the unit, specifically the RF frequency and

IP addressing.

8/6/2019 lms052_ap_01

16/152

8 lms052_ap_01

2: Configuring the CCU

2.1 Serial Number, MAC Address, and Station ID

The product ID, serial number, station ID, and Ethernet and radio MAC addresses, are related:

Product ID: The product ID is the 14-character string just below the bar code on the

product label, which is affixed to the case of the unit, for example:

CCU8000KA01A739510131

Serial Number: The serial number is the last six characters of the product ID. In the

above example, the serial number is:

510131

Station (CCU or EUM) ID: The station ID is similar to the serial number, with colons

inserted. The most significant bit of the first number is always clear, so if the serial

number begins with E then the station ID starts with 6. In the above example, the

station ID, in hexadecimal notation, is:

51:01:31

Ethernet MAC Address: The Ethernet MAC address is derived by prefacing the

station ID with the characters 00:90:C8. In the above example, the Ethernet MAC

address is:

00:90:C8:51:01:31

Radio MAC Address (CCU only): The radio MAC address is derived by prefacing the

station ID with the characters 00:90:C8 and setting the most significant bit of the 4th

byte. In the above example, the radio MAC address is:

00:90:C8:D1:01:31

2.2 Setting the CCU Password

To Change the CCU Password

1. Typepasswordand press Enter.

2. At the Enter Current Password prompt, type the old password.

TIP: Passwords are alphanumeric and case-sensitive. For

example, abc is not the same as aBc. The CCU is shipped

from the factory with no password - just press Enter.

3. At the Enter New Password prompt, type the new password.

4. At the Verify password prompt, type the new password again.

The system displays a message that your password has been successfully changed.

Example:

51:00:3f*CCU2>password

8/6/2019 lms052_ap_01

17/152


lms052_ap_01 9

Enter Current Password: ********

Enter New Password: ********

Verify password: ********

Saving new password

Password Changed

51:00:3f*CCU2>

CAUTION: Remember to record the password. Unlocking the

CCU can only be performed by contacting Vecima Technical

Support.

2.3 Configuring the CCU RF Parameters

To Set the CCU Operating Frequency

1. Type radio frequency and press Enter.

is the CCU operating frequency in tenths of a MHz. For example,

917.0 MHz is entered as 9170.

2. Type save orcommit and press Enter.

3. Before the new radio frequency will take effect, you must reboot the CCU by typing

reset and pressing Enter.

To Set the CCU Maximum Transmit Power Level

The power level does not include antenna system gain.

1. Type radio rf and press Enter. is the CCU

maximum transmit power level, either:

the desired power level, in dBm, any integer value in the range 15 - 26inclusive,

high (+26 dBm), or

low (+15 dBm).

For example, radio rf 22 will set the RF output power to +22 dBm.

NOTE: Use the HIGH power level unless your site has unique

requirements for which a numerically set power level, or the LOW

power level, is more appropriate. For example, the capability to

numerically set the power level may be useful in high-density

environments, where site-to-site interference is a problem.


To Set the CCU Antenna Diversity Mode

Models that support antenna diversity control1 and a diversity antenna allow setting which

antenna will be used to receive and transmit on. You can set it to receive on only one antenna

1. SeeAPCD-LM057 Feature Support Matrix for antenna diversity control support.

8/6/2019 lms052_ap_01

18/152

10 lms052_ap_01


or the other (A or B), or, for models that have an active polarization diversity antenna, to select

the best antenna to receive on on a per packet basis based on signal quality (diversity).

Similarly, you can set it to transmit on only one antenna or the other (A or B) or to transmit on

the antenna that last received a good packet (diversity).

NOTE: In the case of a CCU which has multiple EUMs registered,

transmit should be set to just one antenna, as it is likely that it istransmitting to a different EUM than it just received from.

1. Type radio diversity and press Enter.

is A | B | diversity and controls which antenna will be used to

receive packets.


transmit packets.

For example, radio diversity diversity A will use receive diversity, but

transmit on antenna A.

NOTE: For the integrated high-gain polarization diversity antenna, the Aantenna is polarized perpendicular to the long axis of the unit and

the B antenna is polarized parallel to the long axis of the unit.

Adaptive Modulation control for the CCU is set individually for each EUM or as a default. See

Adding EUMs to the Authorization Table, on page 23.

The following example

Sets the CCU operating frequency to 917 MHz,

Sets the transmit power level to high,

NOTE: Changes to the transmit power level take effect immediately, theydo not require a CCU reboot.

Saves the new settings,

Reboots the CCU so that the new parameters take effect, and

Displays the CCU RF parameters.

51:00:3f*CCU2>radio frequency 9170

Radio Frequency: 9170

51:00:3f*CCU2>radio rf high

Max RF Power: 26 dBm

51:00:3f*CCU2>save

Basic Config saved

Port Filter Config savedNetwork Configuration saved

Authorization Database saved

51:00:3f*CCU2>reset

rebooting ...

(... Power On Self Test ...)

Password:

8/6/2019 lms052_ap_01

19/152


lms052_ap_01 11

51:00:3f*CCU2> radio


Radio Frequency: 9170

2.4 Configuring CCU Protocol Modes and IP Addresses

This section explains how to configure the CCU to use Routed, Switched Ethernet, or Through

Only mode.

InAPCD-LM050 LMS4000 Data Networking Concepts, you determined the following:

CCU Protocol Mode

CCU gateway IP address

CCU radio IP address(es) and subnet mask(s)

CCU Ethernet IP address and subnet mast (Routed Mode only)

2.4.1 Configuring Routed Mode

NOTE: The CCU gateway IP address must be on either the Ethernet or a

radio IP subnet, as explained inAPCD-LM050 LMS4000 Data

Networking Concepts.

CAUTION: All IP addresses should be confirmed when

changing protocol modes, otherwise unexpected results may

occur.

To Configure the CCU to Operate in Routed Mode

1. Typeprotocol routedand press Enterto set the CCU to routed mode.

51:00:3f*CCU2>protocol routed

Routed Mode

2. Type ip radio and press Enterto set the

CCU primary radio IP address and subnet mask.

is the CCU radio IP address.

is the number of bits set in the net mask (1 to 32).

CAUTION: The CCU only accepts subnet masks using the

shorthand notation; for example, it accepts 16, but not

ffff0000 or 255.255.0.0.

51:00:3f*CCU2> ip radio 172.16.6.1 22

Radio:

8/6/2019 lms052_ap_01

20/152

12 lms052_ap_01


IP Address: 172.16.6.1 / 22

IP Subnet : 172.16.4.0 ( 255.255.252.0 )

3. Type ip add and press Enterto set each

secondary radio IP address and subnet mask.

is the CCU radio IP address.


51:00:3f*CCU2>ip add 11.1.2.3 26

Added IP Address: 11.1.2.3 / 26

Added IP Subnet : 11.1.2.0 ( 255.255.255.192 )

4. Type ip ethernet and press Enterto set

the CCU Ethernet address.

is the CCU Ethernet IP address.


51:00:3f*CCU2>ip ethernet 192.168.10.8 24

Ethernet:

IP Address: 192.168.10.8 / 24

IP Subnet : 192.168.10.0 ( 255.255.255.0 )

5. Type ip gateway and press Enterto set the

CCU gateway IP address.

51:00:3f*CCU2>ip gateway 192.168.10.9

Gateway Route changed

Gateway IP Address: 192.168.10.9

6. Type save and press Enterto save the new settings.

51:00:3f*CCU2>save

Basic Config saved

Port Filter Config saved

Network Configuration saved


7. Type reset and press Enterto reboot the CCU.

51:00:3f*CCU2>reset

rebooting ...

8. On reset, typeprotocol and press Enterto display the protocol mode.

51:00:3f*CCU2>protocol

Routed Mode

9. Type ip and press Enterto display the ip addresses.

51:00:3f*CCU2>ip

Ethernet:

IP Address: 192.168.10.8 / 24

IP Subnet : 192.168.10.0 ( 255.255.255.0 )

Radio:

IP Address: 172.16.6.1 / 22

IP Subnet : 172.16.4.0 ( 255.255.252.0 )

IP Address: 11.1.2.3 / 26

IP Subnet : 11.1.2.0 ( 255.255.255.192 )


8/6/2019 lms052_ap_01

21/152


lms052_ap_01 13

You must also configure all EUMs and subscriber PCs connected to the CCU to have IP

addresses on the appropriate radio IP subnet, and have the corresponding CCU radio IP

address as their gateway. DHCP is an excellent method to do this.

2.4.2 Configuring Switched Ethernet Mode

To Configure Switched Ethernet Mode

1. Typeprotocol switchedand press Enterto set the CCU to Switched Ethernet

mode.

51:00:3f*CCU2>protocol switched

Switched Ethernet Mode


the CCU IP address.

is the CCU IP address

is the CCU IP subnet mask

51:00:3f*CCU2>ip ethernet 192.168.10.8 24Ethernet:

IP Address: 192.168.10.8 / 24

IP Subnet : 192.168.10.0 ( 255.255.255.0 )


CCU gateway to be the gateway router.

is the CCU gateway IP address

is the CCU gateway IP address subnet mask

51:00:3f*CCU2>ip gateway 192.168.10.9



4. Type save and press Enterto save the new settings.51:00:3f*CCU2>save

Basic Config saved





51:00:3f*CCU2>reset

rebooting ...



Switched Ethernet Mode


51:00:3f*CCU2>ip

Modem:

IP Address: 192.168.10.8 / 24

IP Subnet : 192.168.10.0 ( 255.255.255.0 )


8/6/2019 lms052_ap_01

22/152

14 lms052_ap_01



addresses on IP subnets corresponding to addresses on the gateway router interface, and

have the corresponding gateway router IP address as their gateway. DHCP is an excellent

method to do this.

2.4.3 Configuring Through Only Mode

The following procedure demonstrates how to configure Through Only mode.

To Configure Through Only Mode

1. Typeprotocol through and press Enterto set the CCU to Through Only mode.

51:00:3f*CCU2>protocol through

Through Only Mode


the CCU IP address.

is the CCU radio IP address

is the CCU radio IP address subnet mask

51:00:3f*CCU2>ip ethernet 192.168.10.8 24

Ethernet:

IP Address: 192.168.10.8 / 24

IP Subnet : 192.168.10.0 ( 255.255.255.0 )


CCU IP address.

is the CCU gateway IP address, which is also the IP

address of the gateway router

is the CCU radio IP address subnet mask

51:00:3f*CCU2>ip gateway 192.168.10.9



4. Type save and press Enterto save the new settings.

51:00:3f*CCU2>save

Basic Config saved





51:00:3f*CCU2>reset

rebooting ...



Through Only Mode


51:00:3f*CCU2>ip

Modem:

8/6/2019 lms052_ap_01

23/152


lms052_ap_01 15

IP Address: 192.168.10.8 / 24

IP Subnet : 192.168.10.0 ( 255.255.255.0 )



addresses on IP subnets corresponding to addresses on the gateway router interface, and

have the corresponding gateway router IP address as their gateway. DHCP is an excellent

method to do this. Note that in Through Only mode, subscriber to subscriber communicationwill require special forwarding in the gateway router.

2.5 Configuring DHCP Relay

To configure DHCP relay

Determine the DHCP server IP address.

Determine the Relay Agent Information Circuit ID for this CCU, if RAI is desired.

Enable DHCP Relay.

Add the DHCP server(s) to the CCU.

Optionally filter Ethernet side requests.

To Enable DHCP Relay

1. Type dhcp enable and press Enter.


To Add a DHCP Server

1. app Series: Type dhcp relay add [ccuid]ccu Series: Type dhcp relay add [ccuid]

and press Enter.

is the IP address of the DHCP server you want to add.

is the net mask of the DHCP server. This is only used with the

app series of executable image - see APCD-LM057 Feature Support Matrix.

Omit for all other models.

[ccuid] is a string identifying this CCU to the DHCP server. It is used as the

Agent Circuit ID in the Relay Agent Information Option. If you leave [ccuid]

blank for a particular server, the Relay Agent Information Option is not added

when it is relayed to that server. If [ccuid] is filled in, the Relay Agent

Information Option is added. Refer to LMS8000/LMS4000 CLI Reference

Manualfor more information.

2. Repeat step 1 for any alternate DHCP servers in your network. Vecima recommends

that your network have at least one alternate DHCP server.


8/6/2019 lms052_ap_01

24/152

16 lms052_ap_01


To Filter Ethernet Port DHCP Requests

By default, requests received from either the radio or Ethernet ports are relayed to the DHCP

servers. If you do not want requests received on the Ethernet port (that is, from hosts on the

Ethernet port side of the CCU) to be relayed, you can enable filtering on the Ethernet port.

1. Type dhcp relay filter enable and press Enter.



Enables DHCP relay

Adds a DHCP server with IP address 192.168.50.1 with no circuit id (RAI will not be

added)

Adds an alternate DHCP server with IP address 192.168.50.15 and circuit id myCCU

Filters out requests from the Ethernet side

Saves the new settings

Displays the DHCP status

51:00:3f*CCU2>dhcp enable

DHCP Relay Enabled for clients on the Ethernet Interface.

DHCP Relay Enabled for clients on the Radio Interface.

51:00:3f*CCU2>dhcp relay add 192.168.50.1

DHCP Relay Server Table:

IP Address . . . . . : 192.168.50.1

51:00:3f*CCU2>dhcp relay add 192.168.50.15 myCCU


IP Address . . . . . : 192.168.50.1

IP Address . . . . . : 192.168.50.15

Circuit Id . . . . . : myCCU

51:00:3f*CCU2>dhcp relay filter enable

DHCP Relay Disabled for clients on the Ethernet Interface.


51:00:3f*CCU2>save

Basic Config saved




51:00:3f*CCU2>dhcp relay

DHCP Relay Disabled for clients on the Ethernet Interface.



IP Address . . . . . : 192.168.50.1

IP Address . . . . . : 192.168.50.15

Circuit Id . . . . . : myCCU

8/6/2019 lms052_ap_01

25/152


lms052_ap_01 17

2.6 Configuring Port Filtering

The port filter table is described in Port Filter Table (CCU and EUM) on page 117. To add a

port filter

Determine the port number you want to filter. Determine whether you want to filter UDP, TCP, or both types of packets.

Add the port filter to the CCU.

To Add a Port Filter

1. Typeport add and press Enter.

is the number of the port you want to filter.

is the type of IP packet you want to filter, eitherudp, tcp, or

both.

2. Repeat step 1 for any other ports that you want to filter out.


CAUTION: Dont add port 23 TCP or you will block telnet access

to the CCU.


Configures the CCU to filter both UDP and TCP packets on ports 137, 138, 139, 445

and 1512,

Saves the new settings, and

Displays the TCP/UDP port filters.

51:00:3f*CCU2>port add 137 both

Port added


Port added


Port added


Port added


Port added

51:00:3f*CCU2>save

Basic Config saved




51:00:3f*CCU2>port

PORT FILTERS

Port Filter

---------------------------------

137 both

138 both

139 both

445 both

1512 both

8/6/2019 lms052_ap_01

26/152

18 lms052_ap_01


----------------------------------

The CCU factory default settings have ports 137, 138, 139, 445, and 1512 filtered out for both

TCP and UDP, to prevent Network Neighborhood from seeing other end users computers.

NOTE: These factory defaults are stored in the supplied port.cfg file.

Windows Vista uses several other ports (UDP 3702, TCP 5357, and TCP 5358), but as these

are officially ephemeral ports also used by other protocols, blocking them may have

unexpected and difficult to diagnose effects.

2.7 Configuring the SNTP UTC Time Clock

Configuring the SNTP UTC Time Clock involves the following procedures, each of which is

explained in detail on the following pages:

Add an NTP server, if the one to which you want the CCU to synchronize has notalready been added. NTP servers are accessed in the order listed.

Enable the SNTP client, to force the CCU to synchronize to an NTP server.

Enable the SNTP relay, if you want the EUMs to be synchronized to the CCU.

To Add an NTP Server

1. Type time server add and press Enter.

is the IP address of the NTP server you are adding.


51:00:3f*CCU2>time server add 10.0.0.1Added

NTP Servers:

192.168.0.201

10.0.0.1

51:00:3f*CCU2>save

Basic Config saved




NOTE: It is a good idea to ping the time servers from the CCU before

adding them, to ensure you have connectivity. Note that not all

NTP servers will respond to pings.

To Enable the SNTP Client

Enabling the time client on the CCU causes the CCU to get the time from the server on a

regular basis.

1. Type time client enableand press Enter.


8/6/2019 lms052_ap_01

27/152

8/6/2019 lms052_ap_01

28/152

20 lms052_ap_01


NOTE: A period of 0 does not change the time client period, it just

immediately updates the time. Enter a period between 1-10000 in

minutes to change the period.

2.8 Configuring SNMP

To fully configure SNMP

Set the SNMP contact (name of the Network Operator, for example).

Set the SNMP system location (physical location of the CCU, for example).

Add an SNMP read community.

Add an SNMP write community.

Add an SNMP trap community.

To Set the SNMP Contact

1. Type snmp contact and press Enter.

is text field, often used for a contact name and phone number, a

URL, or an email address, from 1-80 characters in length.


To Set the SNMP System Location

1. Type snmp location and press Enter.

is the location of the CCU, from 1-80 characters in length.


To Add an SNMP Read Community

1. Type snmp community add readand press Enter.

is the name of the read community string. By default, no

community strings are entered, so no one has SNMP access. The read

community string can be from 1-31 characters in length, but spaces are not

allowed.


To Add an SNMP Write Community

1. Type snmp community add write and press Enter. is the name of the write community string. By default, no

community strings are entered, so no one has SNMP access. The write

community string can be from 1-31 characters in length, but spaces are not

allowed.


8/6/2019 lms052_ap_01

29/152


lms052_ap_01 21

To Add an SNMP Trap Server

1. Type snmp trap add and press Enter.

is the IP address of the trap server

is the name of the community on the trap server, from 1-63

characters in length.



Sets the SNMP contact as Vecima,

Sets the SNMP location as Calgary_South,

Adds SNMP read community Vecima_Calgary,

Adds SNMP write community Vecima_Calgary,

Adds SNMP trap serverVecima_Calgary, IP address 10.0.1.68,

Saves the new settings, and

Displays the SNMP settings.

Example:51:00:3f*CCU2>snmp contact Vecima

Contact: Vecima

51:00:3f*CCU2>snmp location Calgary_South

Location: Calgary_South

51:00:3f*CCU2>snmp community add Vecima_Calgary read

SNMP Read Communities:

Vecima_Calgary

SNMP Write Communities:

51:00:3f*CCU2>snmp community add VC_wr write


Vecima_Calgary


VC_wr

51:00:3f*CCU2>snmp trap add 10.0.1.68 VC_trp

SNMP Traps:

10.0.1.68 VC_trp

51:00:3f*CCU2>save

Basic Config saved




51:00:3f*CCU2>snmp

Contact: Vecima

Location: Calgary_South


Vecima_Calgary


VC_wr

SNMP Traps:

10.0.1.68 VC_trp

8/6/2019 lms052_ap_01

30/152

22 lms052_ap_01


2.9 Configuring VoIP Detection and Priority Classification

Voice over IP detection and priority classification is controlled at the CCU, with the parameters

passed on to EUMs as they register. Priority classification can be enabled or disabled for the

entire sector. When enabled, it is only applied to traffic for EUMs which have priority

classification enabled during authorization. VoIP detection and priority classification is basedon three tests, each of which is parameterized.

To Enable Priority Classification for the Sector

1. Typepriority enable and press Enter.

To Mark a DiffServ Codepoint as High Priority

1. Typepriority diffserv set and press Enter.

where codepoint is between 0 and 63 (decimal). Each of the 64 codepoints

can be marked as high priority or not. Note that code points are individually

enabled, not in ranges. Clear all codepoints to disable this rule.

To Set the VLAN Priority Threshold

1. Typepriority vlan and press Enter.

where threshold is between 0 and 8. Packets with a VLAN tage greater than

or equal to this will be marked high priority. Unmarked packets are treated as

level 3. Set to 8 to disable this rule.

To Configure RTP Detection

1. Typepriority rtp max and press Enter.

Packets greater than length bytes are not marked high priority by the RTP

rule. Set to 0 to disable this rule.

2. Typepriority rtp port set and press Enter.

A UDP packet with source and destination port in one of the five ranges may

be marked high priority. Pair, between 0 and 4, indicates which range to

define. The range is start to end inclusive.

3. Repeat step 2 for up to 5 ranges.


Enables priority classification

Sets codepoint 46 (or 0x2e, expedited forwarding)

Sets the VLAN threshold to 5

Sets the RTP max length to 250

Sets two RTP port ranges of 10000 to 12000 and 22000 to 30000

Saves the new settings and

Displays the new settings

Example:51:00:3f*CCU2>priority enable

8/6/2019 lms052_ap_01

31/152


lms052_ap_01 23

Priority Packet processing enabled.

51:00:3f*CCU2>priority diffserv set 46

Enabled Diff Serv Code Points: 46.

51:00:3f*CCU2>priority vlan 5

vlan threshold: 5

51:00:3f*CCU2>priority rtp max 250

RTP maximum packet length: 250

51:00:3f*CCU2>priority rtp port set 0 10000 20000

Prioritized Starting EndingPort Pair Port Number Port Number

----------- ----------- -----------

0 10000 20000

1 00000 00000

2 00000 00000

3 00000 00000

4 00000 00000

51:00:3f*CCU2>priority rtp port set 1 22000 30000

Prioritized Starting Ending

Port Pair Port Number Port Number

----------- ----------- -----------

0 10000 20000

1 22000 30000

2 00000 00000

3 00000 000004 00000 00000

51:00:3f*CCU2>save

Basic Config saved




51:00:3f*CCU2>priority

Packet Prioritization: Enabled.

vlan threshold: 5

Enabled Diff Serv Code Points: 46.

RTP maximum packet length: 250

Prioritized Starting Ending

Port Pair Port Number Port Number

----------- ----------- -----------0 10000 20000

1 22000 30000

2 00000 00000

3 00000 00000

4 00000 00000

2.10 Adding EUMs to the Authorization Table

EUMs can be authorized either statically in the authorization table or dynamically through a

RADIUS server (see Configuring a RADIUS Serveron page 39). The authorization includesaccess to the network, grade of service offered and whether priority classification is applied to

traffic to and from that EUM, authentication key policy and possibly an authentication key and,

for models supporting OFDM1, the range of transmit modulation schemes permitted to this

EUM. An EUM that doesnt appear in the table is given the default grade of service, priority

enable and modulation schemes without encryption if RADIUS authorization is not enabled.

1. SeeLMS8000/LMS4000 Feature Support Matrix for OFDM support.

8/6/2019 lms052_ap_01

32/152

24 lms052_ap_01


minscheme and maxscheme are either a number or name from Table 1.

Most of the time, the range of transmit modulation schemes can be left at the default of 4

(BPK1) to 11 (64Q2) and adaptive modulation will select the appropriate rate. In this case, the

minscheme and maxscheme parameters can just be omitted below. Note that they are ignored

anyway for EUMs or CCUs that dont support OFDM and adaptive modulation.

To enable secure authentication and user data encryption for an EUM, set the authentication

key policy to requiredand enter the same authentication key (or passphrase) that is

configured in the EUM. Note that the security is based on the secrecy of that key. Otherwise

authentication is based on the EUM MAC address and encryption is disabled.

To Add an EUM to the CCU Authorization Table Statically with policy none

1. Type auth add [minscheme] [maxscheme]

and press Enter.

where gos is the grade of service that you want to assign to the EUM, one of:

be (best effort), bronze, silver, gold, or denied.

priority is enable or disable to control priority classification of traffic to and

from that EUM.

minscheme and maxscheme are the minimum and maximum transmit

modulation schemes the CCU will use for adaptive modulation for this EUM.

They are ignored if the EUM does not support OFDM. Omit them if the CCU

does not support OFDM. The defaults (from auth default) are used if they

are omitted. The authentication key policy will be set to none.


The auth command takes effect immediately.


Table 1 Modulation Scheme Names and Numbers

Number Name Raw Signalling Rate

3 CCK2 2.75 Mbps

4 BPK1 1.5 Mbps

5 BPK2 2.25 Mbps

6 QPK1 3 Mbps

7 QPK2 4.5 Mbps

8 16Q1 6 Mbps

9 16Q2 9 Mbps

10 64Q1 12 Mbps

11 64Q2 13.5 Mbps

8/6/2019 lms052_ap_01

33/152


lms052_ap_01 25

Adds EUM ID 64:12:34 to the Authorization Table and assigns it the gold grade of

service, key policy none with priority classification enabled and allows adaptation from

BPK2 to 16Q2:

51:00:3f*CCU2>auth add 64:12:34 gold enable bpk2 16q2

Added to authorization table

64:12:34 GOS: gold, Priority Classification enabled, Key policy none

Min Scheme 5 (BPK2) Max Scheme 9 (16Q2) (if OFDM capable)

51:00:3f*CCU2>auth

Authorization Table

EUM ID GOS CLASS PRIORITY MIN MAX KEY POLICY TYPE

----------------------------------------------------------

64:00:72 bronze disabled 3 3 none static

64:12:34 gold enabled 5 9 none static

Total of 2 entries. MIN/MAX apply if OFDM capable.

Default GOS bronze, priority disabled, tx modulation: 3 (CCK2) to 11 (64Q2)

Broadcast Traffic is currently not encrypted

To Add an EUM to the CCU Authorization Table Statically with policy required

1. Type auth key [minscheme] [maxscheme]

and press Enterortype auth passphrase [minscheme]

[maxscheme] and press Enter

where gos is the grade of service that you want to assign to the EUM, one of:

be (best effort), bronze, silver, gold, or denied.

priority is enable or disable to control priority classification of traffic to and

from that EUM.

minscheme and maxscheme are the minimum and maximum transmit

modulation schemes the CCU will use for adaptive modulation for this EUM.

They are ignored if the EUM does not support OFDM. The defaults (from

auth default) are used if they are omitted.

2. auth key will prompt for a 64 hexadecimal character secret authentication key. Type

the same key that was entered at the EUM and press Enter.auth passphrase will prompt for an 8 to 63 character secret passphrase. Type the

same passphrase that was entered at the EUM and press Enter. Repeat it exactly for

verification.

The authentication key policy will be set to required.


The auth command takes effect immediately.


Adds EUM ID 60:12:34 to the Authorization Table, and assigns it the gold grade of

service, an authentication key and key policy requiredwith priority classification

enabled:

60:00:43> auth key 60:12:34 gold enable

Enter Key (64 hex chars)

| | | | | | | |

:abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890

Added to authorization table

60:12:34 GOS: gold, Priority Classification enabled, Key policy required

60:00:43> auth

Authorization Table

8/6/2019 lms052_ap_01

34/152

26 lms052_ap_01


EUM ID GOS CLASS PRIORITY KEY POLICY TYPE

----------------------------------------------------------

60:12:34 gold enabled required static

Total of 1 entries

Default GOS be, priority disabled

To Set the Default Grade of Service and Priority Enable

1. Type auth default [minscheme] [maxscheme] and

press Enter.

where gos, priority, minscheme and maxscheme can have similar values as

above. These values are given to EUMs when they register if no entry is

found and RADIUS is not enabled.


The defaults change immediately, but EUMs already registered using the previous

defaults will continue to get the gos, priority and schemes they registered with.


Sets the default grade of service to best effort and disables priority classification andallows the full range of adaptation by default.

51:00:3f*CCU2>auth default be disable 4 11

Default GOS be, priority disabled, tx modulation: 4 (BPK1) to 11 (64Q2)

2.11 Configuring the CCU RADIUS Client

To configure the CCU RADIUS client:

1. Type auth radius enable and press Enterto enable RADIUS Authorization.

51:00:3f*CCU2>auth radius enable

Radius Authorization Enabled, Period: 60 minutes

Radius Accounting is disabled

Radius Primary Server : 0.0.0.0

Radius Secondary Server: 0.0.0.0

Radius Server Ports: Authorization 1812 Accounting 1813

2. Type auth radius primary [addr] and press Enter, then type the RADIUS

shared secret password and press Enter.

where addr is the primary RADIUS server IP address.

51:00:3f*CCU2>auth radius primary 192.168.10.9

Enter password (up to 16 chars): *********

Radius Authorization Enabled, Period: 60 minutesRadius Accounting is disabled




NOTE: This password must match the Shared Secret Password entered

at the RADIUS server.

8/6/2019 lms052_ap_01

35/152


lms052_ap_01 27

3. If your network includes a second RADIUS server, set the secondary RADIUS server

IP address and Shared Secret Password. Otherwise, set the secondary RADIUS

server IP address to none.

51:00:3f*CCU2>auth radius secondary 172.16.10.47

Enter password (up to 16 chars): **********


Radius Accounting is disabledRadius Primary Server : 192.168.10.9



4. (Optional) Type auth radius accounting enable to enable RADIUS

accounting.

51:00:3f*CCU2>auth radius accounting enable


Radius Accounting is enabled (update mode)




5. (Optional) Typeauth radius ports [authport] [acctport] and press Enterto specify authorization and accounting port numbers. The official RADIUS ports are

1812 and 1813 (the defaults), but some older RADIUS servers use 1645 and 1646.

where authport is the authorization port and acctport is the accounting port

number.51:00:3f*CCU2>auth radius ports 1812 1813

Ports set


6. Save settings.

51:00:3f*CCU2>save

Basic Config saved




NOTE: RADIUS settings take effect immediately.

7. Display the RADIUS settings.

51:00:3f*CCU2>auth radius


Radius Accounting is enabled (update mode)




NOTE: Use the stats auth command to view RADIUS statistics, whichare useful for troubleshooting purposes. Also, use sys log to

detect if there are any malformed RADIUS packets.

8/6/2019 lms052_ap_01

36/152

This page is intentionally left blank

8/6/2019 lms052_ap_01

37/152

lms052_ap_01 29

3 Configuring the EUM

For EUMs that support automatic frequency discovery, DHCP client and autoconfiguration1 in

networks configured to support them, the EUM needs no configuration before installation - it isready to go out of the box. EUMs can also be configured manually.

Refer to Serial Number, MAC Address, and Station ID on page 8.

This chapter covers the following procedures:

Setting the EUM Passwordon page 30

Configuring the EUM RF Parameters on page 30

Configuring EUM IP Parameters on page 33

Configuring Securityon page 34

Configuring Port Filteringon page 35 Configuring SNMPon page 35

Configuring the Customer Liston page 35

See Configuring a RADIUS Serveron page 39 for details on autoconfiguration.

Before you configure the EUM

Familiarize yourself with the CLI commands, syntax and shortcuts, outlined in

LMS8000/LMS4000 CLI Reference Manual. This document provides a complete list of

the available EUM commands, some of which are not discussed in this section.

Connect to the EUM through a telnet session. SeeAccess Interface on page 131.

CAUTION: Remember to regularly entersave orcommit and

pressEnter, to save your configuration changes to memory. As

well, some parameters will not take effect until you reboot the unit,

specifically the RF frequency and IP addressing.

1. SeeLMS8000/LMS4000 Feature Support Matrix.

8/6/2019 lms052_ap_01

38/152

30 lms052_ap_01

3: Configuring the EUM

3.1 Setting the EUM Password

To Change the EUM Password

1. Typepasswordand press Enter.

2. At the Enter Current Password prompt, type the old password.

3. At the Enter New Password prompt, type the new password.

TIP: Passwords are alphanumeric and case-sensitive. For

example, abc is not the same as aBc.

4. At the Verify password prompt, type the new password again.

The system displays a message that your password has been successfully changed.

64:02:6c-myEum>password

Enter Current Password: ********

Enter New Password (0-16 characters): *********

Verify password: *********

Saving new password

Password Changed

CAUTION: Remember to record the password. Unlocking the

EUM can only be performed by contacting Vecima Technical

Support.

3.2 Configuring the EUM RF Parameters

The EUM radio frequency can be set manually, or, for EUMs that support it1, the EUM can

automatically discover the best available frequency. Optionally, the transmit power level,

diversity mode and/or adaptive modulation parameters can be set.

All of these can also be done through autoconfiguration, see Configuring a RADIUS Serveron

page 39 for details.

To Set the EUM Operating Frequency Manually

1. Type radio frequency and press Enter. is the EUM operating frequency in tenths of a MHz. For

example, 917.0 MHz is entered as 9170.


1. SeeLMS8000/LMS4000 Feature Support Matrix for Auto Frequency Discovery and Nomadic

mode support.

8/6/2019 lms052_ap_01

39/152


lms052_ap_01 31

3. Before the new radio frequency will take effect, you must reboot the EUM by typing

reset and pressing Enter.

To Configure Automatic Frequency Discovery

1. Type radio frequency auto orradio frequency nomadic

and press Enter.

In automatic mode the EUM will discover the best CCU at power up and stay

on that frequency unless the CCU goes off for 2 minutes. In nomadic mode 1

the EUM will find a new frequency if the packet error rate with the CCU goes

above 15% for 15 seconds.

Break is a time in seconds that the Ethernet port will be disabled when a new

frequency has to be found. With some operating systems, including Windows

XP, a directly connected PC will get a new DHCP address when the Ethernet

port goes down for more than 5 seconds (use 7). Omit or set to zero to disable

this feature.

2. Optionally type radio search recommendedor radio search default and

press Enter.

By default all available frequencies are searched during discovery.Recommended sets the list of frequencies searched to the most commonly

used frequencies (905.2, 905.4, 908.2, 908.4, 908.6, 911.4, 911.6, 911.8,

914.8, 915.0, 915.2, 918.2, 918.4, 918.6, 921.4, 921.6, 921.8, 924.6, 924.8

MHz). Use add and delete to set individual frequencies.

3. Optionally type radio search add orradio search delete

and press Enter.

This will add or delete a specific frequency. Frequency is specified in tenths of

a MHz. For example, 917.0 MHz is entered as 9170. Adding one to the

default all frequencies case results in only that frequency being set.


5. To restart the frequency search type radio search start. Take care with thiscommand if connected over the air as you may lose contact with the unit.

To Set the EUM Power Level

This power level does not include antenna system gain.

1. Type radio rf and press Enter. is the EUM

transmit power level, either:

the desired power level, in dBm, any integer value in the range 15 - 26

inclusive,

high (+26 dBm), or

low (+15 dBm).

NOTE: Use the HIGH power level unless your site has unique

requirements for which a numerically set power level, or the LOW

power level, is more appropriate. For example, the capability to

numerically set the power level may be useful in high-density

1. SeeLMS8000/LMS4000 Feature Support Matrix for nomadic mode support.

8/6/2019 lms052_ap_01

40/152

32 lms052_ap_01


environments, where site-to-site interference is a problem. LOW

power is recommended in test lab environments.


Changes to the transmit power level take effect immediately, they do not require an

EUM reboot.

To Set the EUM Antenna Diversity Mode

Models that support antenna diversity control1 and a diversity antenna allow setting which

antenna will be used to receive and transmit on. You can set it to receive on only one antenna

or the other (A or B), or to automatically select the best antenna to receive on based on signal

quality (diversity). Similarly, you can set it to transmit on only one antenna or the other (A or B)

or to transmit on the antenna that last received a good packet (diversity).

1. Type radio diversity and press Enter.


receive packets.


transmit packets.

For example, radio diversity diversity A will use receive diversity, but

transmit on antenna A.

NOTE: For the integrated high-gain polarization diversity antenna, the A

antenna is polarized perpendicular to the long axis of the unit and

the B antenna is polarized parallel to the long axis of the unit.

To Set Adaptive Modulation Parameters

For EUMs supporting adaptive modulation2 the range of modulation schemes that the EUM

may use to transmit to the CCU can be constrained. By default, the full range of OFDM

schemes is used - 4 (BPK1) to 11 (64Q2).

1. Type radio modulation [maxscheme] and press Enter.

is the minimum allowed modulation scheme. Either the

number or name from Table 1 on page 24 can be entered.

[maxscheme] is the maximum allowed modulation scheme, taking the same

values. If omitted, it is set the same as minscheme and only that scheme is

used, effectively disabling adaptive modulation.


For example, radio modulation bpk1 64q2 will set the range to the default fullrange of OFDM modulations.


Sets the EUM operating frequency to 917.2 MHz,

1. SeeAPCD-LM057 Feature Support Matrix for antenna diversity control support.

2. SeeLMS8000/LMS4000 Feature Support Matrix for Adaptive Modulation support.

8/6/2019 lms052_ap_01

41/152


lms052_ap_01 33

Sets the transmit power level to high,

Enables receive and transmit antenna diversity,

Limits the transmit modulation schemes to adapt between bpk2 and 16q2,

Reboots the EUM so that the new parameters take effect, and

Displays the EUM RF parameters.

64:02:6c-myEum>radio frequency 9172

Radio Search Mode: Fixed 9172

Break on link fail disabled.

64:02:6c-myEum>radio rf high


64:02:6c-myEum>radio diversity diversity diversity

Diversity mode set

Rx/Tx Antenna Diversity: diversity / diversity

64:02:6c-myEum>radio modulation bpk2 16q2

Transmit Modulation Limits: 5 (BPK2) to 9 (16Q2)

64:02:6c-myEum>save

Basic Config saved


64:02:6c-myEum>reboot

rebooting ...

64:02:6c-myEum>radio


Fixed Mode - Locked on 51:00:3f at frequency 9172 (bcf 9172)

3.3 Configuring EUM IP Parameters

The EUM IP address, netmask and gateway can be set manually, or, for EUMs that support a

DHCP client1, the EUM can discover them itself from a DHCP server.

To Set the EUM IP Address and Gateway Manually

1. Type ip ethernet and press Enter.

is the EUM IP address.


CAUTION: The EUM only accepts subnet masks using the

shorthand notation; for example, it accepts 16, but not

ffff0000 or 255.255.0.0.

2. Type ip gateway and press Enter.

is the EUM gateway IP address.


4. Before the new EUM IP address and gateway will take effect, you must reboot the

EUM by typing reset and pressing Enter.

1. SeeLMS8000/LMS4000 Feature Support Matrix for EUM DHCP Client support.

8/6/2019 lms052_ap_01

42/152

34 lms052_ap_01


To Enable the EUM to get its IP address automatically with DHCP

1. Type ip ethernet dhcp and press Enter.


3. Before the EUM will get a new IP address and gateway, you must reboot the EUM by

typing reset and pressing Enter.


Sets the EUM Ethernet IP address to 172.16.6.4 /22,

Sets the EUM gateway IP address to 172.16.6.1,

Saves the new settings,

Reboots the EUM so that the new parameters take effect, and

Displays the EUM IP parameters.

64:02:6c-myEum>ip ethernet 172.16.6.4 22

IP Address: 172.16.6.4 / 22

IP Subnet : 172.16.4.0 ( 255.255.252.0 )

64:02:6c-myEum>ip gateway 172.16.6.1



64:02:6c-myEum>save

Basic Config saved


64:02:6c-myEum>reboot

rebooting ...

Password:

64:02:6c-myEum>ip

DHCP Enabled : NO

IP Address: 172.16.6.4 / 22

IP Subnet : 172.16.4.0 ( 255.255.252.0 )Gateway IP Address: 172.16.6.1

3.4 Configuring Security

To enable secure authentication and user data encryption on EUMs that support it1, set the

authentication key policy to requiredorallowedand enter an authentication key or

passphrase. The same authentication key or passphrase must be configured in the CCU

authorization table (see Configuring the CCUon page 7) or RADIUS server for this EUM.

If the key policy is none, authentication is based on the EUM MAC address and encryption is

disabled.

1. SeeLMS8000/LMS4000 Feature Support Matrix for Secure Authentication support.

8/6/2019 lms052_ap_01

43/152


lms052_ap_01 35

To Set the EUM Authentication Key and Key Policy

1. Type auth key and press EnterOR

type auth passphrase and press Enter.

where policy is either required, allowed, or none.

2. auth key will prompt for a 64 hexadecimal character secret authentication key. Type

a secret key (with no spaces) and press Enter.auth passphrase will prompt for an 8 to 63 character secret passphrase. Type the

passphrase and press Enter. Repeat it exactly for verification.


4. The policy will not take effect until either a reboot or you restart CCU discovery by

typing radio enable and pressing Enter.

The following example sets the key policy to requiredand sets the authentication key60:05:11> auth key required

Enter Key (64 hex chars)

| | | | | | | |

:abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890

Key SetEncryption required

3.5 Configuring Port Filtering

The procedure for configuring port filtering on an EUM is identical to the procedure for a CCU.

See Configuring Port Filteringon page 17.

3.6 Configuring SNMP

The procedure for configuring SNMP on an EUM is identical to the procedure for a CCU. See

Configuring SNMPon page 35.

For EUMs that support it1, this can also be done through autoconfiguration. See Configuring a

RADIUS Serveron page 39 for details.

3.7 Configuring the Customer List

You can set the maximum number of customers or PCs (customer_max) that can concurrently

access the radio link through the EUM, as described in Bridge Table Entries on page 128. For

1. SeeLMS8000/LMS4000 Feature Support Matrix for autoconfiguration support.

8/6/2019 lms052_ap_01

44/152

36 lms052_ap_01


EUMs that support it1, this can also be done through autoconfiguration. See Configuring a

RADIUS Serveron page 39 for details.

TIP: When you are locally troubleshooting the EUM installation, if

customer_maxis set to 1 and you want to substitute and use a

known-working PC in place of the end-users PC, you will have toreset the EUM or wait 10 minutes for the Bridge Table to time out

before you will be able to access the EUM.

To Set customer_max

1. Type cust max and press Enter.

is the maximum number of customers (PCs), from 1-50.



Sets customer_maxto 3,

Saves the new setting, and

Displays the value ofcustomer_max.

64:02:6c-myEum>customer max 3

Maximum Number of Customers: 3

64:02:6c-myEum>save

Basic Config saved


64:02:6c-myEum>customer max

Maximum Number of Customers: 3

1. SeeLMS8000/LMS4000 Feature Support Matrix for autoconfiguration support.

8/6/2019 lms052_ap_01

45/152

lms052_ap_01 37

4 Configuring a DHCP Server

Using a DHCP server to allocate IP address information to subscriber PCs, EUMs and other

network elements greatly simplifies network management and is highly recommended in mostnetworks. As there are many different DHCP servers available and in use in networks,

configuration of the server itself is beyond the scope of this document. This section presents

detailed information about the LMS8000 / LMS4000 system that will assist in configuring a

DHCP server to take advantage of the LMS8000 / LMS4000 features. Different DHCP servers

provide different levels of support for these features.

IP addresses obtained through DHCP can be reconfigured by expiring the DHCP leases and

reconfiguring the DHCP pools, the gateway router, and any other equipment on that IP subnet.

This makes the network more scalable within limits. In general, it is a good idea to limit lease

lengths, in case you have to change the IP plan.

If DHCP Relay is not enabled, the DHCP server will need to be in the same Ethernet

broadcast domain as the subscribers. In Switched Ethernet mode, this includes the CCUEthernet segment, but in routed mode, it only includes EUM Ethernet segments. The DHCP

server could be attached to an EUM, but this is not recommended.

4.1 CCU DHCP Relay and Relay Agent Information Option

When enabled, the CCU acts as a DHCP relay. DHCP requests broadcast on the radio

network (by subscriber PCs and EUMs for example) are intercepted by the CCU and relayed

to each of the servers in the list. See Configuring DHCP Relayon page 15 for details on

enabling DHCP relay and adding servers to the list.

If the entry for a given server includes a CCUID, the CCU appends the Relay Agent

Information option (RFC3046) to the packet. The Agent Circuit ID Sub-option is set to the

string given as the CCUID for that server. The Agent Remote ID Sub-option is set to the

EUMID of the EUM through which the request arrived as a string in the form XX:XX:XX (e.g.

60:12:34).

8/6/2019 lms052_ap_01

46/152

38 lms052_ap_01

4: Configuring a DHCP Server

Note that unicast packets, such as DHCP renew requests, are directed to the DHCP server

and are not relayed, so they will arrive without the relay agent information option.

4.2 EUM DHCP Client

When DHCP client is enabled, the EUM includes several useful pieces of information with

each DHCP message that can be used to determine which IP address or pool to allocate from.

See Configuring EUM IP Parameters on page 33 for details on enabling DHCP client. As with

most Ethernet devices, the Client ID option is set to the Ethernet MAC address. The host

name is a string in the form eumXX-XX-XX where XX:XX:XX is the EUMID. Note that this

differs from the usual string form of the EUMID because the host name must begin with a letter

and may not contain :. The Vendor Class is set to Vecima and the Vendor Specific option

with tag 1 is the hardware type as a string (e.g. EUM3006) as shown in the PCF display.

8/6/2019 lms052_ap_01

47/152

lms052_ap_01 39

5 Configuring a RADIUS Server

The LMS8000 / LMS4000 system can use RADIUS for EUM authorization, authentication and

key management, provision of service parameters and remote EUM configuration. As thereare many different RADIUS servers available and in use, configuration of the server itself is

beyond the scope of this document. This section presents detailed information about the

LMS8000 / LMS4000 system that will assist in configuring RADIUS server and database(s) to

take advantage of LMS8000 / LMS4000 features.

RADIUS is a standard, robust and secure way for the CCU to access a network operators

database(s) of information about individual EUMs. The RADIUS server acts as an interface

between the RADIUS protocol and whatever database is being used. The database may

reside within the RADIUS server, be a simple text file accessed by the server, or be a full-

fledged enterprise database. In the Open Access application where there are multiple service

providers, the RADIUS server may access multiple databases maintained by the individual

service providers. The choice of database design will depend on the application.

The CCU supports a secondary RADIUS server, so if the primary server is unavailable, the

backup can respond to maintain service. The CCU allows up to 5 seconds for a response.

Upon registration, and periodically thereafter, the CCU makes a RADIUS access-request for

each EUM. The RADIUS server can reply with a RADIUS access-reject message, which will

cause the EUM to be denied service, or with a RADIUS access-accept message, which can

can also contain service level, authentication key and configuration attributes. The access-

accept message must contain a Vecima-Grade-of-Service attribute to be considered valid. The

Vecima attributes are detailed in RADIUS Attributes on page 41. Periodically and on

deregistration, the CCU may send RADIUS accounting information for each EUM.

Note that RADIUS packets are digitally signed for authentication purposes, but not encrypted.

5.1 RADIUS Authorization

For each RADIUS access-request message sent by the CCU, the username is the EUMID, a

string in the form of XX:XX:XX (for example, 61:23:45), the NAS IP address is the CCU

8/6/2019 lms052_ap_01

48/152

40 lms052_ap_01

5: Configuring a RADIUS Server

Ethernet IP address, the NAS port is 1 and the password is the fixed string buywavc (this is

different from the shared secret password, which is used to verify that the CCU signed it).

Each RADIUS access-accept message must have at least the Vecima-Grade-of-Service

attribute (to determine the GOS offered to the EUM) and may contain a Vecima-

Authentication-Key or MS-MPPE-Recv-Key attribute (which also sets the key policy to

required) the Vecima-Priority-Enable attribute (which determines whether traffic to or from the

EUM is priority classifed or not) and autoconfiguration attributes. Attributes are defined in

RADIUS Attributes on page 41.

Documents

lms052_ap_01