FibeAir IP-10G

HSB Protection 1+1

Proprietary and Confidential

Agenda

Everybody needs Protection

2

Proprietary and Confidential

General Guidelines
1. A Standby IDU is referred to as the Mate
2. When a switchover occurs, the Active IDU becomes Standby and the
Standby IDU becomes Active
3. Accessing a Mate IDU can only be done via the Active IDU
4. Accessing the "Active" IDUs is achieved via unique IP addresses or via
Floating IP (supported only with IP-10G)
5. Y-Split cables must be used for Ethernet signals (fiber optics)
6. ETH Cross Cable (Protection Cable) is used to connect the protection ports
of both IDUs:

With IP-10 - use ports number 4

With IP-10G in a standalone mode use the dedicated PROT port

Proprietary and Confidential

Protection Panel
low

high
Active

Active
Coupl
er

Coupl
er

Mate

Mate
high

low

A Protection Panel (green) can be installed

between Active & Mate to allow a single
connection to customers DDF.

Active

The Protection Panel has E1/DS1

connectors to support simultaneous
connectivity to IDUs and DDF.
Mate

Proprietary and Confidential

External Protection
Achieved by using two standalone IDUs
The IDUs must be connected by an Ethernet Cross cable (dedicated protection ports)
Each IDU must have a unique IP address
Protection Panel may be in use (supports TDM only)

high

low

Coupl
er

Coupl
er

high

low

Proprietary and Confidential

Shelf Protection
When enabling a Shelf Protection, the following rules should be applied:
Shelf backplane replaces the external Protection Cable
Never insert or extract an IDU while powered up
Always secure IDUs to shelf enclosure with provided screws
Protection can be enabled in each pair (1+2, 3+4, 5+6)
IDU in slot 1 & 2 must have a unique IP address

Exampl
e:

6Mate
5Active
4
-Mate
3Active
2
-Mate
1Active
Protected node

Standalo
ne
Standalo
ne
Standalo
ne

Unprotected site
Proprietary and Confidential

Floating IP
The Floating IP address feature is meant to provide a single IP address that will
always give direct access to the current active main unit.
1.The Floating IP and Unique IDU IPs must be in the same subnet
2.The Floating IP and Unique IDU IPs are user-configurable
3.The Floating IP is copied from Active to Mate (following Copy to Mate command)
4.When Protection is applied, the Floating IP is assigned to the STBY IDU which
becomes the Active
5.The extension IPs are irrelevant (unseen by network)
6.OSS & NMS can access all IDUs (Main and Extension) via SNMP
7.Alternatively, users may access any of the units using their local IP addresses

IDU

IDU
192.168.1.75
192.168.1.100
7

192.168.1.
72
192.168.1.
71
Proprietary and Confidential

IDU

Setup Example (Standalone IDUs)

Proprietary and Confidential

EMS GUI

EMS GUI
1. Configure unique IPs to slot 1 and slot 2 (when not in installed in shelf)
2. You may use a floating IP
3. Make sure all IPs are in the same subnet

10

Proprietary and Confidential

EMS GUI

Select 1+1 HSB and then click Apply

The IDU will block management for 60 seconds to allow
setting up the correct mode (Active or STBY)
This action is not traffic effective.

11

Proprietary and Confidential

EMS GUI

Protection
mode
status

When 2nd IDU

is properly
configured
and
connected, IP
and MAC are
displayed
here

12

Proprietary and Confidential

EMS GUI

Click here to
check
communication
with STBY unit

13

Proprietary and Confidential

EMS GUI

To force a switchover
regardless to 2nd IDU
qualifying status
change to ON and
click Apply

14

Admin State
Lock

Proprietary and Confidential

EMS GUI

To request a switchover
click here.
If 2nd IDU (Mate) does not qualify to Active
state, request is ignored.

15

Proprietary and Confidential

EMS GUI

Click here to copy the configuration

from Active to Mate
Please note
The following parameters are not
copied :

16

MNG mode (In-Band / OOB)

In-Band VLAN
Switch mode
license

Proprietary and Confidential

Configuring external 1+1 from scratch

Configuring external 1+1 from scratch (1)

1. Set all IDUs to factory defaults
2. When IDUs complete the booting sequence, verify:

All IDUs have the same HW version

All IDUs have the same SW version
All IDUs have the same license
Every IDU has unique IP address
Active and STBY have the same SW mode (Pipe / Managed / Metro)
All IDUs have the same Management mode (In band or OOB)
In case of In-Band, all IDUs have the same In-Band VID

Note:
The IDU, which is connected to the ODU fed by the lower
attenuation channel of the RF coupler, is the IDU that should be
selected as "Active.
18

Proprietary and Confidential

Configuring external 1+1 from scratch (1)

3. Install the 1st link (make sure radio is up)

OD
U

OD
U

4. Enable Protection on both IDUs (management will be lost for 60 sec)

5. Lock Protection on both IDUs (to avoid unnecessary switchover when 2nd IDU is
enabled)
6. Install 2nd IDU in each site (no need to configure it)

19

OD
U

OD
U

OD
U

OD
U
Proprietary and Confidential

Configuring external 1+1 from scratch (1)

7. Enable protection in 2nd IDU in each site
8. Connect ETH Cross Cable between both protection ports

OD
U

OD
U

OD
U

OD
U

9. Disconnect the MNG cables.

10. Connect the PC to IDUs via ETH Y-Cable:

20

OD
U

OD
U

OD
U

OD
U

PC
Proprietary and Confidential

Configuring external 1+1 from scratch (1)

11. Verify Active IDU shows Mates IP address
12. Verify there are no Configuration Mismatch alarms
13. Verify there are no Mate Communication failures
14. Complete system setup by configuring Active IDU
15. In Active IDU: click Copy to Mate and verify Mate is restarting
16. Unlock protection on Active IDUs
17. Initiate Manual Switchover / Forced Switchover: verify traffic is OK.

21

Proprietary and Confidential

Upgrading (1+0) to (1+1)

Upgrading (1+0) to (1+1)

1. Assuming 1st link operates well, configure the 2nd IDUs to match Active IDUs:
2nd IDUs has the same HW version as Active IDU
2nd IDU has the same SW version as Active IDU
2nd IDU has the same license as Active IDU
2nd IDU has unique IP address (different than Actives IP)
2nd IDU has the same switch mode as Active IDU
2nd IDU has the same Management mode (In band or OOB)
In case of In-Band, 2nd IDU has the same In-Band VID as Active IDU
2nd IDU is configured with the same radio parameters as Active IDU
Mute transmission on 2nd IDUs

Active Link:
OD
U

OD
U

OD
U

OD
U

Standby Link (not connected)

23

Proprietary and Confidential

Upgrading (1+0) to (1+1)

2. Enable Protection on Active IDUs (management will be lost for 60 sec)
3. Lock Protection on both Active IDUs (to avoid unnecessary switchover when 2nd IDU is
enabled)
4. Install 2nd IDU in each site (verify TX is muted before physical installation)

24

OD
U

OD
U

OD
U

OD
U

Proprietary and Confidential

Upgrading (1+0) to (1+1)

5. Enable protection in 2nd IDU in each site
6. Connect ETH Cross Cable between both protection ports

OD
U

OD
U

OD
U

OD
U

7. Disconnect the MNG cables.

8. Connect the PC to IDUs via ETH Y-Cable

25

Proprietary and Confidential

Configuring external 1+1 from scratch (1)

9. Verify Active IDU shows Mates IP address
10. Verify there are no Configuration Mismatch alarms
11. Verify there are no Mate Communication failures
12. Complete system setup by configuring Active IDU
13. In Active IDU: click Copy to Mate and verify Mate is restarting
14. Unlock protection on Active IDUs
15. Initiate Manual Switchover / Forced Switchover: verify traffic is OK.

26

Proprietary and Confidential

Troubleshooting Protection
Common issues followed by CLI commands

Troubleshooting
Alarm / Error

Protection LED is on (RED)

Probable Cause / Workaround

1.
2.
3.

Protection cable is not connected

ETH straight cable is connected instead of crosscable
One of the 2 IDUs is not configured in Protection

Current Alarms show Configuration

Mismatch alarm

Check CFG of both IDUs: HW, SW, switch mode,

management mode, In Band VID
Initiate Copy to Mate in Active IDUs

I cannot PING the STBY unit.

This is normal behavior, Mate cannot be accessed

directly, only via Active IDU

Main IDU does not respond to PING

Use CLI commands to verify this IDU is in STBY mode, if

so, use CLI to recover IDU

Current Alarms shows Mate Comm.

Failure alarm

Check the current alarms of STBY IDU

Report back to Ceragon Support
Replace STBY unit
Replace Active unit

28

Proprietary and Confidential

Troubleshooting Useful CLI Commands

General commands:
lsp
ls
cls

prints executable commands in current directory

prints available child-directories
clears screen

To execute Protection commands, you will need to change directory:

IP-10:/> cd platform/mate-idu
Then, to read current status of IDU, type the following (in blue):
IP-10:/platform/mate-idu> get protection-mode
The system return these values:
1.Active
2.Standby
29

Proprietary and Confidential

Troubleshooting Useful CLI Commands

To change Protection Admin mode, type the following:
IP-10:/platform/mate-idu> set protection-admin

<enable/disable>

To lock the current protection mode, type the following:

IP-10:/platform/mate-idu> set protection-lockout

30

Proprietary and Confidential

<on/off>

Troubleshooting Useful CLI Commands

To force a switchover, type the following:
IP-10:/platform/mate-idu> set protection-force-switch <on/off>

To request a manual switchover, type the following:

IP-10:/platform/mate-idu> manual-switch-cmd

To initiate a Copy-to-Mate process, type the following:

IP-10:/platform/mate-idu> copy-to-mate-cmd

31

Proprietary and Confidential

Thank You !
training@ceragon.com

32