TSYS01R90 System Overview D9.0 Mod 4 Single Zone System Functionality and Subsystems PG v.01

Module 4
y
nl
Single Zone System Functionality
O
se
and Subsystems
U
ng
ni
ai
Tr
sn
iot
lu
So
a
ol
or
ot
Mr
Fo
1
Course Structure
• Module 1 – Introduction to Trunked Radio Concepts
y
nl
O
• Module 2 – Introduction to DIMETRA IP
se
• Module 3 – Features and Functions
U
ng
• Module 4 – Single Zone System Functionality and Subsystems
ni
ai
• Module 5 – Multi Zone System Functionality and Subsystems
Tr
• Module 6 – Call Processing Scenarios
n s
io
• Module 7 – Inter-System Interface Functionality
t
• Module 8 – Course Review lu
So
a
ol
or
ot
rM
Fo
DIMETRA IP D9.0 System Overview Course

2
Module 4: Single Zone System Functionality and Subsystems
Module Objectives
At the end of this module, you should be able to:
y
nl
O
• Locate each of the subsystems on a Zone Core diagram and describe their
se
function.
U
• Describe the server virtualization used in DIMETRA IP system.
ng
ni
• Describe how the system devices interact with each other.
ai
Tr
n s
t io
lu
So
a
ol
or
ot
r M
Fo

3
DIMETRA IP Mobile Switching Office (MSO)
• A DIMETRA IP system can be a single zone system or it can have more zones,
y
nl
up to 7 zones can form a cluster.
O
se
• All the components that communicate over Ethernet are connected through
U
multiple core LAN switches which provide two separate internal LANs that are
ng
integrated to provide redundant links for critical network traffic.
ni
• Mobile Switching Office is a physical location that contains all the components
ai
Tr
necessary for controlling calls within a zone and for communicating with other
s
zones to manage interzone calls (calls that go between zones).
n
io
• In addition, the MSOs provide the hardware and software components that are
t
lu
used for network management and system configuration.
So
a
ol
or
ot
r M
Fo

4
DIMETRA IP System Components
y
nl
O
se
Call Processing Subsystem
Network Transport Subsystem -
Zone Controller (ZC)
LAN Switch
U
Backhaul Switch
Core Gateway Exit (CGE) Routers
ng
Data Subsystem Border Routers
Packet Data Router (PDR) Terminal Server
ni
Radio Network Gateway (RNG) Dispatch Communication Server
(DCS) Router
ai
Short Data Router (SDR)
DCS Switch
Tr
DCS Server
Network Management Subsystem
Zone Database Server (ZDS) • Note if connected via E1,
s
Unified Event Manager (UEM) the elements will differ
n
Zone Statistic Server (ZSS)
io
Air Traffic Router (ATR)
t
User Configuration Server (UCS)
License Manager (LM)
lu
So
System Statistic Server (SSS) not Co-Located Dispatch
required for a single zone system MCC7500
a
ol
Telephone Interconnect Subsystem

or
MTIG-E1
Echo Canceller (EC)
ot
or
MTIG-IP with IP-Tel Switch
r M
Fo

5
y
nl
Server Consolidation and
O
se
Virtualizations
U
ng
ni
ai
Tr
sn
iot
lu
So
a
ol
or
ot
Mr
Fo
6
Platform Architecture
• There is one common standard server platform for DIMETRA
y
nl
O
– HP ProLiant DL360 G9 server
se
U
ng
ni
ai
Tr
n s
t io
lu
– HP RP5820 Retail System Workstation (Consoles, AIS, NMTs)
So
a
ol
or
ot
rM
Fo

7
Platform Architecture
• All server applications run in VMWare ESXi Hypervisor, except MTIG-E1 and
y
nl
IP2E1 Converter which will continue running on KVM Hypervisor on Red Hat OS.
O
se
• The Server administration application (iGAS) will run as a Virtual Machine
U
interfacing the hypervisor layer via the native hypervisor API.
ng
• The virtual servers run on top of the hypervisor layer.
ni
ai
– It is transparent for the user that they run on a virtual server.
Tr
s
– Red Hat Linux 7 and Windows 2012, Windows 10 will be supported.
n
io
• A common administration Host Domain will be provided for:
t
lu
So
– Hypervisor administration
a
• Enable, disable, installation of virtual servers, upgrade, ...

ol
or
– License control of the virtual servers

ot
M
• All server applications will be installed on all Multi-OS servers.

r
Fo
• A virtual server can be enabled (booted) if a license has been purchased.

8
ESXI Hypervisor
• ESXI Hypervisor is the is common
y
nl
x86 virtualization solution.
O
se
• vSphere Client application installed
U
on the Network Management Client
ng
used for management and console
ni
access.
ai
Tr
n s
t io
lu
So
a
ol
or
ot
r M
Fo

9
Server Consolidation under ESXi Hypervisor
y
nl
O
se
Box
U
Applications
ng
Server Server Server Server
iGAS App App App App
ni
1 2 3 1
ai
Tr
Linux Linux Linux Windows Guest OS
n s
t io
Virtualisation
lu
Vmware ESXi Hypervisor Layer
So
Host OS
a
ol
or
Hardware
ot
Mr
Fo

10
improved Group Application Server (iGAS)
• iGAS provides centralized and unified administration menu structure allowing the
y
nl
operator to control and administer application servers from the single iGAS
O
console.
se
U
• iGAS grants the access to CPU, RAM, HDD, network, external devices and
ng
simplifies the configuration of the application server running on top of the
ni
hypervisor to feel as if the application server is running on the "bare-metal"
ai
(without hypervisor).
Tr
• iGAS platform is intended to host any type of the Windows/Linux application
n s
io
server used in DIMETRA.
t
lu
So
a
ol
or
ot
r M
Fo

11
Server Consolidation: Server Types
Mandatory Optional
y
nl
O
• Primary Zone Servers • Secondary Zone Servers • Primary Data Server
– – Short Data Router 1
se
Zone Controller 1 – Zone Controller 2
– Primary Upgrade Install Server – Secondary Upgrade Install – Packet Data Router 1
U
– *Optional CSMS ( Antivirus) Server – Radio Network Gateway 1
ng
– Cluster Domain Controller 1 – * Optional CSMS (Antivirus)
– Zone Domain Controller 1 – Cluster DC 2 • Secondary Data Server
ni
– Zone DC 2 – Short Data Router 2
ai
• Primary Management Server: – Packet Data Router 2
Tr
– Zone Database Server – Radio Network Gateway 2
–
s
Unified Event Manager
•
n
– Zone Statistics Server Each own dedicated node: Dispatch Communication
io
– Air Traffic Router • Motorola Telephone Server:
t
– CCE Server
– User Configuration Server
lu Interconnect Gateway:
– MTIG-E1 – Audio Gateway Server
So
– System Statistic Server
or • Performance and Security
– * Optional Primary Enhanced
– MTIG-IP Management Server:
a
Authentication Server
• – Infovista
ol
– * Optional Alias Server Intelligent Middleware (IMW)

– RSA AM8.1
or
– * Optional MCADI Server Server

• Enhanced AuC
ot
– License Manager
M
• Secondary Management Server

r
Fo
– All servers are exact the same as in the Primary Management Server
* Optional application server installed on the Mandatory Server

12
NIC Teaming Overview
• NIC Teaming is the method of grouping two physical network interface cards into
y
nl
one logical NIC card.
O
se
• Since Core LAN switches in DIMETRA systems are redundant, providing
U
redundant network connections to DIMETRA servers will reduce down time and
ng
enhance service availability.
ni
• NIC Teaming will be supported on Servers only.
ai
Tr
– Routers will not support redundant interfaces, redundant routers are
n s
deployed.
t io
• Servers will configure NET0 and NET3 interfaces as redundant interfaces.
lu
So
a
ol
or
ot
rM
Fo

13
NIC Teaming Architecture
y
nl
O
Windows Linux
se
Hypervisor
U
Hardware
NIC
Teaming CONT1 CONT2
ng
MTIG-IP
ni
NET0 NET1 NET2 NET3
ai
Windows Linux
Tr
Core LAN Core LAN Hypervisor
Switch 1 Switch 2
Physical hardware
s
NIC NIC
n
Teaming Teaming
NIC Teaming for Primary Zone Server
t io
lu NET0 NET1 NET2 NET3
So
Windows Linux
Core LAN Core LAN
Hypervisor Switch 1 Switch 2
a
Hardware
ol
NIC
NIC Teaming for MTIG-IP Server
or
Teaming
ot
NET0 NET1 NET2 NET3

M
Core LAN Core LAN

r
Switch 1 Switch 2
Fo
NIC Teaming for other Server

14
DIMETRA IP Zone Core – Call Processing Subsystem
y
nl
O
se
Zone Controller (ZC) Network Transport Subsystem -
U
LAN Switch
Backhaul Switch
ng
ni
ai
Short Data Router (SDR) (DCS) Router
DCS Switch
Tr
DCS Server
s
Zone Database Server (ZDS) • Note if connected via E1,
n
io
t
License Manager (LM) lu
So
a
ol

or
MTIG-E1
ot
Echo Canceller (EC)

or
M

r
Fo

15
• System Singalling and voice services:
y
nl
O
– Processing and generation of call-related signalling
se
– Control and allocation of air-interface resources
U
ng
– Processing radio registration and group affiliations
ni
ai
– Control and allocation of Motorola Telephone Interconnect Gateway (MTIG)
Tr
resources
n s
– Collection, sharing, and arbitration registration information with other Zone
io
Controllers in multizone systems
t
lu
So
– Authentication at radio registration
a
• Call Processing subsystem consists of the Zone Controllers which resides on the
ol
or
Primary Zone Server and Secondary Zone Server.

ot
r M
Fo

16
Radio Subscribers Site Registration and Talkgroup Affiliation
y
nl
O
se
Affiliation Database
U
Site ID Radio ID TG ID
ng
1 101 20
Primary/Secondary
ni
2 102 20 Zone Server
ai
3 103 20
Tr
116 801 20
Console Site 116
s
116 802 20
n
ZC1
io
Server
Active
t
Linux Control/Signalling
lu Container
So
Control/Signalling
a
Control/Signalling
ol
or
ot
Site 3
M
Site 1
Site 2
r
Fo

17
Mobility Management
• HLR stores access configuration information for both individuals and groups
y
nl
along with the current zone location of the individual or group member.
O
se
• VLR is a temporary copy that is placed in the zone where the radio is also
U
present, and is deleted when the radio is roaming in another zone.
ng
• When a radio is roaming in another zone, a new VLR entry is created again.
ni
ai
Tr
s
UCS
n
UCS
t io
All data replicated to each Zone All data replicated to each Zone
lu
So
Zone 2
Zone 2
Zone 1 Zone 2 Zone 1 Zone 2
ZDS ZDS
ZDS ZDS
a
Only records Only records

Only records Only records
belonging to Zone 1 belonging to Zone 2
ol
belonging to Zone 1 belonging to Zone 2

transferred to HLRs transferred to HLRs
transferred to HLRs transferred to HLRs
or
Zone Controller Zone Controller

GHLR IHLR GHLR IHLR IHLR GHLR GHLR IHLR
ot
Zone Controller Zone Controller IVLR GVLR GVLR IVLR

r M
Fo

18
Review Question Zone Core
y
Which processes is Zone Controller responsible for? Select 6 that apply.
nl
O
se
U
Processing and generation of call-related signalling
ng
ni
Control and allocation of air-interface resources
ai
Tr
s
Processing radio registration and group affiliations
n
t io
lu
Control and allocation of Motorola Telephone Interconnect Gateway (MTIG)
So
resources
a
Collection, sharing, and arbitration registration information with other Zone

ol
or
Controllers in multizone systems

ot
Authentication at radio registration

r M
Fo
Processing and generation of the data-related singalling

19
DIMETRA IP Zone Core – Network Transport System
y
nl
O
se
LAN Switch
U
Backhaul Switch
ng
ni
ai
DCS Switch
Tr
DCS Server
• Note if connected via E1,
s
Zone Database Server (ZDS)
n
io
t
So
a
ol

or
MTIG-E1
ot
Echo Canceller (EC)

or
M

r
Fo

20
Network Transport Subsystem Physical Links - E1 and Ethernet
Connections
y
nl
O
se
U
E1 – E1 – Eth-Core Eth-Core
ng
Core 1 Core 2 Router 1 Router 2
ni
ai
Backhaul
Tr
Firewall
n s
CWR
t io
Backhaul
lu
So
Switch
a
ol
or
ot
rM
Fo
•EE1 Connections • Ethernet Site Link Connections

21
Zone Core Switches
y
nl
O
se
U
ng
ni
ai
• The core LAN switch provides the interface
Tr
for all servers, clients, and routers to connect
n s
into the core network.
t io
lu
• To meet system availability requirements
So
multiple core LAN switches are used. The
core LAN switches have a Network
a
ol
Management system to provide proactive

or
fault management.
ot
r M
Fo

22
Zone Core Switches
y
Control Site LAN Switch
nl
O
• Provides LAN connections between multiple MCC7500C consoles, NMTs, printer,
se
CCGWs, voice recorder on a remote control site.
U
DMZ LAN Switch
ng
ni
• Provides isolation between customer networks and DIMETRA radio network. It
ai
also provides a redundant screened network for services that need firewall
Tr
protection.
n s
io
FAN Out Switch
t
lu
• Extends the number of Ethernet ports on core LAN switch e.g., extend ‘Vortex’
So
subnets or ZNM subnet in MSO.
a
ol
or
ot
rM
Fo

23
Zone Core Switches
y
nl
O
Backhaul Switches – HP ProCurve Switch 2620-48
se
U
• A layer 2 switch that provide IP interface to MTS sites,
ng
remote control sites and other zones.
ni
ai
Tr
n s
io
Aggregation Switch
t
lu
• Used in Geographical Redundancy system to provide aggregation between 2
So
split locations.
a
ol
• The processing and synchronization between devices remains the same as if it

or
had all elements collocated.

ot
M
• Only fiber optic links are supported between Aggregation LAN switches at the
r
Fo
two locations, Ethernet links between the locations are not supported.

24
DIMETRA IP Geographical Redundancy Concept
y
nl
O
se
U
ng
ni
ai
Tr
n s
t io
lu
So
a
ol
or
ot
M
r
Fo

25
DIMETRA IP Geographical and Local Redundancy
y
nl
O
se
U
ng
ni
ai
Tr
n s
t io
lu
So
a
ol
or
ot
rM
Fo

26
Network Routers
• The master site network transport
y
nl
functions in the DIMETRA system are
O
provided by S6000 router and GGM
se
MNR S6000 Router
8000 gateway.
U
• The following functional types are
ng
ni
available:
ai
– Gateway Router GGM 8000
Tr
– Core Router
n s
– Exit Router
t io
– Border Router lu Cooperative WAN Router (CWR)
So
– Peripheral Network (PN) Router
a
– The Combined Routers

ol
or
– Gateway GPRS Support Node

ot
M
– Control Room Router

r
• Cooperative WAN Router (CWR) patch

Fo
panel
27
Gateway Routers
y
nl
O
se
U
ng
- GWR 1 is connected to LAN Switch 1
ni
- GWR 2 is connected to LAN Switch 2 Core LAN Switches
ai
Tr
n s
t io
lu
So
• Provide network isolation and routing between various subnets in the system.
• Any traffic intended to devices on a different subnets is first sent to gateway
a
ol
router then routed to destination devices.

or
ot
• Provide single access point or gateway to access core and exit routers.
M
• Isolate multicast traffic from the various hosts they are servicing.
r
Fo
• Redundant pairs are installed on a separate TLANs to provide full redundancy.

28
Core Routers (Audio Rendezvous Point – RP)
y
nl
O
se
U
ng
ni
Core LAN Switches
ai
Tr
Cooperative WAN
Router (CWR) Pair
n s
t io
lu
So
• Perform routing of audio, data, control, and network management traffic within
the zone.
a
ol
• Provide control path redundancy and the segregation of network management

or
traffic.
ot
M
• Require a minimum of two core routers for 1:1 redundancy.

r
Fo
• All Core Routers handle multicasting of Audio traffic.

• Maximum 6 Core Routers are installed in a Zone Core.
29
Exit Routers
y
nl
O
se
U
ng
ni
Core LAN Switches
ai
Tr
Cooperative WAN
Router (CWR) Pair
n s
io
• Serve two primary functions in the system:
t
lu
– Maintain the list of all active rendezvous points and the group prefixes served
So
by each.
a
ol
– Route interzone traffic between zones in a cluster configurations.

or
• Use dynamic routes to deploy packets among its multiple connections on both
ot
M
the LAN and WAN interfaces.

r
• Support both E1 based WAN and Ethernet based WAN

Fo
• Two exit routers in 1:1 redundancy configuration to support high availability.

30
Cooperative WAN Routers (CWR)
y
nl
O
CR1(3;5) CR1(4;6)
se
U
ng
ni
To/from remote site
ai
Tr
n s
t io
lu
• CWR patch panels provide connection between core and exit routers to the E1
So
WAN infrastructure.
a
• Configured in pairs to provide redundancy for audio and control packets.

ol
or
• Two sets of two 62-pin high-density E1 connectors, each supports up to 12 E1

ot
relays from the Core and Exit Routers, for a total of up to 24 relays for each CWR
M
patch panel.
r
Fo
• 24 RJ48-C connectors, each of which supports channelized connectivity at E1

line rates, provide the direct connections to the site and interzone links.
31
GGM8000 Routers
y
nl
Router Name Router Function Router Model
O
se
DCS Router ICCS Gateway Connectivity GGM8000
U
GGSN Packet Data Connectivity GGM8000
ng
Control Site Router Control Site Connectivity GGM8000
ni
ai
Border Router CEN Connectivity GGM8000, or
Tr
Customer provided
s
Control Site Border Router Site CEN Connectivity GGM8000, or
n
Customer provided
io
Gateway Router Zone master site connectivity GGM8000
t
lu
So
Eth – Combined CGE Core/Gateway/Exit connectivity GGM8000
a
ol
or
ot
r M
Fo

32
DIMETRA IP Redundant E1 Site Links
• Enhances redundancy for MTS sites.
y
nl
O
• Provides two physically separate links to each MTS site.
se
• Supports use of new configurations – dual ring or star topologies.
U
ng
• Provides highly available network (Base Station) service even in cases of failures
ni
or attacks against the ground based transport network.
ai
Tr
• New configurations can reduce backhaul costs.
n s
• Reduces time to support and re-configure base station links.
t io
lu
So
a
ol
or
ot
r M
Fo

33
Dual Site Link Topology – Site E1 Link Redundancy
y
nl
MSO
O
Core Core
Router 1 Router 2
se
U
ng
ni
12xE1 12xE1 12xE1 12xE1
ai
Tr
n s
Patch
io
Panel
t
lu
So
a
Dual Dual
ol
Site Site
or
Link Link
ot
rM
Fo

34
Dual Site Link Star Topology – Site IP Link Redundancy
y
nl
CR CR
O
se
U
ng
ni
Backhaul Backhaul
ai
switch switch
Tr
s
GBN Network
n
t io
lu
So
a
ol
or
ot
Physical link
M
Primary PVC (IP Tunnel)

r
Fo
Secondary PVC (IP Tunnel)
UNI Interface

35
Dual Site Link Ring Topology – Site E1 Link Redundancy
y
nl
MSO
Core Core Core Core
O
Router 1 Router 2 Router 3 Router 4
se
U
ng
12xE1 12xE1 12xE1 12xE1 12xE1 12xE1 12xE1 12xE1
ni
ai
Patch Patch
Tr
Panel Panel
ns
io
E1 E1
t
lu
So
E1 E1
a
ol
BTS1 BTSn
or
ot
r M
Fo
BTS2 BTSn-1

36
Satellite Link (for Voice Services)
• Provides flexible extension of radio coverage without the corresponding Ground
y
nl
Based Network.
O
se
• Enables faster provision of new RF coverage.
U
• Enables temporary or ad-hoc expansion of radio coverage for users with
ng
changing operational target areas (e.g., disaster and/or military operations).
ni
ai
• Supports full voice and short data services.
Tr
s
• Both E1 and Ethernet site links over satellite links are supported. However, some
n
io
limitations apply:
t
lu
– Sites connected through satellite links do not support Packet Data.
So
– Satellite links have considerably higher delay which may impact voice quality
a
ol
and call setup time.

or
ot
r M
Fo

37
DIMETRA IP Ethernet Site Links
• The ESL feature provides means to establish Ethernet connections of the
y
nl
following type:
O
se
– Base Station links (single and redundant)
U
– Inter-zone links
ng
ni
– Remote control site links terminated at non-redundant control site routers.
ai
Tr
• The elements of the ESL configuration include:
n s
– Combined CGE routers
t io
– Backhaul firewalls lu
So
– Backhaul switches
a
ol
– Ethernet connections
or
ot
• Link Encryption using IPSec with SHA-2 is optional and provided by using the
M
Fortinet Backhaul (BH) Firewalls as an IPSec tunnel termination endpoint.

r
Fo

38
Review Question Network Transport Subsystem
y
Every Zone Core must have two Gateway Routers installed.
nl
O
se
U
True
ng
ni
ai
False
Tr
n s
t io
lu
So
a
ol
or
ot
rM
Fo

39
DIMETRA IP Zone Core – Co-Located Dispatch Subsystem
y
nl
O
se
LAN Switch
U
Backhaul Switch
ng
ni
(DCS) Router
ai
Short Data Router (SDR)
DCS Switch
Tr
DCS Server
s
n
io
t
So
System Statistic Server (SSS) not
Co-Located Dispatch
required for a single zone system
MCC7500
a
ol

or
MTIG-E1
ot
Echo Canceller (EC)

or
M

r
Fo

40
Dispatch Subsystem
• Provides access to the system’s dispatch services and features via the Elite
y
nl
dispatch application.
O
• Dispatch subsystem can consist of the following components:
se
U
– Clear MCC 7500C Dispatch Console
ng
• Consists of a PC running the Elite dispatch application and provides the
ni
audio interfaces (microphone and loudspeakers) for the dispatcher.
ai
Tr
• Can be used at a collocated Control site.
s
– MCC 7500S End-to-End Encryption (E2EE) Dispatch Console
n
io
• Consists of a Call Control Entity (CCE) PC running the Elite dispatch
t
lu
application; the Audio Processing Entity (APE) that provides the audio
So
interfaces; the CryptR-2 module which performs voice encryption and
a
decryption; and operator accessories.

ol
or
• Can be located either locally or remotely.

ot
– Domain Controller (optional for MSO Dispatch Consoles)

M
• Used at Control sites depending on number of Dispatch Consoles.

r
Fo

41
Components Co-Located Console Site
y
nl
O
Core LAN Switch
se
U
ng
Discreet Archiving
ni
Listening Interface
PC Server
ai
Tr
s
Fan Out Switch
n
t io
lu
So
CryptR
Conventional Dispatch CCE
NMT PC Printer
Channel Gateway Console PC PC
a
APE PC
ol
or
MCC 7500C MCC 7500S

External
ot
Dispatch Console E2EE Dispatch Console

Conventional
M
System
r
Fo

42
MCC 7500 Clear Dispatch Console Components
y
nl
Digital Audio Headset
O
Emergency
Adapter
Beacon
se
U
ng
ni
ai
Dispatch Input Module Footswitch
Tr
Console USB
n s
t io
Filter Splitter
IRR lu Connector Cable
So
Sound Card XLR
XLR
XLR
Michrophone
a
ol
or
ot
M
LLR
Speakers
r
Fo

43
MCC 7500 E2E Dispatch Console Components
y
nl
O
X-zone
se
U
Dispatch PC Digital Audio Headset
ng
CryptR Adapter
ni
ai
Tr
Site Switch
n s
Kinesis Footswitch
io
Audio USB
t
lu Module
So
Filter Splitter
a
IRR Connector Cable

ol
Sound
or
XLR
XLR
XLR
Card Microphone
ot
r M
Fo
LLR
Speakers

44
Dispatch Communications Server
• DIMETRA IP offers an external dispatch system interface to support your own
y
nl
custom-developed dispatch system, running 3rd party applications.
O
se
• From a system viewpoint the Dispatch Communications Server subsystem:
U
– Provides an interface to 3rd party control rooms, also known as Integrated
ng
Command and Control Systems (ICCS).
ni
ai
– Provides audio in digital form (PCM A-law).
Tr
s
– Provides access to Motorola MCC 7500 Console Dispatch Application
n
io
Programming Interface.
t
lu
So
a
ol
or
ot
r M
Fo

45
Dispatch Communications Server
y
nl
Control Room MSO
O
Radio
Network
se
U
ZC
ng
Control
ni
NM
interface:
ai
CORBA
Tr
(MCC7500 API) DCS
DCS Router
s
Firewall
n
IP Sitelink
io
ICCS
Switch Audio
t
DCS
Customer lu Border
Processing
So
Entity (APE)
Router Audio interface: Router
PCM on IP Call Control
a
Entity (CCE)
ol
DMZ DCS
Core
or
ICCS
LAN
ot
PC
M
Operator IP Domain
r
Fo
Control Room IP Domain

46
Dispatch Communications Server Network Architecture
y
nl
Core LAN Switch
O
se
DCS
U
Router
ng
ni
DCS LAN Switch
ai
Tr
Control Site DCS Server
Terminal
s
Switch DCS
Server
n
Firewall
t io
Logging Logging
lu
Archiving
So
Admin Recorder Interface
CCGW
PC Server
DMZ Switch
a
ol
Border
Router
or
ot
M
Customer LAN Switch

r
Fo
Customer DCS
Clients

47
Dispatch Communications Server Overview
• The output is digital PCM on IP directly from the Audio Gateway (AGTW)
y
nl
O
– Bandwidth requirement will be 78.4 Kbit per speaker output.
se
– Bandwidth requirement will be static and not related to number of
U
simultaneous calls.
ng
ni
• Capacity limits are:
ai
Tr
– Monitored talkgroups of 300 per ICCS Client.
n s
– 10 ICCS clients can connect to one DCS instance.
t io
lu
– One DCS instance consolidated onto a single hardware server instance.
So
a
ol
or
ot
r M
Fo

48
Secure Dispatch Communication Server (S-DCS)
y
nl
10 x CryptR 10 x APE Ethernet
O
10 x CCE Analog
se
CCE CCE E1
Control
U
NODE NODE
Site
S-DCS
ng
CCE CCE
Switch
3rd party ICCS

NODE NODE
Multiplexer
ni
clients
CCE CCE
ai
NODE NODE
Tr
CCE CCE
NODE NODE
s
CCE CCE
n
NODE NODE
t io
lu
• One S-DCS supports up to 10 Call Control Entity (CCE) nodes.
So
• The S-DCS is capable of supporting up to 10 dispatch positions in the remote

a
ol
control room, with 1 server and up to 10 APE (Audio Processing Entity) and 10
or
CryptR.
ot
r M
Fo

49
Secure Dispatch Communication Server (S-DCS) Architecture
y
nl
Control Control
Site Site
O
Border Border
Router Router
se
U
DMZ Switch DMZ Switch
ng
Control Site
Router
ni
Firewall Firewall
ai
Tr
Control Site Control Site
s
Switch Switch
n
t io
S-DCS Server
lu 10 x CCE
So
CryptR CryptR CryptR CryptR
APE PC APE PC APE PC APE PC

a
ol
or
ot
ICCS Gateway Multiplexers

M
r
ICCS Clients
Fo

50
DIMETRA IP Zone Core Network Management Subsystem
y
nl
O
se
LAN Switch
U
Backhaul Switch
ng
ni
ai
DCS Switch
Tr
DCS Server
s
Unified Event Manager (UEM)
n
the elements will differ
io
t
License Manager (LM)
lu
So
a
ol

or
MTIG-E1
Echo Canceller (EC)
ot
or
M

r
Fo

51
• Based on Client/Server networking model
y
nl
O
• Microsoft Windows 10 platform for Client Applications
se
• Private Radio Network Management applications (PRNM Suite)
U
ng
• Cluster- and Zone-level Servers store configuration and statistical data
ni
ai
• Cluster- and Zone-level Servers establish logical Network Manager links to the
Tr
Call Processing Subsystem and the other DIMETRA IP Radio Infrastructure
s
Devices.
n
t io
lu
So
a
ol
or
ot
r M
Fo

52
Network Management Servers
y
The NM subsystem includes the server applications listed below which have been
nl
consolidated into one hardware unit.
O
se
Zone Level Servers:
U
• Zone Database Server (ZDS)
ng
ni
• Air Traffic Router Server (ATR)
ai
Tr
• Zone Statistics Server (ZSS) Server Server Server Server
s
iGAS App App App App
n
• Unified Event Manager Server (UEM) 1 2 3 1
io
Linux Linux Linux Windows
t
• Upgrade Install Server (UIS-Zone) lu
So
Cluster Level Servers: Vmware ESXi Hypervisor
a
ol
• User Configuration Server (UCS)

or
Hardware
ot
• System Statistics Server (SSS)

M
• Upgrade Install Server (UIS-Cluster)

r
Fo

53
DIMETRA IP Device Interconnection
Primary/Secondary
y
nl
Management Server
O
NMTs
se
U
ng
PRNM Server Containers
ni
ai
Configurations and
Tr
Live Call Data
n s
Primary/
io
ZC1
Secondary
t
Server
lu
Zone Server
Active
Linux
So
Container
a
ol
or
ot
Control/Signalling
r M
Fo

54
Configuration Management
Database
y
Primary/Secondary
nl
Replication
Management Server
O
Process
se
NMTs Call NMTs
Control
U
ATR Server ZDS Server UCS Server ZCM Data
Data (STM)
ng
Linux Linux Linux
Container Container Container UCM Data
ni
ai
Live Call Data
Tr
n s
Primary Secondary
io
ZC1 ZC2
Zone Zone
t
Server Server
Server lu Active
Linux
Standby
Linux Server
So
Container Container
a
ol
or
ot
ISSI=10003 Control/Signalling ISSI=1010001

M
GSSI=100002 GSSI=200001
r
Fo
Dispatch
Site 1 Site 1006

55
ZoneWatch – Sites and Subscriber Monitoring
y
nl
TG Call in progress
O
Channel
se
Status
U
Site Status
ng
ni
ai
Tr
s
MCCH
n
Activity
t io
lu
So
a
ol
or
• Zone Level PRNM Tool

ot
M
• ZoneWatch Grid Display shows status of BTS sites in real-time.

r
Fo
– Monitors radio traffic in real-time.

56
Affiliation Display – Subscribers Monitoring
Primary/Secondary
y
Management Server
nl
O
NMTs
se
ATR Server
U
Linux
ng
Container
ni
Primary/Secondary Live Call
ai
Zone Server Data
Tr
n s
ZC1
io
Server
Active
t
lu Linux
Container
So
a
Radio A – 110008
ol
TG 17 – 160017
or
Control/Signalling
ot
r M
Fo
Site 2

57
Radio Control Manager (RCM) – Radio Terminal Management
Primary/Secondary
y
Management Server RCM/
nl
Web RCM
O
NMTs
ATR Server
se
Linux
Container
U
Primary/Secondary
ng
Zone Server
ni
ai
ZC1
Tr
Server
Active
Linux
Container
n s
io
Radio 5
t
lu
So
The Dispatcher is sending
a
the Temporary Subscription

ol
Radio 5 disable Radio Command

or
is lost
• Note:
ot
– RCM is a zone-level PRNM application enabling an RCM user to issue control commands to radios.
M
– Web RCM has RCM functionality.

r
Fo

58
Unified Event Manager – Fault Management
y
Primary/Secondary
nl
Management Server
O
se
U
ng
Virtual Server Containers
ni
UEM Client
ai
ZDS UEM
App App
App
Tr
OS OS OS
s
KVM hypervisor
n
NMTs
t io
UEM
ZDS
lu Polling SNMP
- Topology Sync
So
- Configuration SNMP Set - Poll SNMP Trap
Get - Forward
a
SNMP Trap
ol
Radio and
or
System
Equipment
ot
rM
Fo
DIMETRA IP
Transport Devices

59
Performance Management
Primary/Secondary
y
nl
Management Server
O
ATIA Log Viewer
NMTs NMTs
se
Zone Zone Watch
Historical ATR Server ZSS Server
Affiliation Display
U
Report (STM)
Dynamic Report
Linux Linux
ng
Container Container
ni
Primary/ Secondary
ai
Zone Server
Tr
n s
ZC1
io
Server
Active
t
Linux
lu
Container
So
a
ol
or
ot
M
Dispatch
r
Site 1 Console
Fo

60
Performance Management – Dynamic Reports
• Provides near real-real time data
y
nl
collections and display.
O
se
• Allow users to view statistics in a
U
predefined graphical form for zone
ng
and sites.
ni
• Data is plotted according to the
ai
Tr
object and preset time interval.
n s
• Dynamic Reports are always
io
presented in screen.
t
lu
So
• Data needs to be saved manually
after each successful retrieval.
a
ol
or
ot
r M
Fo

61
PRNM Applications and Locations
y
nl
O
PRNM Application Client Server
se
User Configuration User Configuration Server
U
Network Management Terminal (NMT)
Manager (UCM) (UCS)
ng
Zone Configuration Zone Database Server
ni
Network Management Terminal (NMT)
Manager (ZCM) (ZDS)
ai
Zone Statistical Server
Tr
Zone Historical Reports Network Management Terminal (NMT)
(ZSS)
n s
ZoneWatch (ZW) Network Management Terminal (NMT) Air Traffic Router (ATR)
t io
Affiliation Display Network Management Terminal (NMT) Air Traffic Router (ATR)
lu
So
Radio Control Manager Network Management Terminal (NMT) Air Traffic Router (ATR)
RCM Reports Network Management Terminal (NMT) Air Traffic Router (ATR)
a
ol
ATIA Log Viewer Network Management Terminal (NMT) Air Traffic Router (ATR)
or
ot
Unified Event Manager

Network Management Terminal (NMT) UEM Server
M
(UEM)
r
Fo

62
DIMETRA Enhanced Software Update (ESU)
• DIMETRA IP system data backup and restore
y
nl
O
• Roll out of the new software release
se
• Upgrade process
U
ng
• User Benefits:
ni
ai
– Automation of upgrade process.
Tr
– Outages are minimized and confined to the stage where each device will
n s
perform the switchover/activation process.
t io
lu
– Onsite engineering support will be needed for a limited period of time only.
So
– Reduced overall cost time and complexity of upgrade process.
a
ol
or
ot
r M
Fo

63
ESU Overview
• ESU main components are:
y
nl
– Upgrade Console
O
se
• GUI application, it is an interface to control, execute, and monitor the
U
entire upgrade process for a DIMETRA system – Internet Explorer 11
ng
– Upgrade Install Server (UIS)
ni
• Application instance running on Primary and Secondary Zone Server
ai
Tr
• Main functionalities:
n s
̶ Server part of Operational Agent (OPA)
io
̶ Software storage
t
lu
So
̶ Backup storage
a
– Operational Agent (OPA)

ol
• Agent software whereby UIS will be able to carry out an upgrade

or
ot
procedure
M
̶ OPA for Windows application

r
Fo
̶ OPA for Linux boxes

64
ESU Architecture
y
CLUSTER 1
nl
https://master-uis.ucs/ui
O
se
U
OPA
ng
ni
ai
ZONE 1
Tr
OPA OPA Master Active Zone Master Standby Zone
z001uis01.zone1 z001uis02.zone1 ZONE 2
s
ucs-uis01.ucs OPA ucs-uis02.ucs OPA
n
STORAGE_PC_01 STORAGE_PC_02 Master-uis.ucs
Zone OPA Zone OPA
z001nmc02.zone1 z001nmc03.zone1
io
z002uis01.zone2 z002uis02.zone2
t
OPA
ucs01.ucs1
OPA
lu OPA
zss01.zone1
OPA OPA
So
zds01.zone1
zds01.zone2 zss01.zone2
OPA OPA OPA

OPA OPA
a
sss01.ucs1 uem01.zone1 zc01.zone1

ol
z002nmc01.zone2 uem01.zone2
OPA OPA OPA

or
OPA OPA
auc01.ucs1 atr01.zone1 zc02.zone1
ot
zc01.zone2 z002s001.vn01.nmd1.zone2
OPA OPA
M
OPA OPA
z001nmc01.zone1 z001s001.vn01.nmd1.zone1
atr01.zone2 zc02.zone2
r
Fo

65
ESU Architecture Overview
• There are 2 UIS server installed in each zone;
y
nl
O
– Zone Upgrade and Install + Backup Server
se
– Zone Mirror Backup Server Only
U
ng
• In a multizone system, the UIS in the lowest zone octet has an IP address from
ni
the cluster subnet (10.0.CO.67 and 10.0.CO.68).
ai
Tr
• The primary UIS (UIS01) in the lowest zone octet is the Master UIS.
n s
• Redundant but it does not provide redundancy mode.
t io
lu
• OPerational Agent (OPA) made back-up, restore and upgrade possible on all
So
applications servers. OPA is also deployed on iGAS and most of the standalone
client PC’s.
a
ol
or
• Access to UIS console is via Internet Explorer 11 with URL format of:
ot
– https://zXXXuis01.zoneXX/ui – Zone level UIS

r M
Fo
– https://ucs-uis01.ucs/ui – Master UIS

66
UIS Backup and Restore Operations
y
1. Backup on Application Server
nl
O
2. Transfer to Local Storage
se
ZONE1
3. Transfer to Central Storage Master Active Zone Master StandbyZone
U
Cumulative Backup z001uis01.zone1 z001uis02.zone1
ucs-muis01.ucs
ng
Storage ucs-muis02.ucs
master-uis.ucs
4. Transfer to Storage PC
ni
Mirror
CBS CBS
ai
5. Download backup file off the UIS zone2_zssdb zone2_zssdb
Tr
STORAGE_PC_01
server (using UPGC) z001nmc01.zone1
Local Local
s
Storage Storage
n
6. Transfer to Mirror Local Storage
io
ZONE2
t
STORAGE_PC_02
lu z001nmc02.zone1 ZONE ZONE

So
Local Local
a
Storage Storage
ol
zone2_zssdb zone2_zssdb
or
ot
M
zone2_zssdb
r
Fo

67
Transport Network Device Manager
• Installed on the NM Client PC, the
y
nl
Transport Network Device Manager
O
allows you to view configuration of the
se
transport system devices for your
U
DIMETRA system, and perform
ng
network management tasks, which
ni
include:
ai
Tr
– Configuration Backup and Restore
n s
– Configuration Deployment
t io
– GGSN Router Management lu
So
– Firmware Deployment
a
ol
– Setting Boot Source for the device

or
ot
– Initial Configuration Setup using

M
serial connection
r
Fo
– Checking firmware version

68
Enhanced Authentication Centre Overview
• The Enhanced Authentication Centre (EAuC) comprises both an Authentication
y
nl
Centre (AuC) and a Provisioning Centre (PrC) in one application.
O
se
• The EAuC is an optional component required for MS authentication and for Air
U
Interface Encryption key storage and distribution.
ng
• The EAuC can be installed in three different hardware configurations;
ni
ai
– Enhanced AuC hosted on the Primary Management Server and an optional
Tr
warm standby secondary Enhanced AuC hosted on the Secondary
n s
Management Server.
t io
– Enhanced AuC hosted on a standalone server and an optional warm standby
lu
So
secondary Enhanced AuC hosted on a second standalone server.
a
– Standalone server hosting only the PrC functionality.

ol
or
• Uses open source PostgreSQL 9.0 database with BSD license.

ot
r M
Fo

69
E-AuC Main Window
y
nl
O
se
U
ng
ni
ai
Tr
n s
t io
lu
So
a
ol
or
ot
M
r
Fo

70
E-AuC with CryptR2
• A new AES128 Master Key is introduced
y
nl
to encrypt data flow between EAuC to
O
CryptR2 and vice versa.
se
U
• Must be loaded to both EAuC and
ng
CryptR2 manually.
ni
ai
Tr
n s
t io
lu
So
a
ol
or
ot
rM
Fo

71
Other NM Devices
y
nl
O
se
U
ng
ni
ai
Tr
n s
HP Color LaserJet CP3525N
t io
lu
So
Symmetricom SyncServer S600
a
ol
or
ot
rM
Fo
Multi-Tech MT5634 ZBA

72
Terminal Server In-Reach LX4048T
• The servers provide interfaces to the core LAN switch on one side and to the
y
nl
modems on another.
O
se
• The LAN interface provides connections to all the serial (console) interfaces of all
U
the devices at the MSO which in turn allows access to all the other
ng
programmable functions.
ni
• The modems allow for a method to dial into the terminal server connected to the
ai
Tr
MSO LAN. Telnet is supported, as well as connectivity to the serial ports of the
s
routers, switches, and servers.
n
t io
lu
So
a
ol
or
ot
r M
Fo

73
Review Question Network Management Subsystem
y
The following components are part of the Network Management Subsystem (write
nl
“T” for True or “F” for false).
O
se
U
___ Enhanced Software Update
ng
ni
___ Air Traffic Router
ai
Tr
___ System Statistics Server
n s
___ Unified Event Manager
t io
___ Zone Database Server lu
So
___ Zone Controller
a
ol
or
ot
r M
Fo

74
DIMETRA IP Zone Core – Telephone Interconnect Subsystem
y
nl
O
se
LAN Switch
U
Backhaul Switch
ng
ni
ai
DCS Switch
Tr
DCS Server
s
n
io
t
So
a
ol

or
MTIG-E1
Echo Canceller (EC)
ot
or
M

r
Fo

75
MTIG IP /E1 Overview
• The optional Motorola Telephone Interconnect Gateway acts as a gateway
y
nl
between an external PABX (or ETG) and the DIMETRA IP network.
O
se
• DIMETRA IP maintains one MTIG, with two types of connection:
U
– MTIG-IP
ng
ni
• Motorola Telephone Interconnect Gateway with Ethernet connection to the
ai
PABX.
Tr
s
– MTIG-E1
n
io
• Motorola Telephone Interconnect Gateway with E1 connection to the
t
PABX lu
So
• There can be up to two MTIGs in a zone.

a
ol
or
• MTIGs in any zone must be either MTIG-IP or E1. It is not possible to have both
ot
types co-existing in one zone.

M
r
Fo

76
MTIG-IP Architecture Overview
y
nl
O
QSIG to SIP Mandatory ACL for IP
translation Telephony Security
se
U
MTIG-IP
ng
QSIG
Call Control
ni
Signalling SIP/IP SIP/IP ISDN/TDM
ai
Tr
Public
Signalling
ZC Network
s
Gateway
n
io
SNMP G.711/RTP/IP G.711/RTP/IP SIP over IP
t
G.711/RTP/IP
lu
So
Media Firewall/ Firewall PBX
NM ACELP/ Gateway ACL
a
RTP/
ol
IP
Transcoding between Firewall for IP Telephony
or
ACELP and PCM Security

ot
r M
Fo

77
MTIG-E1 Architecture Overview
y
nl
O
se
QSIG Bypass
U
ng
QSIG
ni
Call Control
ai
Signalling QSIG+PCM/TDM ISDN/TDM
Tr
E1
Public
s
ZC Signalling
n
Gateway Network
t io
PCM
SNMP
lu
So
NM Media PBX
a
ACELP/ Gateway
ol
RTP/
or
IP
ot
Transcoding between
ACELP and PCM
r M
Fo

78
Review Question Telephone Interconnect Subsystem
y
The MTIG converts ACELP packets to Pulse Code Modulation format and vice
nl
versa.
O
se
U
True
ng
ni
ai
False
Tr
n s
t io
lu
So
a
ol
or
ot
rM
Fo

79
DIMETRA IP Zone Core Data Subsystem
y
nl
O
se
LAN Switch
U
Backhaul Switch
ng
ni
ai
DCS Switch
Tr
DCS Server
s
n
io
t
So
a
ol

or
MTIG-E1
ot
Echo Canceller (EC)

or
M

r
Fo

80
Short Data Subsystem
Customer Enterprise
• The Short Data Transport Service (SDTS) lets
y
nl
Network
applications access the point-to-point or
O
broadcast Short Data Service (SDS) transfer
se
over the air.
U
• It supports messages of up to 140 characters
ng
SDTS Client
ni
per message.
ai
• The SDS uses TETRA Short Subscriber
Tr
Border Primary Gateway
Identity (SSI) addressing and data can be Router Data Server Router
n s
transferred between:
io
– Radio to radio
t
lu SDR
So
– Radio to fixed IP host LAN Switch
– Fixed IP host to radio group or broadcast
a
ol
– Fixed IP host to Fixed IP host

or
Core
Router
ot
• In addition, there is an internal interface (Fixed

M
Patch
IP host) within DIMETRA system to the SDTS, Panel
r
BTS
Fo
used for the Alphanumeric Text Service (ATS).

81
Packet Data Gateway PDG
Customer Enterprise
• The Packet Data Service (PDS) is a bearer
y
nl
Network
service that allows two parties to
O
RADIUS
communicate using the IP protocol in three
se
Server
different ways: Data
U
Host
ng
– TETRA Radio to TETRA Radio via fixed
ni
host DHCP
ai
Server
Tr
– TETRA Radio to fixed host Border Primary Data Gateway
Router GGSN Server Router
n s
– Fixed host to TETRA Radio
t io
• Single slot and Multi slot PDCH lu RNG PDR
So
• Higher rate packet data using TEDS LAN Switch
a
ol
– Support for Air Encryption and EAL4 Data

or
Core
Terminal Router
ot
– Increased fairness in multi-subscriber

M
Patch
environment Panel
r
BTS
Fo
– Increased throughput in all conditions

82
Packet Data Gateway
• Radio Network Gateway (RNG)
y
nl
– Interfaces with the RF Sites to handle inbound and outbound packet data
O
se
traffic between the RF Sites and the PDR.
U
– Communicates with the Active Zone Controller to maintain a packet data
ng
visitor location register (PD-VLR).
ni
• Packet Data Router (PDR)
ai
– Interfaces with the Gateway GPRS and provides access control for packet
Tr
data subscribers and encapsulation to tunnel traffic to the GGSN router.
n s
– Communicates with the Active Zone Controller to maintain a packet data
t io
home location register (PD-HLR).
lu
So
• GPRS Gateway Support Node (GGSN)
– Supports the tunneling of traffic between the DIMETRA IP network and the
a
ol
supported customer enterprise network.

or
– One side of the GGSN router provides an interface to the Motorola Radio
ot
M
Network Infrastructure (RNI) while the other side of the GGSN router attaches
r
to a peripheral network to interface with the border routers of the Customer

Fo
Enterprise Network (CEN).

83
Data Gateway Encryption (Optional)
• Packet Data Encryption Gateway (PDEG)
y
nl
O
– PDEG is a standalone device used to encrypt and
se
decrypt packet data in E2EE environment.
U
– PDEGs only use the AES-256 algorithm and require
ng
KVL with the same algorithm to load the keys.
ni
ai
– Features an external power supply and is subject to
Tr
export control.
n s
io
• Short Data Encryption Gateway (SDEG)
t
lu
– SDEG is a standalone device used to encrypt and
So
decrypt short data in E2EE environment.
a
ol
– SDEG use either AES-128 or AES-256 algorithm and

or
require KVL with the matching algorithm to load the

ot
M
keys.
r
– Features an external power supply and is subject to

Fo
export control.
84
DIMETRA IP – Data Resilience
Customer
y
Border
Network
nl
Router
O
se
Short Data Subsystem Packet Data Subsystem
ZC
U
GGSN PN LAN
PDG VRRP
SDR
ng
Router
GGSN
ni
SDR PDG
NIC1 NIC2 Router
ai
Tr
VRRP PN
Router
s
Redundant LANs
n
t io
lu To CENs at Control Sites
So
Gateway
a
Router Active (Primary) Components

ol
or
Redundant (Secondary) Components

ot
Gateway TLAN2
Router
M
Primary Mobility Interface

r
Fo
Secondary Mobility Interface

TLAN1

85
Review Question Packet Data Subsystem
y
Which components are part of the Data Gateway (select three)?
nl
O
se
U
PDR
ng
ni
ai
GGSN
Tr
n s
io
RNG
t
lu
So
a
SDR
ol
or
ot
M
LAN Switch
r
Fo

86
Other System Components
• Network Security – Information
y
nl
Assurance features:
O
se
– Core Security Management Server
U
(CSMS)
ng
– RSA/Radius
ni
ai
– Perimeter Protection (PN Router)
Tr
s
• MCADI components:
n
io
– CADI Server
t
lu
So
a
ol
or
ot
r M
Fo

87
Network Security Subsystem
y
nl
O
se
U
ng
ni
ai
Tr
n s
t io
lu
So
a
ol
or
ot
rM
Fo

88
Network Security – Information Assurance Features
• Hardening is mandatory. The devices will always ship in a hardened state
y
nl
regardless whether the customer needs security or not.
O
• Optional IA /Network Security features which can include:
se
U
– AntiVirus
ng
– RSA Authentication Manager (Replica Server is optional on its own)
ni
– Perimeter Protection (CENIB Firewall Authentication)
ai
Tr
– Backhaul Perimeter Protection for clear and encrypted site links
n s
– Centralized Event Logging
io
– Monitoring from CEN is a selectable option expanding the all bundles
t
lu
So
– IPSEC Ethernet Site Links Encryption
a
– Two Factor Authentication

ol
– Unauthorized Access Attempt Notification

or
ot
– Service Interface Barrier (SIB) Authentication

M
– Access Control to Network Management Applications

r
Fo

89
Core Security Management Server
• Network Security is concerned with the security and protection of the network
y
nl
against malicious or unintentional electronic threats like virus or hacking attacks.
O
It consists of a number of individual features:
se
U
– AntiVirus (A/V).
ng
• Each MSO requires a Core Security Management Server (CSMS)
ni
ai
equipped with the appropriate A/V Server software. One CSMS is elevated
Tr
to be the Primary A/V Server serving the rest of the system by distributing
s
virus definition files to secondary A/V servers in other MSOs and A/V
n
io
clients in its own MSO.
t
lu
So
a
ol
or
ot
r M
Fo

90
Performance and Security Management Server
• Performance and Security Management Server – a rack-mounted HP Gen8 server
y
nl
– RSA Authentication Agent – an authentication software support for remote access
O
– RSA Authentication Manager and RSA RADIUS Server – an authentication tool
se
that accepts or denies user access to the system by matching user accounts to
U
passwords
ng
– Replica RSA Authentication Manager and RSA RADIUS Server – an
ni
ai
authentication application server used to provide a failover and load balancing for
Tr
the Primary RSA Authentication Manager residing on the Performance and
s
Security Management Server PSMS (formerly known as the Infovista server)
n
io
• RSA AM8.1 is the replacement product for the current RSA AM6.1
t
lu
• No impact on the RSA client side, since the current certified RSA clients in DIMETRA
So
system are compatible with the new RSA AM8.1 version
a
ol
• RSA AM8.1 is a Virtual Appliance, that supports:

or
ot
– VMware ESXi virtualized environment

M
– Standards-based Open Virtualized Format (.ova)

r
Fo

91
Antivirus Overview
• The ESET Smart Security provides
y
nl
scalable virus protection for
O
workstations and network servers.
se
MSO 1
AV Client AV Client AV Client
U
• The ESET Smart Security software
ng
monitors the network for known viruses.
ni
Primary SPAS Secondary SPAS
• It provides a single point of control for

(installed @Primary CSMS) (installed @Secondary CSMS)
ai
Tr
each system to configure, monitor
s
MSO 3
events and alarms, and update antivirus MSO 2
n
io
Primary CAS Secondary CAS
software for the entire system network. Primary CAS
(installed @Primary CSMS)
Secondary CAS
(installed @Secondary CSMS)
(installed @Primary CSMS) (installed @Secondary CSMS)
t
lu
• The ESET Smart Security software is
So
deployed on all Windows and Red Hat AV Client AV Client AV Client AV Client AV Client AV Client
a
Linux servers and workstations in the

ol
Primary VDF update to AV Clients

Secondary VDF update to AV Clients (Manual Change)
or
radio network. Primary management & VDF update to AV Server

Secondary Management & VDF update to AV Server (Manual Change)
ot
r M
Fo

92
Network Security Components
• Customer Enterprise Network
y
nl
Interface Barrier (CENIB)
O
se
– Provides boundary enforcement
U
and attack detection features that
ng
include:
ni
• Firewall – a rack-mounted
ai
Tr
FortiGate 101E appliance
n s
• DMZ Switch – an HP ProCurve
io
2620 – 48 switch
t
lu
So
a
ol
or
ot
rM
Fo

93
Peripheral Network Routers
y
nl
O
se
U
ng
ni
Core LAN Switches
ai
Tr
Cooperative WAN
Router (CWR) Pair
n s
t io
lu
So
• Perform routing of traffic between De-Militarized Zone and De-Militarized Zone at
other MSOs and to Border Routers localized at Control Sites.
a
ol
• Redundant PN Routers can only be deployed at MSOs with a Customer

or
Enterprise Network Interface Barrier (CENIB).

ot
M
• Can be installed with a 4-port E1 module or a 12-port E1 module and CWR

r
panel.
Fo

94
IPSEC Ethernet Site Link Encryption
• Link Encryption using IPSEC with SHA-
y
nl
1 or SHA-2 is provided by using the
O
Fortinet Backhaul (BH) Firewalls as an
se
IPIP tunnels
IPSec tunnel termination endpoint.
U
ng
• The BTS and the BH firewall will Firewalls in
ni
tunnel mode
support a set of cryptographic hash
ai
functions, including SHA-128, SHA-
Tr
IPIP tunnels
256, SHA-384 and SHA-512.
s
in
n
IPSEC tunnels
• By adding the BH Firewalls, that
t io
lu
terminate the IPSec tunnels, the RF
So
sites will need to handle two tunnel
endpoints, first is the IPSec tunnel and ESL GBN
a
ol
then the IPIP tunnel. Base Station

or
Remote Control Site

ot
Other Zone
r M
Fo

95
Review Question Network Security
y
ESET anti-virus run on which server?
nl
O
se
U
ZDS
ng
ni
ai
SSS
Tr
n s
io
CSMS
t
lu
So
a
ZSS
ol
or
ot
M
UCS
r
Fo

96
Review Question Network Security
y
RSA Authentication and RSA Radius run on which server?
nl
O
se
U
ZDS
ng
ni
ai
SSS
Tr
n s
io
CSMS
t
lu
So
a
PSMS
ol
or
ot
M
UCS
r
Fo

97
MultiCADI-CADI Introduction
• The MultiCADI server provides multiple CADI clients access to CADI services.
y
nl
O
• CADI Client application allows dispatcher to perform actions by issuing
se
commands and monitoring radio events for a supported DIMETRA System.
U
– Submit radio commands such as regroup (DGNA) or selective inhibit as well
ng
as select radios to receive commands.
ni
ai
– Submit queries to check on the system status, radio check, and zone
Tr
controller status queries.
n s
io
– Monitor radio events such as emergency alarms, status, and message
t
events. lu
So
a
Outbound Events Outbound Events

ol
or
Multi-
CADI A A Up to 25 CADI
Radio CADI
ot
System P Single Session P Simultaneous Client

System Server
M
Server I I Sessions Programs

Program
r
Inbound Commands Inbound Commands

Fo

98
MultiCADI Server
• Resides on the Primary and Secondary Management Server.
y
nl
O
• MultiCADI Server hosts the MultiCADI application software.
se
• The application is configured to operate on either within the DIMETRA network,
U
DMZ or CEN.
ng
ni
• Installation within the CEN would be left up to the customer.
ai
Tr
n s
t io
lu
So
a
ol
or
ot
r M
Fo

99
DIMETRA IP Zone Core – RF Subsystem
y
nl
O
Radio Frequency
se
(RF) Subsystem
U
MTS Base Stations
ng
ni
ai
Tr
s
DIMETRA MSO
n
t io
lu
So
a
ol
or
ot
rM
Fo

100
Base Transceiver Station (BTS)
y
TETRA RF Site:
nl
O
• A geographical location of a Base Transceiver Station
se
• Provides radio coverage for a geographical area within which Radio Users can
U
communicate with each other and/or with Console Users.
ng
ni
• TETRA RF Subsystem = TETRA Radio subscribers terminal(s) + TETRA RF
ai
Site(s)
Tr
n s
t io
lu
So
a
ol
or
ot
rM
Fo

101
Base Transceiver Station MTS 1
• Provides up to 4 TETRA channels in a
y
nl
single integrated box.
O
se
• 10W RF power output
U
• Major functional components
ng
ni
– TETRA Site Controller ( TSC ).
ai
Tr
– Base Radios ( BRs ).
n s
– Radio Frequency Distribution System
io
(RFDS).
t
lu
So
• Uses N type RF connectors NOT 7-16 DIN.
a
ol
or
ot
r M
Fo

102
y
nl
single cabinet.
O
se
U
– TETRA Site Controller (TSC)
ng
ni
– Base Radios (BRs)
ai
Tr
– Radio Frequency Distribution
s
System (RFDS)
n
io
– Power Supply
t
lu
So
• Support of GPS and GLONASS
a
ol
or
ot
r M
Fo

103
Base Transceiver Station MTS 2 LiTE (Asia Only)
• MTS LiTE is a compact BTS derived from
y
nl
MTS 2 but in a smaller cabinet.
O
se
• The footprint is the same as the MTS 2 but
U
the cabinet is not as tall.
ng
• It can provide the full RF transmit power, up
ni
ai
to 40W at the transmit connector same as
Tr
the MTS 2 is available in the 350 - 470MHz
s
and 800MHz frequency bands.
n
io
t
lu
So
a
– Single Base Radios (BRs)

ol
or

ot
M
(RFDS)
r
– Power Supply
Fo

104
y
nl
single cabinet or up to TETRA 32 channels
O
in two cabinets.
se
U
• Major functional components:
ng
ni
ai
– Base Radios (BRs)
Tr
s
n
io
(RFDS)
t
• Support of GPS and GLONASS lu
So
a
ol
or
ot
r M
Fo

105
Review Question RF Subsystem
y
The Base Transceiver Station MTS 4 can provide the following number of TETRA
nl
channels in a single cabinet:
O
se
U
8
ng
ni
ai
16
Tr
n s
io
32
t
lu
So
a
ol
or
ot
rM
Fo

106
Fo
r M
ot
or
ol
Module Review
a
So
lu
tio
ns
Tr
ai
ni
ng
U
se
O
nl
y
107
Review Question 1
y
Which hardware components are part of the Call Processing subsystem?
nl
O
se
U
Zone Controller 1 and Zone Controller 2
ng
ni
ai
UCS
Tr
n s
io
Dispatch Consoles
t
lu
So
a
Gateway Routers
ol
or
ot
r M
Fo

108
Review Question 2
y
Which component in the Transport Network subsystem interfaces with RF Sites
nl
over E1?
O
se
U
LAN Switch
ng
ni
ai
Gateway Router
Tr
n s
io
CWR
t
lu
So
a
Exit Router
ol
or
ot
r M
Fo

109
Review Question 3
y
Packet Data uses the Control Channel to transmit and receive data.
nl
O
se
U
True
ng
ni
ai
False
Tr
n s
t io
lu
So
a
ol
or
ot
rM
Fo

110
Review Question 4
y
How many simultaneous client sessions does the MultiCADI server allow?
nl
O
se
U
2
ng
ni
ai
8
Tr
n s
io
16
t
lu
So
a
25
ol
or
ot
r M
Fo

111
Review Question 5
y
What is the maximum number of logical channels one MTS 4 can have?
nl
O
se
U
4
ng
ni
ai
8
Tr
n s
io
16
t
lu
So
a
32
ol
or
ot
rM
Fo

112
You should now be able to:
y
nl
End of Module
O
se
U
ng
• Locate each of the subsystems on a Zone Core diagram and
ni
ai
describe their function.
Tr
• Describe the server virtualization used in DIMETRA IP system.
ns
io
• Describe how the system devices interact with each other.
t
lu
So
a
ol
or
ot
rM
Fo
113

TSYS01R90 System Overview D9.0 Mod 4 Single Zone System Functionality and Subsystems PG v.01

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

TSYS01R90 System Overview D9.0 Mod 4 Single Zone System Functionality and Subsystems PG v.01

Uploaded by

Copyright:

Available Formats

Module 4

• Module 1 – Introduction to Trunked Radio Concepts

DIMETRA IP D9.0 System Overview Course

At the end of this module, you should be able to:

DIMETRA IP D9.0 System Overview Course

DIMETRA IP D9.0 System Overview Course

Telephone Interconnect Subsystem

DIMETRA IP D9.0 System Overview Course

• There is one common standard server platform for DIMETRA

DIMETRA IP D9.0 System Overview Course

• Enable, disable, installation of virtual servers, upgrade, ...

– License control of the virtual servers

• All server applications will be installed on all Multi-OS servers.

• A virtual server can be enabled (booted) if a license has been purchased.

DIMETRA IP D9.0 System Overview Course

• ESXI Hypervisor is the is common

DIMETRA IP D9.0 System Overview Course

DIMETRA IP D9.0 System Overview Course

DIMETRA IP D9.0 System Overview Course

– * Optional Alias Server Intelligent Middleware (IMW)

– * Optional MCADI Server Server

• Secondary Management Server

* Optional application server installed on the Mandatory Server

DIMETRA IP D9.0 System Overview Course

DIMETRA IP D9.0 System Overview Course

NET0 NET1 NET2 NET3

Core LAN Core LAN

NIC Teaming for other Server

DIMETRA IP D9.0 System Overview Course

Telephone Interconnect Subsystem

Echo Canceller (EC)

MTIG-IP with IP-Tel Switch

DIMETRA IP D9.0 System Overview Course

• System Singalling and voice services:

Primary Zone Server and Secondary Zone Server.

DIMETRA IP D9.0 System Overview Course

DIMETRA IP D9.0 System Overview Course

Only records Only records

belonging to Zone 1 belonging to Zone 2

Zone Controller Zone Controller

Zone Controller Zone Controller IVLR GVLR GVLR IVLR

DIMETRA IP D9.0 System Overview Course

Collection, sharing, and arbitration registration information with other Zone

Controllers in multizone systems

Authentication at radio registration

Processing and generation of the data-related singalling

DIMETRA IP D9.0 System Overview Course

Telephone Interconnect Subsystem

Echo Canceller (EC)

MTIG-IP with IP-Tel Switch

DIMETRA IP D9.0 System Overview Course

•EE1 Connections • Ethernet Site Link Connections

DIMETRA IP D9.0 System Overview Course

Management system to provide proactive

DIMETRA IP D9.0 System Overview Course

DIMETRA IP D9.0 System Overview Course

• The processing and synchronization between devices remains the same as if it

had all elements collocated.

DIMETRA IP D9.0 System Overview Course

DIMETRA IP D9.0 System Overview Course

DIMETRA IP D9.0 System Overview Course

• The master site network transport