SC-IP Installation & Operation

6SHFWUD&RPP#,3#
E1 ROUTER CARD
Installation & Operation Manual
076R201-000
Issue 6
September 2009
General DataComm
The Best Connections in the Business
Copyright
2009 General DataComm, Inc. ALL RIGHTS RESERVED.
This publication and the software it describes contain proprietary and confidential information. No part of this
document may be copied, photocopied, reproduced, translated or reduced to any electronic or machine-readable
format without prior written permission of General DataComm, Inc. The information in this document is subject
to change without notice. General DataComm assumes no responsibility for any damages arising from the use
of this document, including but not limited to, lost revenue, lost data, claims by third parties, or other damages.
If you have comments or suggestions concerning this manual, please contact:
General DataComm, Inc.
Technical Publications
6 Rubber Avenue
Naugatuck, Connecticut USA 06770
Telephone: 1 203 729 0271
Trademarks
All brand or product names are trademarks or registered trademarks of their respective companies or
organizations.
Documentation
Revision History - GDC P/N 076R201-000
Issue
Date
Description of Change
March 2003
Initial Release
May 2003
Supports TACACS+ Authentication, Contact Sense, SNMP Traps; Provides logging

features, Telnet menu.
September 2003
Supports MACL Security and additional TACACS+ Authentication features.
October 2004
Expanded configuration default information
April 2006
Additional SNMP traps, LAN-X features, modem security features.
September 2009
Added/clarified cable information for Ntwk/Modem and Contact Sense interface.
Related Publications
Description
Part Number
SpectraComm Shelf and Enclosure Installation and Operation Manual
010R302-REV
SpectraComm 2000 Shelf Installation and Operation Manual
010R358-REV
SC1001/1002 Enclosure Installation and Operation Manual
010R112-REV
SpectraComm Ethernet Switch Card Installation & Operation Manual
076R204-REV
Operation Manuals for individual SCM-compatible elements

TEAM Operation Manuals for individual TEAM-managed elements
Refer to www.gdc.com for

specific element
Publications.
-REV is the hardware revision (-000, -001, etc.)

-VREF is the most current software version (-V400 is Version 4.0.0.)
In addition to the publications listed above, always read Release Notes supplied with your products.
Table of Contents
Preface
Precautions ......................................................................................................................... vi
Compliance (Pending)............................................................................................................. vii
Support Services and Training............................................................................................... viii
Corporate Client Services.................................................................................................viii
Factory Direct Support & Repair .....................................................................................viii
Contact Information .........................................................................................................viii
Chapter 1: Introduction and Specifications

SpectraComm IP E1 Overview .............................................................................................. 1-1
Features and Benefits .......................................................................................................1-2
SCIP-E1 Interfaces/Connectivity .....................................................................................1-3
Management .....................................................................................................................1-4
Diagnostic Tools...............................................................................................................1-5
Alarms ..............................................................................................................................1-5
SNMP Traps .....................................................................................................................1-5
SCIP-E1 Router Applications...........................................................................................1-6
SCIP-E1 LAN-X Applications .........................................................................................1-7
SCIP with Spanning Tree .................................................................................................1-8
SCIP-E1 with MACL Security.........................................................................................1-9
SCIP-E1 Applications with Ethernet Switching.............................................................1-10
The SCIP-E1 Front Panel..................................................................................................... 1-11
Technical Specifications ...................................................................................................... 1-12
Chapter 2: Installation & Connections

Overview................................................................................................................................ 2-1
Unpacking Instructions.....................................................................................................2-2
Shelf System Options .......................................................................................................2-3
Shelf and Card Connections................................................................................................... 2-4
Network / Modem Port.....................................................................................................2-5
Sync/Async Port ...............................................................................................................2-6
Contact Sense Port............................................................................................................2-7
Terminal Server Port ......................................................................................................2-10
Craft Port (DCE Interface) .............................................................................................2-13
Ethernet (LAN) Ports .....................................................................................................2-13
SCIP Power-Up.................................................................................................................... 2-14
Modem Connectivity............................................................................................................ 2-15
SCIP-E1 Modem Configuration .....................................................................................2-15
Modem Procedures.........................................................................................................2-15
076R201-000
Issue 6
SpectraComm IP E1 Router Card

Installation and Operation Manual
Table of Contents
Chapter 3: SCIP-E1 Configuration

SCIP-E1 Configuration Overview......................................................................................... 3-1
Command Line Interface (CLI) Basics............................................................................ 3-1
Smart CLI Quick Reference............................................................................................. 3-1
Initializing the SCIP-E1 for Configuration ........................................................................... 3-2
Access to SCIP-E1 Command Line Interface (CLI)........................................................ 3-3
Controlling Service Access.............................................................................................. 3-3
Configuring Typical SCIP-E1 Networks............................................................................... 3-4
Basic Configuration Procedures....................................................................................... 3-4
Static Routing with Frame Relay over an E1 Network.................................................... 3-7
Static Routing with PPP over an E1 Network................................................................ 3-11
LAN-Extension over E1 for a Flat IP Network ............................................................. 3-15
Chapter 4: The Web Interface

Introduction to SCIP-E1 Web Management.......................................................................... 4-1
Web Management Requirements ..................................................................................... 4-1
Starting A Web Session ................................................................................................... 4-2
Command Line Web Screen ............................................................................................ 4-3
Chapter 5: Additional Features

Overview of Additional Features .......................................................................................... 5-1
Network Time........................................................................................................................ 5-1
TACACS+ Authentication Protocol...................................................................................... 5-2
Modem Security .................................................................................................................... 5-6
Media Access Control (MAC) Security ............................................................................... 5-7
Contact Sense ...................................................................................................................... 5-11
LAN-X Features .................................................................................................................. 5-13
Ethernet Broadcast Limiting .......................................................................................... 5-13
Ethernet Jumbo (Extended) Packets .............................................................................. 5-13
Expedited Traffic Queuing............................................................................................. 5-14
Spanning Tree Protocol.................................................................................................. 5-16
Telnet Menu Access ............................................................................................................ 5-18
Chapter 6: Diagnostics & Monitoring

Alarms Overview................................................................................................................... 6-1
Diagnostic Tools.................................................................................................................... 6-1
LAN-X Link Integrity Check........................................................................................... 6-1
Traceroute ........................................................................................................................ 6-2
Monitoring Features .............................................................................................................. 6-3
SNMP Traps..................................................................................................................... 6-3
ii

076R201-000
Issue 6
Table of Contents
System Message Log........................................................................................................6-4
Alarm Log ........................................................................................................................6-4
MACL Violation Log .......................................................................................................6-5
Network Statistics.............................................................................................................6-6
Modem Activity Log ........................................................................................................6-6
Appendix A:Application Guidelines

General Application Information .......................................................................................... A-1
Command Access Modes...................................................................................................... A-1
SCIP-E1 Default Configurations .......................................................................................... A-2
Using Sub-interfaces for Frame Relay PVCs ....................................................................... A-7
IP Addresses.......................................................................................................................... A-7
Establishing an IP Address.............................................................................................. A-9
Bridging/Routing Guidelines ................................................................................................ A-9
S0 and S1 Comparison........................................................................................................ A-10
Spanning Tree Protocol....................................................................................................... A-11
STP Defaults.................................................................................................................A-11
Timeslot Assignments ................................................................................................... A-11
Batch Up/Download Overview........................................................................................... A-12
Using Smart CLI ................................................................................................................. A-13
Troubleshooting Communications Problems...................................................................... A-17
076R201-000
Issue 6

iii
Table of Contents
iv

076R201-000
Issue 6
Preface
Scope of this Manual

This manual describes installation and operation of the SpectraComm IP E1 card (SCIP-E1). This
document is intended for network operators and installers and assumes a working knowledge of
data communication equipment.
The information in this manual has been carefully checked and is believed to be entirely reliable.
However, as General DataComm improves the reliability, function and design of its products, it is
possible that information may not be current. Check the General DataComm website at
http://www.gdc.com for updated manuals and product information, or contact your General
DataComm field representative.
6 Rubber Avenue
Naugatuck, Connecticut, USA 06770
Tel: 1 203 729-0271
Safety Information
This manual should be read in its entirety and all procedures completely understood before
installing or operating the unit. The notes that appear throughout this manual must be read prior to
any installation or operating procedure. Examples of notes used in this manual are shown below.
Note
Important
076R201-000
Issue 6
A note provides essential operating information not readily apparent which you should be
particularly aware of. A note is typically used as a suggestion.
Indicates an emphasized note. It is something you should be particularly aware of; something
not readily apparent. Important is typically used to prevent equipment damage.

Preface
Precautions
The CAUTION, WARNING, and DANGER statements that appear throughout this manual are
intended to provide critical information for the safety of both the service engineer and operator, and
enhance equipment reliability. The definitions and symbols for such statements comply with ANSI
Z535.2, American National Standard for Environmental and Facility Safety Signs, and ANSI
Z535.4, Product Safety Signs and Labels, issued by the American National Standards Institute.
CAUTION Indicates conditions or practices that can cause damage to equipment or loss of
data.
WARNING indicates a potentially hazardous situation which, if not avoided, may result in
minor to moderate injury. It may also be used to alert against unsafe practices.
DANGER indicates an imminently hazardous situation which, if not avoided, will result in
death or serious injury.
Safety Guidelines
Under proper conditions, this unit will operate reliably and safely in your network. If any
component is improperly handled or installed, equipment failure or personnel hazard may occur.
Use caution and common sense when installing network wires. Use the following guidelines,
especially when unsafe conditions exist or when potentially hazardous voltages are present:
Repairs must be performed by qualified service personnel only.
To reduce the risk of electrical shock, do not operate equipment with the cover removed.
Never install network jacks in a wet location unless the jack is designed for that location.
Never touch uninsulated network wires or terminals unless the network line is disconnected
at the network interface.
Never install network wiring during an electrical storm.
Antistatic Precautions
Electrostatic discharge (ESD) results from the buildup of static electricity and can cause computer
components to fail. ESD occurs when a person whose body contains a static buildup touches a
computer component. This product card may contain static-sensitive devices that are easily
damaged. Proper handling, grounding and precautionary ESD measures are essential. Keep parts
and cards in antistatic packaging during transport or when not in use. When handling always use
antistatic floorpads, workbenchpads and an antistatic wrist strap connected to a grounded
equipment frame or chassis. If a wrist strap is not available, periodically touch an unpainted metal
surface on the equipment. Never use a conductive tool, like a screw driver or paper clip to set
switches.
vi

076R201-000
Issue 6
Preface
Compliance (Pending)
Compliance (Pending)
EC Declaration of Conformity
We:

6 Rubber Avenue
Naugatuck, Connecticut 06770, USA
Declare under our sole responsibility that the SpectraComm IP E1 Router Card (SCIP-E1) and the
SpectraComm IP E1 Router Card with integral modem (SCIP-E1 V.34) are in conformity with the
following standards or other normative documents:
EN 55022: 1994
Specification for limits and methods of measurement of radio interference characteristics of
information technology equipment.
EN 55024: 1998
Generic immunity standard Part 1 Residential, Commercial, and Light Industry, following the
provisions of the Electromagnetic Directive, 89/336/EEC.
EN 60950: 1995 A1 through A11
Safety or Information Technology Equipment, following the provisions of the Low Voltage
Directive, 73/23/EEC.
CTR 13 (If so equipped)
Following the provisions of the Telecommunications Terminal Equipment Directive, 98/13/EEC.
076R201-000
Issue 6

vii
Preface
Support Services and Training
Support Services and Training

General DataComm offers two comprehensive customer support organizations dedicated to pre-and
post-sale support services and training for GDC products. Corporate Client Services and FactoryDirect Support & Repair assist customers throughout the world in the installation, management,
maintenance and repair of GDC equipment. Located at GDCs corporate facility in Naugatuck,
Connecticut USA, these customer support organizations work to ensure that customers get
maximum return on their investment through cost-effective and timely product support.
Corporate Client Services

Corporate Client Services is a technical support and services group that is available to GDC
customers throughout the world for network service and support of their GDC products. Customers
get the reliable support and training required for installation, management and maintenance of GDC
equipment in their global data communication networks. Training courses are available at GDC
corporate headquarters in Naugatuck, Connecticut, as well as at customer sites.
Factory Direct Support & Repair

GDC provides regular and warranty repair services through Factory Direct Support & Repair at its
U.S. headquarters in Naugatuck, Connecticut. This customer support organization repairs and
refurbishes GDC products, backed by the same engineering, documentation and support staff used
to build and test the original product. Every product received for repair at Factory Direct Support
& Repair is processed using the test fixtures and procedures specifically designed to confirm the
functionality of all features and configurations available in the product.
As part of GDCs Factory Direct program, all product repairs incorporate the most recent changes
and enhancements from GDC Engineering departments, assuring optimal performance when the
customer puts the product back into service. Only GDCs Factory Direct Support & Repair can
provide this added value.
Contact Information
6 Rubber Avenue
Naugatuck, Connecticut 06770 USA
Attention: Corporate Client Services

6 Rubber Avenue
Naugatuck, Connecticut 06770 USA
Attention: Factory Direct Support & Repair
Telephones: 1 800 523-1737

1 203 729-0271
Fax: 1 203 729-3013 or 1 203 729-3014
Email: clientservices@gdc.com
Telephones: 1 800 523-1737

1 203 729-0271
Fax: 1 203 723-2883
Email: factorydirect@gdc.com
Hours of Operation:
Monday - Friday 8:30 a.m. - 5:00 p.m. EST
(excluding holidays)
http://www.gdc.com
viii

076R201-000
Issue 6
Chapter 1:
Introduction and
Specifications
SpectraComm IP E1 Overview
The SpectraComm IP E1 (SCIP-E1) functions as a router, extending the carriers
internal IP network to remote locations where separate IP networks are required.
INS
SCIP-E1 also function as a LAN-extension devices which extend a carriers

internal IP network to remote locations where a single flat IP network is required.
SCIP-E1 is also available with an integral modem which provides secure modem
access to remote devices at data rates up to 33.6 Kbps.
MODEM
SpectraComm IP E1 as Static IP Router

As a static IP router, SCIP-E1 forwards IP data between serial WAN ports and an
Ethernet (LAN) switch. The eight-port terminal server can connect to craft ports of
co-located devices to provide out-of-band access.
Typically, the SCIP-E1 provides connectivity via the E1 port. The link layer WAN
protocols supported are Frame Relay and the Point-to-Point Protocol (PPP). Figure
1-1 shows SCIP-E1 deployed in a Frame Relay, E1 network.
ON
E1
T
X
R
X
AUX
C
R
A
F
T
SCIP-E1 as LAN-extension Device

When placed in LAN-extension mode, the SpectraComm IP E1 extends the
Carriers local area network(s). The eight-port terminal server can connect to craft
ports of co-located devices to provide out-of-band access. Deployed in pairs, the
SCIP-E1s are connected to their separate LANs via the ethernet interface, and are
connected to each other via the WAN. GDCs proprietary LAN-extension (LANX) is comprised of a link layer WAN protocol (LAN-X) which requires a SCIP-E1
configured for LAN-X at each end of the WAN. Figure 1-2 shows SCIP-E1
extending local and remote LANs.
Typical Installations
The SCIP-E1 is a rack-mount card that installs in a SC 5000 shelf (16 slots) or in a
SC 2000 shelf (2 slots). For stand-alone applications, the SCIP-E1 card can be
installed in the SC 1001 or SC 1002 standalone enclosure.
TM ALM
P
O
R
T
1
ETHERNET
2
P
O
R
T
2
SC-IP
Note
The SpectraComm IP E1 router card (SCIP-E1) is part of the SpectraComm IP family of products. Other
SCIP devices, such as the SCIP-T1 and SCIP-DSL, are described in their respective manuals.
076R201-000
Issue 6

1-1
Introduction and Specifications
Features and Benefits
1-2
Transports data at Fractional E1 up to Full E1 (2.048 Mbps) using standard E1 interface.
Synchronous AUX RS-232 interface up to 128K (with short cable).
A low-cost, highly reliable and secure device in Carrier-safe packaging, configurable for static
router mode or LAN-extension mode of operation.
In static router applications, SCIP-E1 provides low-cost IP connectivity to the carriers

internal network and between managed sites.
In LAN-X applications, provides link layer encapsulation of ethernet frames for LAN
extension between Carrier sites. With spanning tree enabled, loops in the network are
blocked. With MAC security enabled, in-bound traffic is validated against the MAC
source addresses on the MACL (up to 100 unicast MAC source addresses per interface
can be auto-learned).SCIP in LAN-X mode supports Ethernet broadcast limiting,
Ethernet jumbo packets, priority queueing of IP traffic marked for expedited forwarding.
When equipped with an integral modem, provides remote access over a dial-up connection for
initial configuration. Modem features include autoanswer/callback mode, caller ID, modem
authentication, modem activity logging.
Run from ram architecture for increased performance and configuration integrity.
Front Panel LEDs indicate traffic, power and test status.

Front Panel LAN and Control (craft) ports provide connectivity.
Rear Panel WAN connectivity for the SCIP-E1 as router or LAN-X device.
Enhanced security with multi-level password protection and inactivity timers.
Scalable, high performance LAN via 10/100BASE-TX ethernet switch support.
Supports firmware (Flash) downloads via FTP or TFTP protocols.
Monitored and configured via the interactive Smart CLI command line interface at the local
VT100 craft port, a Telnet connection, or at the web-based CLI.
Supports standards-based management protocols such as TELNET, SNMP and HTTP (web).
Supports ping on all interfaces.
TELNET cut-thru to the craft ports of up to eight devices attached to the SCIPs terminal
server connector; Terminal server menu access to individual ports or to the CLI interface.
Enable/disable HTTP, SNMP, TELNET, FTP and TFTP services by individual interface.
Enable/disable modem authentication, caller ID authentication.
Streamlined configuration of multiple SCIPs via ASCII batch file upload/download.
Uses Frame Relay or Point-to-Point Protocol (PPP) to provide link layer (Layer 2)
encapsulation of IP traffic.
Generates SNMP traps for a variety of events and can forward them to up to four trap hosts.
Responds to SNMP discovery and polling.
Provides contact sensing and forwards any associated SNMP alarm traps.
Supports TACACS+ Authentication Protocol.
Supports E1 network alarm reporting.
GMT time-stamp on SNMP traps and on events in the System Message log and Alarm log.
076R201-000
Issue 6
SCIP-E1 Interfaces/Connectivity
The typical installation environment for the SCIP-E1 card is a SpectraComm 5000 or 2000 shelf.
SCIP-E1 has multiple physical interfaces, described below. The unit is shipped from the factory
with all ports set to Disabled except for the Modem port and the AUX port.
Note
In router mode of operation, both serial ports (S0 and S1) may be enabled simultaneously. In LAN-X mode
of operation, only one of the serial ports (S0 or S1) may be enabled; the other must be disabled.
Craft (Console) Port

The front panel craft port is used for local configuration and monitoring. This RS-232 interface is
fixed as serial async 9600 baud, 8 data, 1 start/stop, no parity.
Ethernet 10/100BASE-TX LAN Ports (Logical E0)
The front panel Ethernet (LAN) ports (two) allow the SCIP-E1 to connect directly to a computers
LAN port, or to a hub device or external ethernet switch for connection to many LAN devices. With
the SC-ES card co-located in the shelf, the SCIP-E1 can access more equipment on LANs using
10BASE-TX or 100BASE-TX (twisted pair) wiring while maintaining Carrier-safe reliability.
E1/FE1 Network Port (Logical S0)
The rear panel upper RJ45 connector provides the integral, fully managed Full E1or Fractional E1
CSU/DSU interface, supporting N x 56/64Kbps rates from 56Kbps to 1.984 Mbps (where N = 1 to
31). The WAN protocols supported on this interface are Frame Relay UNI-U, PPP and LAN-X.
Modem Port (Logical M0)
The rear panel upper RJ45 connector provides the modems V.34 interface (dial-up connections)
for direct VT-100 access (Hyperterm) or PPP sessions.
Terminal Server Ports (Term1 - Term8)
The rear panel DB25 connector and adapter provides the eight, 3-wire RS-232 ports which connect
up to eight devices (one port active at a time). If Telnet cut-thru is used, the TCP ports 2001 - 2008
correspond to Term1 - Term8, respectively.
Synch/Async Port
Synchronous DTE Interface (Logical S1)
The rear panel lower RJ45 connector provides the synchronous DTE (RS-232) interface which
connects to a separate CSU/DSU device in the shelf for network connectivity. This port gets timing
from the connected device and supports data rates up to 128Kbps at short cable lengths. To
compensate for transmit clocking problems at high rates and long cables, the port is configurable
for normal or inverted transmit clocking (external timing is not supported). The WAN protocols
supported on this interface are Frame Relay UNI-U, PPP and LAN-X.
Asynchronous AUX Interface (Logical AUX)
A future release of the SCIP-E1 will include the asynchronous AUX (RS-232) interface at this port
for connection to an external modem.
Note
For configuration of the SCIP-E1 interfaces, refer to Chapter 2: Installation and Set-Up.
076R201-000
Issue 6

1-3
Management
In Router Mode, remote SCIP-E1 devices can be managed from the Central Office via Remote
Default Routes. In LAN-X mode, local and remote SCIP-E1 devices can be managed and pinged
from either site. Management protocols available in SCIP-E1 are described briefly below.
Smart CLI
The SCIP-E1 employs an interactive command line interface that will feel familiar to most field
personnel. Added features include auto-prompting for command arguments, recognition of
abbreviated commands, online help, command line recall and an advanced utility for generating
downloadable ASCII configuration files.
Enhanced Telnet Management
SCIP-E1 provides enhanced Telnet cut-thru to up to eight LAN-attached devices via rear panel
terminal server connector. Using the SCIP-E1 management IP address, remote devices are accessed
by menu and a TCP port number (2001 - 2008) rather than separate IP addresses for each device.
Remote Dial-Up Management
When the SCIP-E1 is equipped with an integral modem, it can be managed via a passwordprotected dialup connection from the Central Office.
TFP or TFTP Services
SCIP-E1 supports File Transfer Protocol (TFP) and Trivial File Transfer Protocol (TFTP) servers
for the downloading of GDC firmware (Flash) upgrades. These services can be enabled and
disabled.
Web Management
The SCIP-E1 supports direct web management via HTTP for internet-ready network monitoring.
An embedded web server agent allows Read or Read-Write access to SCIP using popular browsers.
To enhance security, SCIP-E1 supports web time-outs and password-protected access over the web
interface. HTTP services can also be disabled to block web access to SCIP-E1 devices.
TEAM Management
In applications with GDCs TEAM software (Total Enterprise Access Management), SCIP-E1 is
recognized by TEAM which uses HPOV APIs (Application Programmer Interfaces) to integrate
with HP OpenView Windows and other network management applications. This release of the
SCIP-E1 supports only auto-discovery and polling by TEAM. Future releases of SCIP-E1 will
support direct web and Telnet launch from the map window. For more information on TEAM
features, refer to later issues of this document or contact your GDC Sales Representative.
Note
1-4
TEAM support requires an SCM card co-located in the shelf with the SCIP-E1. For more information, refer
to the GDC TEAM Core documentation and Release Notes.

076R201-000
Issue 6
Diagnostic Tools
SCIP-E1 supports the standard traceroute application which is used to determine the path an IP
packet follows through the network. It is a useful tool for diagnosing IP connectivity problems.
Traceroute is invoked by the trace-rte command.
System messages (SYS MSG) are useful in debugging TACACS+ failures. The last 100 system
messages can be viewed with the show log sysmsg command.
When the SCIP is configured for LAN-X mode, the diags lanx command can be used to
send different sized test packets to the remote SCIP which loops them back to the sender. This
diagnostic check is independent of IP and does not use ICMP (ping).
Network Statistics displays information about the current TCP socket connections, such as the
local or remote IP address, send and recieve window sizes, state, etc. To show the Network
Statistics, type: show netstat.
Alarms
SCIP-E1 supports standard E1 network alarm reporting which informs users about catastrophic or
impaired line conditions. Supported E1 alarms are as follows:
Line Code Violations (LCV) alarm
Loss of Frame Alignment (LFA) alarm
Loss of Signal (LOS) alarm
Alarm Indication Signal (AIS)
Cyclic Redundancy Check (CRC) error alarm
Remote Alarm Indicator (RAI) alarm
Far-End Block Error (FEBE) alarm
Frame Alignment Signaling (FAS) alarm
SNMP Traps
SCIP-E1 can generate SNMP traps on various events, and employs a more reliable method for
sending them to as many as four trap hosts. By storing traps and verifying connectivity before
sending, trap delivery is greatly improved in the event of temporary network outages. Supported
traps are:
076R201-000
Issue 6
Cold Start trap
LinkUp/Down traps for ethernet0, serial0, serial1, and modem0 (if so equipped)
Up/Down traps for etherswitch port1 and etherswitch port2
Contact Sense trap for Start/Stop; Contact Sense trap for Active/Clear
MACL Violation trap; Authentication Failure trap

1-5
SCIP-E1 Router Applications

The primary application of the SCIP-E1 is in router mode, providing low-cost, Carrier-safe IP
connectivity to the Carriers internal network and between managed sites. SCIP-E1 can be located
anywhere within a carriers network; for example SCIP-E1 can be located within the Central Office
environment as part of the inside plant, or can be deployed in a remote office or CEV-Hut
environment as part of the outside plant.
The SCIP-E1 can be accessed from the Central Office over the Carriers data network using
multiple WAN interfaces, such as its integral E1 CSU/DSU. A synchronous DTE interface to an
external CSU/DSU is also provided.
The SCIP-E1 in router mode exclusively uses static routes to ensure a greater degree of security and
reduce IP traffic in the carriers network. This requires the addition of static routes at the Central
Office and the SCIP-E1.
Figure 1-1 shows a typical Network Operations Center managing its remote equipment via a
SCIP-E1 at a remote site. With a SCIP-E1 deployed in all remote offices, virtually all remote
devices can be connected back to the Central Office through remote device ethernet (LAN) ports or
their craft ports.
Note
The SCIP-E1s LAN-X and IP forwarding functions are mutually exclusive; that is, when the SCIP-E1 is used
in router applications, it cannot employ its LAN-X mode of operation.
CENTRAL OFFICE: Paris
REMOTE OFFICE - Lyons
IP NETWORK "A"
IP NETWORK "B"
HOST
HOST
MANAGED
LAN DEVICES
NETWORK
MANAGER
ETHERNET
SC 2000 SHELF
SPECTRACOMM 2000
SCIP-E1
LAN
TERMINAL
SERVER
E1
ROUTER
Data / Mgmt
Network
MANAGED
CRAFT DEVICES
DEVICE 1
SCIP-V.34
Applications
REMOTE Dial-in User

MODEM
MANAGEMENT
TERMINAL
MODEM
Figure 1-1
1-6
Public
Switched
Telephone
Network
DEVICE 2
.
.
.
DEVICE 8
Typical Deployment of SCIP-E1 Router

076R201-000
Issue 6
SCIP-E1 LAN-X Applications

A Central Office (CO) can extend its LANs via one or more pairs of SCIP-E1s. The SCIP-E1s
would be configured for LAN-X mode and connected back-to-back over the WAN. This
configuration provides a reliable extension of a Carriers LAN so that any remote device may be
accessed from the CO via the SCIP-E1.
For example, back-to-back SCIP-E1s can extend the LAN within a building (i.e., between floors)
or, more typically, across a WAN connection. Figure 1-2 shows a typical deployment of one pair
of SCIP-E1 units in a Carriers network. Multiple pairs of SCIP-E1 units can be deployed to fan out
the COs reach to additional remote sites.
Note
The SCIP-E1s LAN-X and IP forwarding functions are mutually exclusive; that is, when the SCIP-E1 is
placed in LAN-extension mode, the IP routing functions are not available.
CENTRAL OFFICE: IP Network "A"
REMOTE OFFICE: IP Network "A"
LAN SEGMENT "X"
LAN SEGMENT "Y"

HOST
NETWORK
MANAGER
HOST
LAN
HOST
HOST
HOST
ETHERNET
LAN
SPECTRACOMM 2000
SCIP-E1
HOST
E1
ETHERNET
E1
TERMINAL
SERVER
MODEM
SPECTRACOMM 2000
MANAGED
CRAFT DEVICES
DEVICE 1
SCIP-E1
SCIP-V.34
APPLICATION
Backup
Management
Path
MODEM
Figure 1-2
076R201-000
Issue 6
Public
Switched
Telephone
Network
DEVICE 2
.
.
.
DEVICE 8
Typical Deployment of SCIP-E1 in LAN-extension Mode

1-7
SCIP with Spanning Tree

SCIP-E1 in LAN-X mode supports IEEE 802.1D Spanning Tree Protocol. Using Spanning tree
protocol (STP) provides the following benefits:
Eliminates Loops: Spanning Tree Protocol determines the active topology of a bridged LAN so
that there is no more than one active data path between any two workstations in that bridged
LAN. The chosen data path for each LAN segment shall have at least Root Path Cost.
Provides Fault Tolerance: Spanning Tree Protocol automatically reconfigures the active
topology of a bridged LAN when there is a breakdown in the active data path. The chosen data
path for each LAN segment shall have at least Root Path Cost.
Figure 1-3 demonstrates the optimal root path determined by the Spanning Tree Protocol.
No IP addressing is needed since in LAN-X mode the SCIP-E1 devices are in a flat network. In the
figure below, PC denotes Port Costs and BPri denotes Bridge Priority.
Note
Spanning Tree Protocol changes the active topology in response to a newly detected path with a lower Root
Path Cost, which can be due to intentional operator actions, such as modification of Port Path Costs,
disabling or enabling ports, and attaching or removing a bridge device.
Note
Note that all bridges must be enabled to derive the optimal benefit of spanning tree.
Consult the IEEE 802.1D standard to learn more about STP.
LAN "A"
E0 PC
19
SCIP-E1 #1
General
DataComm
E0
PC
100
MAC 00C0.6402.004D
B.PRI 32768
General
DataComm
SCIP-E1 #5
PC
S0 500
PC
S0 500
PC
S0 500
PC
S0 500
ROOT
MAC 00C0.6402.004C
B.PRI 20000
MAC 0010.7B86.12E2
B.PRI 32768
ROUTER
S2
PC
E0 100
PC
651
SCIP-E1 #2
General
DataComm
BLOCKED
PORT
E0
MAC 00C0.6402.004F
B.PRI 32768
General
DataComm
SCIP-E1 #6
PC
19
E0
MAC 00C0.6402.0052
B.PRI 32768
PC
19
LAN "B"
PC
S0 488
PC
E0 100
MAC 0001.96FD.83E1
B.PRI 32768
ROUTER
General
DataComm
SCIP-E1 #3
MAC 00C0.6402.0050
B.PRI 32768
PC
S0 500
PC
E0 100
BLOCKED
PORT
General
DataComm
PC
S0 500
SCIP-E1 #4
MAC 00C0.6402.004E
B.PRI 32768
PC
E0 100
LAN "C"
Figure 1-3
1-8
Spanning Tree Protocol Diagram

076R201-000
Issue 6
SCIP-E1 with MACL Security

SCIP-E1 in LAN-X mode supports MACL (Media Access Control List) Security which allows
network operators to identify valid and invalid users by the MAC address detected at the specific
port being accessed. SCIP-E1 uses a MAC address table to filter MAC addresses received at its
Ethernet (LAN) and WAN ports. Up to 100 valid MAC addresses can be defined for each interface,
thereby filtering traffic onto the network from only those addresses permitted at the associated port.
Both the LAN and WAN interfaces can be protected by MACL Security for simultaneous in-bound
and out-bound traffic validation. Since only valid users with high-level access privileges can
execute MACL commands, the MAC address table itself is protected from unwanted manipulation
by users at SCIP-E1's WAN, LAN or dial-up access points.
Figure 1-4 shows the central site SCIP-E1 device with MAC Security enabled on the serial0
interface. In this example, the MACL for this interface is configured with remote site equipment
addresses: mac1, mac2, and mac3, as well as MAC addresses for the remote SCIP-E1 and the
managed SCES device. The hacker is shown as a laptop at the remote location, attempting to
connected to the ethernet segment. Since the hackers MAC address (mac4) is not in the MACL,
this traffic will be discarded before reaching the customer's backbone. SCIP-E1 permits legal traffic
to pass through the interface, while hacker traffic is detected, dropped and reported.
Note
When MACL Security is enabled in the remote SCIP-E1, illegal ingress traffic will be discarded before
traversing the T1 towards the backbone.
Note
MACL Security is only supported when the SCIP-E1 is placed in LAN-extension mode.
CENTRAL SITE
REMOTE SITE
E1 (LAN-X)
Router
mac1
MACL with
mac1,2,3
BACKBONE
SCIP-E1
s0
mac1
mac1
mac2
mac2
mac3
mac4
mac3
mac2
SCIP-E1
s0
e0
mac3
mac4
HUB
LAN
mac4
Frames
Discarded
Figure 1-4
076R201-000
Issue 6
SCIP-E1 in LAN-X Mode with MACL Security

1-9
SCIP-E1 Applications with Ethernet Switching

The SpectraComm Ethernet Switches (SC-ES 9-Port or SC-ES 18-Port switch) are designed for use
in the Carrier's internal management network and complements the SCIP-E1 in router and LAN-X
modes of operation. A SpectraComm Ethernet Switch card extends Carrier-safe, switched Ethernet
connectivity to the Carrier's remote sites.
SpectraComm Ethernet switch provides the following benefits in a SCIP-E1 application:
Eases network congestion on existing shared-hub network traffic by breaking up the collision
domain, thereby dramatically increasing network performance.
Eliminates unnecessary network traffic by delivering dedicated bandwidth for each port. LAN
equipment at the remote site can be connected to the SC-ES using 10/100Base-T LAN
connections.
Provides port statistics and configuration features that are usually associated only with highend, fully managed switches.
Can operate stand-alone or cascaded with more SC-ES cards to satisfy the port density
requirements for your network applications.
CENTRAL OFFICE
REMOTE OFFICE
NETWORK
MANAGER
SC 2000 SHELF
SPECTRACOMM 2000
SCIP-E1
E1
LAN
MODEM
SC-ES
TERM
SERV
LAN
LAN DEVICE 1
LAN DEVICE 2
.
.
.
ROUTER
Data / Mgmt
Network
REMOTE Dial-in User
PORT 2001
MANAGEMENT
TERMINAL
MODEM
Figure 1-5
1-10
LAN DEVICE 8
PORT 2002
Public
Switched
Telephone
Network
.
.
.
PORT 2008
CRAFT DEVICE 1
CRAFT DEVICE 2
.
.
.
CRAFT DEVICE 8
Deployment of SCIP-E1 and SC-ES

076R201-000
Issue 6
The SCIP-E1 Front Panel
The SCIP-E1 Front Panel

Table 1-1 describes the SCIP-E1 front panel connectors and indicators on the SCIP-E1 card.
Figure 2-1 describes the SCIP-E1 rear panel connections in SpectraComm shelves/enclosures.
Table 1-1
Front Panel
INS
SCIP-E1 Card Front Panel
LEDs / Ports
Description
ON
On (GREEN) indicates SCIP-E1 is receiving power.
INS
On (GREEN) indicates SCIP-E1 is ready for operation.
MODEM TX
Off
No send data present at the Modem port.
On (GREEN)
Indicates Send Data frames are present at the Modem port.
Off
No Receive Data present at the Modem port.
On (GREEN)
Indicates the presence of data frames at the Modem port,

received from the remote modem.
Off
No data is being sent out at E1 Network port.
On (GREEN)
Indicates Send Data frames are present at the E1 Network

port.
ON
MODEM RX
MODEM
E1 TX
E1
T
X
R
X
Action
AUX
E1 RX
C
R
A
F
T
AUX TX
AUX RX
TM ALM
ALM
P
O
R
T
1
ETHERNET
2
P
O
R
T
2
TM
-Future Use-
Off
No Receive Data present at the E1 Network port.
On (GREEN)
Indicates data present at the E1 port, originating from the

Network.
Off
No send data present at the AUX port.
On (GREEN)
Indicates Send Data frames are present at the AUX port.
Off
No Receive Data present at the AUX port.
On (GREEN)
Indicates Receive Data frames present at the AUX port.
Off
Normal conditions.
On (RED)
Indicates E1 Network alarm conditions.
Off
Indicates normal operating conditions.
On (RED)
Indicates SCIP-E1 is in Test Mode, performing a diagnostic

test.
Craft Port
RS-561-compatible jack for direct connection of the

unit to a local VT100-compatible ASCII terminal.
Ethernet Port 1
Each Ethernet port supports

10/100Base-T connectivity.
Ethernet Port 2
Ethernet LEDs
(1 and 2)
SC-IP
Off
Ethernet port 1 or 2 is not connected
On (STEADY)
Steady On (GREEN) indicates the Ethernet port (1 or 2) is

connected and not passing data.
ON (BLINKING) Blinking On (GREEN) indicates the Ethernet port (1 or 2) is

connected and actively passing data.
076R201-000
Issue 6

1-11
Technical Specifications
The following table describes the physical, operational, and environmental specifications for the
SpectraComm IP. Conforming to these specifications ensures maximum system performance and
reduces the chances of mechanical breakdown and personnel hazard.
Table 1-2
SCIP-E1 Specifications (Initial Feature Set)
Item
Specification
Description
Physical
Characteristics
Dimensions
W: 178 mm (7.0 in.); H: 21 mm (0.81 in.); D: 241 mm (9.5 in.)
Weight
Weight: 0.28 kg (10 oz.; Shipping weight: 0.74 kg (1 lb 10 oz)
Electrical
Characteristics
Power Requirements
AC or DC power, according to your SpectraComm shelf/

enclosure configuration.
Voltage/Frequency
Refer to the appropriate SpectraComm Shelf Manual.
Fusing
Refer to the appropriate SpectraComm Shelf Manual.
Environment
Power Dissipation
6 Watts maximum, each
Non-operating
Temperature: -40 to 70 degrees C (-40 to 158 degrees F)

Relative humidity: 5% to 95%
Altitude: Up to 12,191 m (40,000 ft)
Operating
Temperature: 0 to 50 degrees C (32 to 122 degrees F)

Relative humidity: 5% - 90%, non-condensing
Altitude: -60 to 4,000 m (-197 to 13,123 ft)
For altitudes above 1800 m (5906 ft), derate by
one degree C per 300 m (1 degree C per 1000 ft).
Integral CSU/
DSU
E1 digital carrier (non-loaded, staggered-twist ABAM, PIC or

pulp-insulated exchange-type cable (19-26 gauge)
Line Impedance
120 ohm
Network (E1)
RJ48C modular jack
Frequency
2.048 MHz +/-50 ppm
Timing Source
Internal clock, slave (receive timing loopback)
Data Rate
N x 56/64 Kbps, where N = 1 - 31 DS0s
Data Encoding
HDB3
Frame Format/Mode
E1 Framed G.704 (with or without CRC4)
Integral Modem
(Optional)
Communication
Asynchronous, V.34 modulation, 2-wire switched network
User Configurations
Autobaud, selectable autoanswer or callback with up to 20

callback numbers stored.
Management
Command Line Interface
Terminal and Telnet command line interface (CLI)
HTTP Interface
Web-based CLI via embedded web-server (requires web

browser with JAVA 1.1 supported)
FTP or TFTP
File protocols for firmware (Flash) downloading
DTE Speeds
Asynchronous 300, 1200, 2400, 9600, 19200, 38400, 57600,

115200 (RS232)
Terminal Server
Interface
1-12
Communication Line

076R201-000
Issue 6

Table 1-2
SCIP-E1 Specifications (Initial Feature Set)
Item
Specification
Description
Supported
Protocols
Frame Relay LMI

(UNI-U)
ITU-T Q.933 Annex A

ANSI T1.617 Annex D
Consortium LMI.
Frame Relay
IP Encapsulation
RFC 1490 IETF, Cisco (raw), SNAP
Frame Relay PVCs
Maximum number: 16
Point-to-Point Protocol
(PPP)
RFC 1661 (1994), also known as STD 51
LAN-X
GDC Proprietary LAN extension
Ethernet
ANSI/IEEE 802.3;
Rates: 10 Mbps, 100 Mbps
Spanning Tree
IEEE 802.1D 1998
Authentication
SCIP Local Authentication

TACACS+ Authentication Protocol Version1.78 (CISCO)
SCIP-E1 Card in any

shelf/enclosure
UL Listed; CUL listed, TUV
Compliance &
Compatibility
EN 55022: 1994
EN 55024: 1998
CTR 13
Integral Modem
FCC Part 68 approved; FCC Part 15 approved.

UL Listed; CUL listed.
Compliance with Bell Pub. 62310 and ANSI T1.410 standards
Note
The SCIP-E1 does not support passing data between a CRC and non-CRC frame type. Therefore, the CRC
option at the local end SCIP-E1 should be configured to match the CRC option at the far end device.
076R201-000
Issue 6

1-13
1-14

076R201-000
Issue 6
Chapter 2:
Installation & Connections
Overview
The SCIP-E1 card is designed for rack-mounting in a GDC SpectraComm 5000 or SpectraComm
2000 shelf. The card can also be deployed in the SpectraComm 1001/1002 standalone enclosure.
This chapter describes installing the SCIP card, making power connections, performing preoperational checks, and making system connections. If this is your first installation of the SCIP-E1,
be sure to read the previous sections of this manual to understand the optimal functioning of the
SCIP-E1 product as it applies to your network.
This chapter also provide brief procedures for setting up SCIPs internal modem (if so equipped).
An overview of CLI and detailed procedures for quickly setting up the SCIP for IP forwarding or
LAN-extension are provided in Chapter 3, SCIP-E1 Configuration .
Note
The SCIP-E1s LAN-X mode and IP forwarding functions are mutually exclusive; that is, when the SCIP-E1
is configured for LAN-extension mode, the IP routing functions are not available, and visa-versa.
Shelf / Enclosure Installation Guidelines
Locate the SpectraComm shelf in a ventilated area where the ambient temperature does not
exceed environmental specifications (Table 1-2).
Do not install the shelf directly above equipment such as power supplies, which generate large
amounts of heat.
SpectraComm IP Router Card Installation Guidelines
Note
The SCIP-E1 card may be installed in any slot in a SpectraComm shelf or enclosure.
Determine whether the SCIP-E1 is to function as an IP forwarding device (router) or as a LAN

extension device in your network.
Perform the setups, connections, and pre-operation checks for IP forwarding or for LAN-X
mode, in their entirety, as described in this chapter.
The SCIP-E1 comes from the factory with only the Modem and the AUX ports Enabled.
IMPORTANT SECURITY PRECAUTION:

Make sure to change the default password at the Craft port before connecting the Modem port or
the AUX port to the network.
076R201-000
Issue 6

2-1
Overview
Unpacking Instructions
The SCIP-E1 card and components are shipped in shock-absorbent packing within a corrugated
box. Table 2-1 lists the standard SCIP equipment. Some components will not be required/supplied
for your network installation. Remove each component from the box and perform a thorough
inspection. If any component appears damaged, contact the shipper immediately. All damaged
components must be retained until an inspection by the shipper has been completed. If necessary to
re-package and return the unit, use the original box and packing material.
Note
For cable part numbers, the -XXX designation refers to cable length, in feet.
Table 2-1
SCIP-E1 Equipment
Description
Connectivity
SpectraComm IP E1 rackmount card
Part Number
076P032-002
SpectraComm IP E1 rackmount card w/modem

SpectraComm IP E1 card for SC1001 S/A Encl. (115VAC)
SpectraComm IP E1 card for SC1001 S/A Encl. (220VAC)
In any shelf or enclosure:

LAN, E1/FE1
(PPP, Ethernet)
076M032-002
076A032-021
076A032-022
SpectraComm IP E1 card for SC1002 S/A Encl. (+24/-48 VDC)
076A032-026
SpectraComm IP E1 card w/modem for SC1001 S/A Encl. (115VAC)
076A032-031
SpectraComm IP E1 card w/modem for SC1001 S/A Encl. (230VAC)
076A032-032
SpectraComm IP E1 card w/modem for SC1002 S/A Encl. (+24/-48VDC)
076A032-036
Factory-installed Default Configuration Profile (01-99)
Router or LAN-X mode
TBD
Cable, CAT5 UTP straight-thru
LAN
(Ethernet Ports 1 & 2)
S-078H010-XXX
Craft Port
830-128-8XX
Cable, RJ45 to RJ45 120 Ohm
E1 Network
027H251-XXX
Adapter, RJ45 to Dual BNC 75 Ohm
E1 Network
209-044-001
75 Ohm BNC cables (Tx and Rx)
Cable, CAT5 UTP crossover

Cable, RJ45 to RJ45
S-078H011-XXX
E1 Network
Customer-supplied
Adapter, RS232-RS561 DB25M to RJ45
Craft Port
029H210-001
Adapter, RS232-RS561 DB9 M to RJ45
Craft Port
029H211-001
Synch/Asynch Port
209-036-036
Adapter, DB25M to RJ45

Splitter Adapter, RJ45 plug to two RJ45 plugs
E1/Modem Line Port
209-036-035
Cable, 6-pin RJ11 to 8-pin RJ45
Internal Modem
(E1/Modem Line Port)
024H142-007
Harmonica Block, 50-pin to 8-pos RJ45

Cable, DTE Interface, shielded DB25M to 50-pin amphenol
Cable, DCE Interface, shielded DB25M to 50-pin amphenol
Term Serv Port

or Contact Sense Port
209-036-034
025H502-004
025H503-004
Note
2-2
To connect the SCIP-E1 to a SC-ES device or to a server, use the straight-thru cable (S-078H010-XXX).
In a daisy-chain network configuration, use the crossover cable (S-078H011-XXX) to make the SCIP-to-SCIP
connection.

076R201-000
Issue 6
Overview
Shelf System Options

Table 2-2 lists the shelf systems and additional products that can be used with the SCIP-E1.
Unless otherwise stated in the table, each shelf system includes the following components:
Note
base shelf and two mounting brackets (19/23-inch standard) with mounting hardware
one power supply and one power supply blank front panel
one Zone 1 connector panels
one 16-slot DB25 Zone 3 connector panel.
For detailed information, refer to SC/UAS Shelf Manual (GDC P/N 010R302-000),
SC 2000 Shelf Manual, (GDC P/N 010R358-000), or
SC 1001/1002 Enclosure Manual (GDC P/N 010R112-000).
Table 2-2
Shelf Systems and Optional Equipment
Item
SC 1001 Enclosures
Description
SpectraComm Standalone Enclosure, one slot, AC-powered, 115V
Part Number
010M300-001
SpectraComm Standalone Enclosure, one slot, AC-powered, 220V
010M300-002
SC 1002 Enclosure
SpectraComm Standalone Enclosure, one slot, DC-powered
010B301-006
SC 2000 Shelves
SpectraComm 2000 Shelf, two slots, non-redundant power supply
010B226-001
SpectraComm 2000 Shelf, two slots, redundant power supply
010B226-002
MS-2 Mod. 1, Dual Modular 100/120 Vac

MS-2 Shelf 100/120 Vac
010M054-001
010B150-001
MS-2 Mod. 2, Dual Modular -48, 60 Vdc

MS-2/DC Shelf -48, 60 Vdc
010M055-001
010B152-001
MS-2 Mod. 3, Dual Modular 220/240 Vac

MS-2E AC Export Shelf 220/240 Vac
010M056-001
010B151-001
MS-2 Mod. 7, (Mass Term) 100/120 Vac

MS-2 Shelf 100/120 Vac
010M073-001
010B150-001
MS-2 Mod. 8, (Mass Term) 220/240 Vac

MS-2E AC Export Shelf 220/240 Vac
010M074-001
010B150-001
MS-2 Mod. 9, (Mass Term) -48, 60 Vdc

MS-2/DC Shelf -48, 60 Vdc
010M075-001
010B152-001
MS-2 Mod. 10, Dual Modular -48, 60 Vdc (redundant P.S.)

MS-2/DC Shelf -48 - 60 Vdc
010M070-001
010B152-001
MS-2 Mod. 12, (Mass Term) -48, -60 Vdc (redundant P.S.)
MS-2/DC Export Shelf -48, - 60 Vdc
010M076-001
010B152-001
SC 5000
Shelves
076R201-000
Issue 6

2-3
Shelf and Card Connections

When the SCIP-E1 is installed in GDC shelves and enclosures:
Always adhere to the installation guidelines, cited in the beginning of this chapter, and the
connection guidelines listed below:
Observe all ESD precautions during installation procedures. Be sure to wear a properly
grounded antistatic wrist strap.
Make all electrical connections through the back panel and front panel connectors provided.
MODULAR CONNECTIONS
SC 5000 SHELF
SCIP-E1
FRONT
PANEL
INS
ON
CONNECTOR DETAILS
E1 NETWORK PORT
and MODEM PORT
8
7
6
5
4
3
2
1
PIN 1
MODEM
SHELF
ADDRESS
JUMPER
J51
J32
J48
J31
J47
J30
J46
J29
J45
J28
J44
J27
J43
J26
J42
J25
J41
J24
J40
J23
J39
J22
J38
J21
J37
J20
J36
J19
J35
J18
J34
T
X
E1
R
X
AUX
J17
J33
J50
J52
J16
J15
J14
J13
J12
J11
J10
J9
J8
J7
J6
J5
J4
J3
J2
C
R
A
F
T
J1
PIN 1
P
O
R
T
1
ETHERNET
1
2
ASYNC AUX PORT

SYNC DTE PORT
(To External Devices)
P
O
R
T
8
7
6
5
4
3
2
1
PIN 8
Note: Uses Y-Splitter

Cable Assy
TM ALM
PIN 1
SC 2000 SHELF
SC-IP
TERM SERVER PORT

(To Craft Devices)
or CONTACT SENSE PORT

(To Dry Contacts)
E
B
NTWK A
NTWK B
SC 1001/1002 ENCLOSURE
PIN
1
TERM
Note: Contact Sense Port

also supports DB25M to
wirewrap
A
MASS TERMINATION CONNECTIONS
G
UNIVERSAL BACKPLANE
SC 5000 SHELF
CRAFT PORT
ETHERNET PORTS
8
7
6
5
4
3
2
1
PIN 1
J19
J18
J17
J22
J21
J20
J51
ZONE 1
J50
J52
J16
J15
J14
J13
J12
J11
J10
J9
J8
J7
J6
J5
J4
J3
J2
MASS TERM
NETWORK PORTS
STANDARD BACKPLANE
J1
TERM
G MASS
SYNCH/ASYNCH
J20
F
Figure 2-1
2-4
J19
J18
J17
PORTS
SpectraComm Card and Shelf Connections

076R201-000
Issue 6
Network / Modem Port

(Interface A in Figure 2-1)
The Network/Modem port is an RJ48C connector located on the shelf rear panel at the SCIP-E1 slot
(J17-J32). This shared interface provides the connection for the E1 Line and the internal modem
simultaneously, using an RJ45 to dual RJ45 Y-adapter cable. Figure 2-2 and Table 2-3 describe the
cable connections and pinouts for port A.
Note
Modem connectivity at this interface is only supported on SCIP-E1 devices that are equipped with an internal
modem. To make a connection via an external modem, use the Sync/Async Port , described below.
CONNECTION OPTIONS
SCIP Rear Panel
Splitter Detail
209-036-035
Internal Modem and E1 Line

Interface Cables
NTWK and/or
Modem Port
NTWK/Modem
Port
Port Cable
027H251-XXX (E1 Line)

PIN 1
S-078H010-XXX
024H142-007 (Modem)
SPLITTER
ADAPTER
209-036-035
(See Detail)
PIN 1
E1 Line Only
NTWK
Port
Interface Cable
027H251-XXX (E1 Line)
A or 209-044-001 adapter w/customer-supplied cables

Internal Modem Only
Figure 2-2
Table 2-3
Y-Adapter
Cable Pinouts
076R201-000
Issue 6
Interface Cable
024H142-007 (Modem)
Network and Internal Modem Port Connections

Network/Modem Interface Pinouts
Pin
Port Pinouts
Modem
Port
1
2
4
5
7
8
Signal
Direction
Description
Connectivity
Rx Ring
Rx Tip
Tx Ring
Tx Tip
Modem-Tip
Modem-Ring
To SCIP-E1
To SCIP-E1
From SCIP-E1
From SCIP-E1
two-wire
(full duplex)
Receive Data (Ring)

Receive Data (Tip)
Transmit Data (Ring)
Transmit Data (Tip)
Tx-Rx Tip
Tx-Rx Ring
E1
E1
E1
E1
Modem
Modem
Signal
Direction
Shelf Connector
(RJ48)
Switched Network
(RJ11)
E1 Line
(RJ48)
E1-Rx-Ring
E1-Rx-Tip
E1-Tx-Ring
E1-Tx-Tip
Modem-Tip
Modem-Ring
From line
From line
To Line
To Line
two-wire
bi-directional
1
2
3
4
5
7
8
3
4
1
2
4
5
-

2-5
Sync/Async Port
(Interface B in Figure 2-1)
This shared port is a RJ48 connector on the shelf rear panel at the SCIP-E1 slot (J33-J48). When
enabled as the AUX interface this port supports an asynchronous connection to an external modem.
When enabled as the S1 (serial 1) interface, this port supports a synchronous connection to a
SC521A device for DDS network connections (RJ45-to-DB25M adapter cable required).
Table 2-4 describes the Sync/Async port pinouts.
Table 2-4
Note
2-6
Sync/Async Port Pinouts
RJ45 Pin
Signal
DB25M Pin
1
2
3
4
5
6
7
8
Tx Clk
DCD
Rx Clk
GND
RxD
TxD
CTS
RTS
15
8
17
7
3
2
5
4
When a serial1 or aux1 interfaces is enabled, RTS is forced ON. When both are disabled, RTS is forced OFF.

076R201-000
Issue 6
Contact Sense Port

(Interface C in Figure 2-1)
The Contact Sense port is a DB-25 connector located on the shelf rear panel at the SCIP-E1 slot
(J1-J16).
Table 2-5 describes the port pinouts for contacts 1 through 8 and the corresponding cable
pinouts when the DB25M to wirewrap is used.
Figure 2-3 and Figure 2-4 describes the corresponding cable assembly pinouts when the
DB25M to Telco 50-pin F interface cable and 8-port harmonica block adapter is used.
Note
The DB25 connector can also be used for Terminal Server connections to external devices. When TermServ
is enabled, the Contact Sensing functions are disabled.
Note
For more information on Contact Sense, refer to Chapter 5, Additional Features .
Table 2-5
Signal
076R201-000
Issue 6
Contact Sense Connector/Wirewrap Cable Pinouts (GDC P/N 025H001-025)

P2 Connector
P1 Cable
Wire Color Code
C1
Port 1 Pin 1
WHT/BLU
C1
Port 1 Pin 2
WHT/ORG
C2
Port 2 Pin 4
WHT/BRN
C2
Port 2 Pin 5
WHT/SLATE
C3
Port 3 Pin 7
RED/ORG
C3
Port 3 Pin 8
RED/GRN
C4
Port 4 Pin 10
10
RED/SLATE
C4
Port 4 Pin 11
11
BLK/BLU
C5
Port 5 Pin 14
14
BLU/WHT
C5
Port 5 Pin 15
15
ORG/WHT
C6
Port 6 Pin 17
17
BRN/WHT
C6
Port 6 Pin 18
18
SLATE/WHT
C7
Port 7 Pin 20
20
ORG/RED
C7
Port 7 Pin 21
21
GRN/RED
C8
Port 8 Pin 23
23
SLATE/RED
C8
Port 8 Pin 24
24
BLU/BLK

2-7
DTE INTERFACE CABLE (P/N 025H502-004)

DB25M
HARMONICA BLOCK (P/N 209-036-034)
TELCO 50-PIN F
RJ-45, 8-POS
RS-561
TELCO 50-PIN M
DTE
PORT 1
1
2
26
3
26
3
5
6
(C1)
29
6
5
6
DTE
PORT 2
(C2)
32
9
5
6
DTE
PORT 3
(C3)
10
11
35
12
35
12
5
6
DTE
PORT 4
(C4)
14
15
38
15
38
15
5
6
DTE
PORT 5
(C5)
17
18
41
18
41
18
5
6
DTE
PORT 6
(C6)
20
21
44
21
44
21
5
6
DTE
PORT 7
(C7)
23
24
47
24
47
24
5
6
DTE
PORT 8
(C8)
4
5
29
7
8
32
Figure 2-3
2-8
Contact Sense DTE Cable Pinouts

076R201-000
Issue 6
DCE INTERFACE CABLE (P/N 025H503-004)

DB25M
TELCO 50-PIN F
RJ-45, 8-POS
RS-561
TELCO 50-PIN M
DCE
PORT 1
2
1
26
3
26
3
5
6
(C1)
5
4
29
6
29
6
5
6
DCE
PORT 2
(C2)
8
7
32
9
32
9
5
6
DCE
PORT 3
(C3)
11
10
35
12
35
12
5
6
DCE
PORT 4
(C4)
15
14
38
15
38
15
5
6
DCE
PORT 5
(C5)
18
17
41
18
41
18
5
6
DCE
PORT 6
(C6)
21
20
44
21
44
21
5
6
DCE
PORT 7
(C7)
24
23
47
24
47
24
5
6
DCE
PORT 8
(C8)
Figure 2-4
076R201-000
Issue 6
Contact Sense DCE Cable Pinouts

2-9
Terminal Server Port

(Interface C in Figure 2-1)
The Terminal Server port is a DB-25 connector located on the shelf rear panel at the SCIP-E1 slot
(J1-J16). It supports 2400, 4800, 9600, 19200, 38400 and 57500 bps asynchronous data for terminal
interface control of up to eight attached devices. An interface cable, harmonica adapter and cable/
adapter suited to the intended terminal devices will be required.
The Terminal Server port uses an interface cable at the SCIP Terminal Server port (DB25M to
Telco 50-pin F), a harmonica block adapter (8 ports) and a customer-supplied cable/adapter suited
to the intended terminal devices.
Table 2-6 describes the TermServ connector pinouts.
Figure 2-5 describes pinouts for TermServ DTE cable assemblies.
Figure 2-6 describes pinouts for TermServ DCE cable assemblies.
Note
The DB25 connector can also be used for Contact Sense of external relays at the site. When Contact Sense is
enabled, the Terminal Server functions are disabled.
Table 2-6
2-10
Terminal Server Connector Pinouts (DTE Interface)
P2 Connector
Signal
Direction
P2 Connector
Signal
Direction
Port 1 Pin 1
RXD-1
To SCIP-E1
Port 5 Pin 14
RXD-5
To SCIP-E1
Port 1 Pin 2
TXD-1
From SCIP-E1
From SCIP-E1
Port 1 Pin 3
GND-1
Port 2 Pin 4
RXD-2
Port 2 Pin 5
TXD-2
Port 5 Pin 15
TXD-5
Port 5 Pin 16
GND-5
To SCIP-E1
Port 6 Pin 17
RXD-6
To SCIP-E1
From SCIP-E1
Port 6 Pin 18
TXD-6
From SCIP-E1
Port 2 Pin 6
GND-2
Port 6 Pin 19
GND-6
Port 3 Pin 7
RXD-3
To SCIP-E1
Port 7 Pin 20
RXD-7
To SCIP-E1
Port 3 Pin 8
TXD-3
From SCIP-E1
Port 7 Pin 21
TXD-7
From SCIP-E1
Port 3 Pin 9
GND-3
Port 7 Pin 22
GND-7
Port 4 Pin 10
RXD-4
To SCIP-E1
Port 8 Pin 23
RXD-8
To SCIP-E1
Port 4 Pin 11
TXD-4
From SCIP-E1
Port 8 Pin 24
TXD-8
From SCIP-E1
Port 4 Pin 12
GND-4
Port 8 Pin 25
GND-8
Port 4 Pin 13
Not Used
Note
In order to establish a Craft session via the SCIPs Terminal Server port, some devices will require control
leads tied to the appropriate state. For example, a device with a 25-pin terminal connection may need one or
more pins driven to the EIA high state.
Note
For information on Telnet menu access to a specific TermServ port, refer to Chapter 5, Additional Features .

076R201-000
Issue 6
DTE INTERFACE CABLE (P/N 025H502-004)

DB25M
TELCO 50-PIN F
RJ-45, 8-POS
RS-561
TELCO 50-PIN M
27
2
28
1
26
3
3
1
2
1
26
3
6
4
5
4
29
6
30
5
31
4
29
6
9
7
8
7
32
9
33
8
34
7
32
9
12
10
11
10
35
12
36
11
37
10
35
12
16
14
15
13
38
15
39
14
40
13
38
15
19
17
18
16
41
18
42
17
43
16
41
18
22
20
21
19
44
21
45
20
46
19
44
21
25
23
24
22
47
24
48
23
49
22
47
24
Figure 2-5
076R201-000
Issue 6
GND
RX
TX
1
2
3
4
5
6
7
8
DTE
PORT 2
GND
RX
TX
1
2
3
4
5
6
7
8
DTE
PORT 3
GND
RX
TX
1
2
3
4
5
6
7
8
DTE
PORT 4
GND
RX
TX
1
2
3
4
5
6
7
8
DTE
PORT 5
GND
RX
TX
1
2
3
4
5
6
7
8
DTE
PORT 6
GND
RX
TX
1
2
3
4
5
6
7
8
DTE
PORT 7
GND
RX
TX
1
2
3
4
5
6
7
8
DTE
PORT 8
GND
RX
TX
1
2
3
4
5
6
7
8
DTE
PORT 1
Terminal Server DTE Cable Pinouts

2-11
DCE INTERFACE CABLE (P/N 025H503-004)

DB25M
TELCO 50-PIN F
TELCO 50-PIN M
27
2
28
1
26
3
3
2
1
1
26
3
6
5
4
4
29
6
30
5
31
4
29
6
9
8
7
7
32
9
33
8
34
7
32
9
12
11
10
10
35
12
36
11
37
10
35
12
16
15
14
13
38
15
39
14
40
13
38
15
19
18
17
16
41
18
42
17
43
16
41
18
22
21
20
19
44
21
45
20
46
19
44
21
25
24
23
22
47
24
48
23
49
22
47
24
Figure 2-6
2-12

RJ-45, 8-POS
RS-561
GND
RX
TX
1
2
3
4
5
6
7
8
DCE
PORT 2
GND
RX
TX
1
2
3
4
5
6
7
8
DCE
PORT 3
GND
RX
TX
1
2
3
4
5
6
7
8
DCE
PORT 4
GND
RX
TX
1
2
3
4
5
6
7
8
DCE
PORT 5
GND
RX
TX
1
2
3
4
5
6
7
8
DCE
PORT 6
GND
RX
TX
1
2
3
4
5
6
7
8
DCE
PORT 7
GND
RX
TX
1
2
3
4
5
6
7
8
DCE
PORT 8
GND
RX
TX
1
2
3
4
5
6
7
8
DCE
PORT 1
Terminal Server DCE Cable Pinouts

076R201-000
Issue 6
Craft Port (DCE Interface)

(Interface D in Figure 2-1)
The SCIP-E1 Front Panel Craft (or console) port is an RS-561-compatible RJ45 jack that supports
9600bps asynchronous data. It provides terminal interface control of the unit by direct connection
to a local VT100-compatible ASCII terminal. Connection to the Craft port requires an RJ45-toRJ45 cable (GDC P/N 830-128-007 and GDC P/N 029H210-001 or 029H211-001). The table
below describes the Craft port pinouts
Table 2-7
Pin
Craft Port Pinouts (DCE Interface)
Signal
Direction
Description
No Connection
DCD
From SCIP-E1
Data Carrier Detect - Always on
DTR
To SCIP-E1
Data Terminal Ready - Not used
Signal Ground
RXD
From SCIP-E1
Receive Data - Supervisory data to the terminal
TXD
To SCIP-E1
Transmit Data - Supervisory data from the terminal
CTS
From SCIP-E1
Clear To Send - Always on
RTS
To SCIP-E1
Request To Send From the terminal
Signal Ground
Ethernet (LAN) Ports

(Interface E in Figure 2-1)
The SCIP-E1 Front Panel LAN ports support 10/100BASE-T Ethernet connectivity. This port
requires an RJ45-to-RJ45 straight-thru or crossover cable (GDC S-078H010-XXX or S-078H011XXX). The table below describes Ethernet port pinouts.
Table 2-8
Pin
076R201-000
Issue 6
Ethernet LAN Port 1 & Port 2 Pinouts
Signal
Direction
Description
Rx+
To SCIP
Receive Data
Rx-
To SCIP
Receive Data
Tx+
From SCIP
Transmit Data
Tx-
From SCIP
Transmit Data

2-13
SCIP Power-Up
SCIP Power-Up
Before making connections, determine whether the SCIP-E1 can be powered from the same AC
circuit as the equipment connected to its terminal server ports. Having the SCIP and the connecting
equipment on the same AC circuit prevents large circulating currents caused by differences in
ground potential.
Note
If you cannot determine whether both devices are on the same circuit, verify that the potential difference
between the grounding circuits of the respective power outlets is no more than 0.25V rms.
Note
The AC outlet that powers the SCIP units should not be under switch control.
To connect the unit to power and perform a pre-operation Self-Test, do the following:
1. Make sure there are no site or network cables connected to the unit's rear panel.
2. Attach the power cord (P/N 830-024-003) to the rear panel IEC connector and to a wall
receptacle that supplies the required AC power.
3. Verify that the Front Panel INS LED flashes on and off.
After a few seconds, the LED will illuminate steady.
4. The SCIP-E1is now ready for configuration to suit your network requirements.
Note
2-14
IMPORTANT: The SCIP-E1comes from the factory with the Modem and the AUX ports Enabled for ease
of initial configuration. As a security precaution, do not connect the Modem and AUX ports to the network
until the default password has been changed via the Craft port.
(See Chapter 3: SCIP-E1 Configuration .

076R201-000
Issue 6
Modem Connectivity
Modem Connectivity
If your SCIP-E1 device is equipped from the factory with an integral modem, it can provide secure
modem access to remote devices at data rates up to 33.6 Kbps via a PPP or a Console Shell session.
The following connection methods are recommended for each type of session:
Note
For initiating the PPP session,

Microsoft DialUp Networking is the preferred method.
For initiating a Console Shell session,
a terminal emulation application is the preferred method (i.e. HyperTerminal).
The following procedures use the SCIP-E1 command line interface (CLI) to configure the modem. An
overview of CLI is provided in Chapter 3, SCIP-E1 Configuration .
SCIP-E1 Modem Configuration

1. By default, the SCIP modem interface M0 is enabled. If it has been disabled, type the
following to enable the interface:
configure interfaces enable m0
2. View the current modem mode setting (auto-answer or callback) by typing:

show modem mode
3. If necessary, configure SCIP-E1 for desired mode:
For auto-answer mode, type: configure modem mode auto-answer
For callback mode, type: configure modem mode callback
Modem Procedures
Auto-Answer Mode of Operation
The following procedure starts up a PPP session with SCIP-E1 in auto-answer mode.
1. Dial into SCIP.
2. Login using a valid username and password.
3. After Login, select DialUp Networking or Terminal Emulation from menu.
If DialUp Networking is selected, a PPP session is initiated by SCIP.
4. When the workstation terminal window shows non-printable characters, click the terminal
window Continue button or press F7.
5. PPP will negotiate a session, give the workstation its IP address and establish the PPP link.
6. Once the PPP connection is made, Telnet, HTTP, etc., may be used from the workstation.
7. If Terminal Emulation is selected, the following message is displayed:
SC-IP CONSOLE session in progress.
Override (y/n)?
Entering y will cause any current SCIP-E1 console session to be terminated, and will start the
Terminal Emulation console session.
076R201-000
Issue 6

2-15
Modem Connectivity
Callback Mode of Operation

The following procedure allows Microsoft DialUp Networking to auto-answer and start up a PPP
session with SCIP in callback mode. Perform all of the step in the order given.
1. Configure DialUp Networking to open a terminal window after dialing.
2. Set up the DialUp Networking Configure->Connection->Advanced Extra Settings string as
follows:
&COS0=1
3. SCIP can be configured with up 20 phone numbers, each requiring a callback location name.
To add a callback number, type:
configure modem callback add [location name] [phone-number]
To delete a callback number, type:

configure modem callback delete [location name]
4. Dial into SCIP.

5. Login using a valid username and password.
6. Select a callback location from the displayed list. SCIP will hang up.
7. After a delay of 30 seconds, SCIP will call the selected location.
8. After the connection is made, select PPP or Console Shell from the menu.
9. If DialUp Networking is selected, SCIP will initiate a PPP session.
10. When the workstation terminal window shows non-printable characters, click the terminal
window Continue button or press F7.
11. PPP will negotiate a session, give the workstation its IP address and establish the PPP link.
12. Once the PPP connection is made, Telnet, HTTP, etc., may be used from the workstation.
13. If Terminal Emulation is selected, the following message is displayed:
SC-IP CONSOLE session in progress.
Override (y/n)?
Entering y will cause any current SCIP console session to be terminated, and will start the
Terminal Emulation console session.
2-16

076R201-000
Issue 6
Modem Connectivity
Special Considerations for Callback Mode
If a GDC modem will be used instead of the SCIP modem, set up the DialUp Networking
Configure-> Connection->Advanced Extra Settings string as follows:
&COS0=1&S3
where:
&CO causes the modem to force Carrier Detect ON,
S0=1 sets auto answer mode to one ring,
and &S3 forces DSR ON even after disconnect.
If spaces are desired in the callback location name, use the double-quoted string format.
When entering callback phone numbers, use only hyphens or commas as separators.
The callback locations and phone numbers are limited to 20 characters each.
When using the backspace key in the DialUp Networking terminal window, the character
intended for deletion will remain displayed, and a solid block character or a dot appears in the
position of the cursor. However, the backspace has been properly processed.
The cursor control keys such as left and right arrows are not processed by the dial application
even though they appear to be in the window.
Additional Modem Features

The SCIPs integral modem supports modem authentication, caller ID, and modem activity logging.
Refer to Chapter 5, Additional Features and Chapter 6, Diagnostics & Monitoring to configure
and use these additional modem features.
076R201-000
Issue 6

2-17
2-18
Modem Connectivity

076R201-000
Issue 6
Chapter 3:
SCIP-E1 Configuration
SCIP-E1 Configuration Overview

SCIP-E1 configuration is performed through the command line interface (CLI). You can execute
CLI commands at a hyperterminal connection, through a Telnet connection or at the web interface.
A brief overview of CLI is provided below. Information on using the web-based CLI is provided in
Chapter 4, The Web Interface .
Command Line Interface (CLI) Basics

The SCIP-E1 command line interface is an interactive means of configuring the SCIP-E1 through
a Telnet session over the LAN/WAN, PSTN, or by typing commands at a VT100-compatible ACSII
terminal connected to the SCIP-E1 CRAFT port. The CLI is a smart, controlled-access interface
that provides general and context-sensitive help, automatically expands abbreviated command or
subcommands and also anticipates any required command arguments. The CLI will prompt for any
required argument that is missing from a command line.
Smart CLI Quick Reference
Get context-sensitive command help by using the ? character in the CLI command string or
by referring to the commands, parameters, defaults, and arguments in Appendix A, Application
Guidelines .
Type ? at the command prompt to view a description of IP and Utility commands (shown
below). If you are in User mode, several of the commands shown below will not display.
_______________________SpectraComm IP Commands______________________
clear
Reset functions
configure Configure system parameters
connect
Connect to terminal interface or modem
default
Default configuration to factory values.
disable
Turn off supervisor/admin commands
enable
Turn on supervisor/admin commands
help
Description of the command line interface and help system
ping
Send ping to remote device
show
Show system parameters
trace-rte Trace route packet takes to remote device
_______________________Utility Commands______________________________
batch
Store and/or run commands in batch mode
exit
Exit SpectraComm IP Command Line Interface
flash
Copy flash files/select flash boot file
reboot
Halt and perform a reboot
netstat
Show TCP socket connections
services Show/Enable/Disable HTTP, SNMP, TELNET, FTP, TFTP Services
who-am-i Show current user name
Execute each command string by pressing the Enter key (or <cr>).
Commands entered with proper syntax and all required parameters/arguments will take affect
immediately. If required parameters/arguments are missing, they will be prompted individually.
Abbreviated commands are accepted at the command prompt.
To configure IP and subnet mask addresses, refer to Appendix A, Application Guidelines .
076R201-000
Issue 6

3-1
Initializing the SCIP-E1 for Configuration

Note
This section describes initializing SCIP-E1 via a craft port connection.

To access SCIP-E1 via the Telnet menu, refer to Chapter 5: Additional Features .
1. Ensure your workstation is equipped with communication software (i.e., Hyperterminal) for
making a VT-100 connection. Consult your PCs operating system documentation for details.
2. For initial configuration of a SCIP-E1, you must configure a VT100-compatible terminal for
the following settings: 9600,8,N,1
3. Connect the terminal to the SCIP-E1 CRAFT (console) port using the provided cable:
(GDC P/N 029H211-001).
4. Make a Hyperterminal connection to the CRAFT port.
5. Hit <CR> a few times or press CTRL-R. The following login screen will appear, followed by
a command line prompt:
***************************************************************************
***************************************************************************
**
**
**
W E L C O M E
T O
S P E C T R A C O M M
I P E 1
**
**
**
**
Copyright General DataComm 2003
**
**
**
**
Running version is V2.6.4
**
**
**
**
Use "?" at any time on the command line to get help.
**
***************************************************************************
***************************************************************************
SCIP-E1>
Note
For online help screens describing all CLI options, press ? Note that the CLI options for configuring the
SCIP-E1 are only available when you have enabled supervisor privileges or the higher admin privileges.
6. Enable supervisor privileges by typing enable <cr>.

When prompted for the password, type:
supervisor <cr> [default supervisor password]
7. The SCIP-E1 is now operating in supervisor mode as shown by the # symbol in the new CLI
prompt, with all CLI options available.
8. You can now configure the SCIP-E1 to suit your network by typing the required configurations
commands at the CLI prompt. You do not need to set parameters that coincide with system
defaults. Any configuration changes will take effect immediately.
Note
3-2
FOR ADVANCED USERS: The SCIP-E1 provides a utility for generating the configuration settings of a
SCIP-E1 into an ASCII file, simplifying the configuration of multiple SCIP-E1s. This function can also be
used to archive configuration data for specific unit or as a baseline for modified configurations.
Refer to Appendix A, Application Guidelines : Batch Up/Download Overview

076R201-000
Issue 6
Access to SCIP-E1 Command Line Interface (CLI)

SCIP-E1 controls access to the CLI through its three access modes: USER, SUPERVISOR and
ADMIN. The password-protected enable command sets the access from user mode to
supervisor or admin mode, depending on the password entered. The command prompt suffix
character identifies the mode you are currently in:
For USER mode, the prompt string ends in >

Commands in USER mode allow viewing but not changing configuration data.
For SUPERVISOR mode, the prompt string ends in #

Commands in SUPERVISOR mode allow USER access plus the ability to change
configuration data, reboot the unit, manipulate flash files and enable the TFTP server for file
downloads.
For ADMIN mode, the prompt string ends in %

Commands in ADMIN mode allow SUPERVISOR access plus the ability to set up and modify
user accounts for usernames and passwords. ADMIN mode also allows authentication for the
CRAFT port to be turned on or off.
Note
Up to 20 usernames/passwords may be specified. The Default Username is gdc; In User mode, the Default
Password is gdc; Supervisor mode password is supervisor; Admin mode password is admin.
Note
Local authentication is conducted via usernames and passwords configured in the SCIP-E1. You can also
configure SCIP-E1 for TACACS+ authentication which employs usernames and passwords residing on a
TACACS+ server. Refer to Chapter 5: Additional Features for details.
Setting Up User Accounts

1. Type disable to turn off the supervisor access.
2. Turn Admin mode on by typing enable and entering the admin password. The command
prompt will now contain the % character.
3. Modify default admin and supervisor accounts by typing:
configure accounts add admin [new admin password]
configure accounts add supervisor [new suprv password]
4. Add a user account and password by typing:

configure accounts add [name] [password]
Controlling Service Access

The following commands can be used to block or permit incoming traffic through one or more
interfaces:
services [interface] [enable or disable]
where the [interface] value can be: ftp, tftp, http, telnet, snmp
services access [interface] [enable or disable]
where the [interface] value can be: e0, m0, s0, or alll
076R201-000
Issue 6

3-3
Configuring Typical SCIP-E1 Networks

The following paragraphs describe the basic procedures for accessing and configuring SCIP-E1
using the command line interface (CLI). After performing the basic configuration procedures
provided below, select the specific configuration procedure best suited to your network
environment:
SCIP-E1 as a IP router for a Frame Relay network

(For static Frame Relay network applications)
SCIP-E1 as an IP router for Leased Line (PPP) E1 network

(For static PPP multi-point network applications)
SCIP-E1 as a LAN-extension device

(For flat IP network applications - no routing)
Note
Some SCIP-E1 features, such as Spanning Tree Protocol and MACL Security, are only available when the
device is configured for LAN-X operation.
Note
Some ADMIN mode configuration commands (i.e., enabling the craft port or setting up user accounts)
cannot be accessed or executed via the web-based CLI.
Note
In the basic configuration examples below, [brackets] indicate user-defined entries or typical entries.
Basic Configuration Procedures

Management Configuration Settings
The first three steps of this procedure are required in order to configure the SCIP-E1 for
management. You must change the SCIP-E1 from its default settings, as shown. Throughout this
procedure you can type ? following any command, sub-command or parameter for contextsensitive online help.
1. Configure the HTTP Service to enable access by typing:
services http enable
2. Configure the SNMP Service to enable access by typing:

services snmp enable
Optional Configuration Settings

The remaining steps use default values pre-loaded in the SCIP-E1 unit. If the default value applies
to your network, you do not need to re-enter it. Otherwise, enter the value that best suits your
network environment. Type ? following any command, sub-command or parameter for contextsensitive online help.
3. Set the system prompt by typing:
configure prompt [SCIP-E1]
4. Configure the Inactivity Timer to disconnect a management session after the desired interval
(in seconds) has elapsed. Range is 0 - 10,000 sec, where 0 disables the timer.
configure inactivity [900]
3-4

076R201-000
Issue 6
5. Configure SNMP with your site-specific information and enable SNMP for read-only (ro)
access by typing the following commands:
configure
configure
configure
configure
snmp
snmp
snmp
snmp
community add [community name] ro en

system name [your system name]
system contact [your system contact]
system location [your system location]
Creating a Login Banner

SCIP-E1 is shipped from the factory with no Login banner. When you compose a Login banner, it
appears at the start of every login sequence before the Authentication banner (local or TACACS+).
A procedure for configuring the Login banner is provided after the figure.
For help in setting up the Login banner, type:

configure banner ?
To show current banner, if any, type:

show banner
Figure 3-1
076R201-000
Issue 6
Login Banner Help and Example Banner

3-5
Login Banner Configuration Procedure

Note
You must log in with ADMIN privileges to execute the commands in this procedure.
1. At the prompt, type:

enable
2. Type your ADMIN password, then press Enter.

3. Configure a login banner on the SCIP-E1 by typing the following CLI commands:
configure banner new
4. At the prompt, type an escape character.

5. At the prompt, enter your login message (maximum 30 lines/80 characters per line).
6. When your message is completed, type your escape character or press Ctrl-C.
7. To view your new login banner, type:
show banner
8. To modify an existing login banner one line at a time, type:

configure banner modify [#] [your revised text string] [esc char]
where [#] is the line number you intend to change.

Use the double-quoted string format to type your revised text for that line, and then
type your escape character.
9. To clear the banner, type the following:
configure banner new [esc char] [esc char or Ctrl-C>]
Note
3-6
for information about the Authentication banner or other configurable SCIP-E1 features,
see Chapter 5, Additional Features .

076R201-000
Issue 6
Static Routing with Frame Relay over an E1 Network

In this procedure, the SCIP-E1s default value for each E1 parameter is shown in the command
string as: [default]. If the default value applies to your network, you do not need to re-enter it.
Otherwise, use the CLI to set the E1 configuration value as required. Type ? following any
command, sub-command or parameter for context-sensitive online help.
Note
cannot be accessed or executed via the web interface.
1. After initializing the SCIP-E1 for configuration, perform the following steps to configure the
unit as an IP router in a Frame Relay network (Figure 3-2).
configure prompt [your_site]
For example:
configure prompt orlando-unit
3. Configure the E1 values for your network.

configure
configure
configure
configure
Note
e1
e1
e1
e1
clock-source [line]
framing [crc-4on]
timeslots [1-31 64]
signaling [cas-w-idles]
Type show e1 to check your E1 value entries. Modify, if needed.
4. Configure the Ethernet IP address and mask by typing:

configure interfaces ip-address ethernet0 [###.###.###.###] [###.###.###.###]
For example:
configure interfaces ip-address ethernet0 172.16.5.6 255.255.0.0
5. Enter a description of the Ethernet interface by typing:

configure interfaces description ethernet0 [your_description]
For example:
configure interfaces description ethernet0 orlando_lan
6. Enable the Ethernet interface by typing:

configure interfaces enable ethernet0
7. Configure the serial0 interface (at the E1 port) for Frame Relay DTE by typing:
configure interface link-encap serial0 frame-relay-dte
076R201-000
Issue 6

3-7
8. Configure the Frame Relay LMI by typing:

configure
configure
configure
configure
configure
frame-relay
frame-relay
frame-relay
frame-relay
frame-relay
lmi
lmi
lmi
lmi
lmi
type
n391
n392
n393
t391
s0
s0
s0
s0
s0
[cisco]
[6]
[3]
[4]
[10]
9. Enable the serial0 interfaces by typing:

configure interfaces enable serial0
10. Configure the serial0 sub-interface to support Frame Relay DLCIs by typing:
configure interfaces add-sub serial0.[##]
For example:
configure interfaces add-sub serial0.17
11. Enter a description for the serial0 sub-interface by typing:

configure interfaces description serial0.[##] [your_description]
For example:
configure interfaces description serial0.17 noc_miami
12. Enable the s0 sub-interface by typing:

configure interfaces enable serial0.[##]
For example:
configure interfaces enable serial0.17
Note
Type show interfaces to check your interface entries. Modify, if needed.
13. Map Frame Relay DLCIs, IP Encapsulation to sub-interfaces by typing:

configure frame-relay interface-dlci serial0.[##] [##] [ietf]
For example:
configure frame-relay interface-dlci serial0.17 17 ietf
14. Configure Traffic Shaping per sub-interface by typing the CIR, Bc and Be values. The values
you enter must be consistent with how your Frame Relay network has been configured. Type:
configure frame-relay traffic-shape serial0.[##] [###### ###### ######]
15. Enable Traffic Shaping by typing:

configure frame-relay ena-traffic serial0.[##]
16. Configure Terminal Server Ports 1 through 8 as needed by typing:

configure term-serv ip-address term[#] [###.###.###.###]
For example:
configure term-serv ip-address term1 192.168.1.12
3-8

076R201-000
Issue 6
17. Enter a description for each configured Terminal Server port by typing
configure term-serv description term[#] [your_description]
For example:
configure term-serv description term1 terminal-device
Note
The IP address for each terminal server port does not need to be configured if Telnet cut-thru is used.
To access a device connected to a terminal server port, telnet to the IP address of one of the interfaces using
the corresponding TCP port. TCP port 2001 thru 2008 corresponds to term1 through term8, respectively.
18. Enable each configured Terminal Server Ports by typing:

configure term-serv enable term[#]
For example:
configure term-serv enable term1
19. Set up static routes for the Frame Relay network by typing:
configure ip-route add serial0.17 [destination IP] [destination mask]
[next hop/gateway] [metric]

Note
Steps 19 through 24 detail the setting up of static routes in an example Frame Relay network (Figure 3-2). If
a local router is used at the central site instead of a SCIP-E1 device, consult your router documentation for
static route configuration guidelines.
20. Set up a static route at the remote site towards the central office by typing:
configure ip-route add serial0.17 128.1.0.0 255.255.0.0 128.1.1.10 1
21. On the central office SCIP-E1, create, configure and enable the subinterface by typing:
configure interfaces add-sub serial0.117
configure interfaces enable serial0.117
22.
On the central office SCIP-E1, map Frame Relay DLCIs, IP Encapsulation to sub-interfaces
by typing:
configure frame-relay interface-dlci serial0.117 17 ietf
23. Set up a static route at a central office SCIP-E1 towards a remote orlando_lan 172.16.0.0 by
typing:
configure ip-route add serial0.117 172.16.0.0 255.255.0.0 172.16.5.6 1
As an alternative, to set up a static route only to a particular host instead of to the whole
network, set up the static route with mask 255.255.255.255. For example, to set up LAN
Device #1 on 172.16.0.0 network with an IP address of 172.16.5.10, type:
configure ip-route add serial0.117 172.16.5.10 255.255.255.255
172.16.5.6 1
24. Set up a static route at the central office towards LAN Device #1 connected at the Terminal
Server port by typing:
configure ip-route add serial0.117 192.160.1.12 255.255.255.255
172.16.5.6 1
076R201-000
Issue 6

3-9
Note
When setting up static routes, type the short-cut conf ip a ? to get a list of all required arguments.

26. Turn Admin mode on by typing enable and entering the admin password. The command
prompt will now contain the % character.
27.
Add admin and supervisor accounts by typing:

configure accounts add admin mickey
configure accounts add supervisor minnie

configure accounts add daffy duck
29. You can check your settings with the following two techniques:
Type show config to display the current configuration of the SCIP-E1.
Test your example network by pinging from your PC/workstation at the central site to
equipment at the remote office, and vice-versa.
This concludes the required configurations for a Frame Relay E1 network.

As needed, refer to Chapter 5, Additional Features .
MIAMI CENTRAL SITE
REMOTE OFFICE - Orlando
NETWORK
MANAGER
SC 2000 SHELF
SPECTRACOMM 2000
SCIP-E1
128.1.1.20
SERIAL0
DLCI 17
SC-ES
MANAGED
LAN DEVICES
ETHERNET0
172.16.5.6
TERMINAL
SERVER
LAN DEVICE 1
LAN
128.1.0.0/16
LAN DEVICE 2
E1
ROUTER
128.1.1.10/16
"orlando_lan"
172.16.0.0/16
Frame Relay
Network
TERM1
192.160.1.12
DLCI 117
TERM2
.
.
.
TERM8
Figure 3-2
Note
3-10
MANAGED
CRAFT DEVICES
DEVICE 1
DEVICE 2
.
.
.
DEVICE 8
SCIP-E1 Router in a Typical Frame Relay E1 Network
This concludes the required configurations for a Frame Relay E1 network. As needed, refer to Chapter 5,
Additional Features .

076R201-000
Issue 6
Static Routing with PPP over an E1 Network

In this procedure, the SCIP-E1s default value for each PPP network parameter is shown in the
command string as: [default]. If the default value applies to your network, you do not need to reenter it. Otherwise, use the CLI to set the configuration value as required. Type ? following any
command, sub-command or parameter for context-sensitive online help.
Note
1. After initializing the SCIP-E1 for configuration, perform the following steps to configure the
unit as an IP router in a PPP (leased line) network (Figure 3-3).
configure prompt [your_site]
For example:
configure prompt orlando-unit

configure
configure
configure
configure
Note
e1
e1
e1
e1
clock-source [line]
framing [crc-4on]
timeslots [1-31 64]

configure interfaces ip-address ethernet0 [###.###.###.###
###.###.###.###]
For example:

For example:
configure interfaces description ethernet0 orlando_lan

076R201-000
Issue 6

3-11
7. Configure the serial0 interface for PPP by typing:

configure interface link-encap serial0 ppp
8. When the Warning message appears, type Y.

9. Enter a description for the interface by typing:
configure interface description [your_decription]
For example:
configure interfaces description miami_central
10. Enable the interface by typing:

configure interface enable serial0
Note
Type show interfaces to check your interface entries. Modify, if needed.

For example:
configure term-serv ip-address term1
12. Enter a description for any configured terminal server ports by typing:
For example:
configure term-serv ip-address term1 terminal service
Note

For example:
configure term-serv enable term1
14. Set up static routes for the PPP (leased line) network by typing:
configure ip-route add serial0 [destination IP] [destination mask]
[next hop/gateway] [metric]

Note
Steps 14 through 16 detail the setting up of static routes in an example PPP network (Figure 3-3). If a local
router is used at the central site instead of a SCIP-E1 device, consult your router documentation for static
route configuration guidelines.
15. Set up a static route at a remote site towards the central site by typing:
configure ip-route add serial0 128.1.0.0 255.255.0.0 128.1.1.10 1
3-12

076R201-000
Issue 6
16. Set up a static route at a central site SCIP-E1 towards a remote orlando_lan 172.16.0.0 by
typing:
As an alternative, to set up a static route only to a particular host instead of to the whole
network, set up the static route with mask 255.255.255.255. For example, to set up LAN
Device #1 on 172.16.0.0 network with an IP address of 172.16.5.10, type:
17. Set up a static route at the central site towards the LAN Device #1 connected at the Terminal
Server port by typing:
Note
When setting up static routes, type the short-cut conf ip a ? to get a list of all required arguments.

19. Turn Admin mode on by typing enable and entering the admin password.
The command prompt will now contain the % character.
20. Add admin and supervisor accounts by typing:
configure accounts add admin mickey
configure accounts add supervisor minnie

configure accounts add daffy duck
22. You can check your settings with the following two techniques:
076R201-000
Issue 6
Type show config to display the current configuration of the SCIP-E1.
This concludes the required configurations for a PPP E1 network.

As needed, refer to Chapter 5, Additional Features .

3-13
CENTRAL SITE
REMOTE OFFICE - Orlando
NETWORK
MANAGER
SC2000 SHELF
SCIP-E1
SC-ES
128.1.1.20
SERIAL0
TERMINAL
SERVER
MANAGED
LAN DEVICES
ETHERNET0
172.16.5.6
LAN DEVICE 1
LAN
(128.1.0.0)
LAN DEVICE 2
E1
"orlando_lan"
(172.16.0.0)
128.1.1.10
SC-IP
PPP
on E1 Network
TERM1
192.160.1.12
MANAGED
CRAFT DEVICES
DEVICE 1
ROUTER
TERM2
SC-ES
.
.
.
TERM3
Figure 3-3
Note
3-14
DEVICE 2
.
.
.
DEVICE 8
SCIP-E1 Router in a Typical PPP E1 Network
This concludes the required configurations for a PPP E1 network. As needed, refer to Chapter 5, Additional
Features .

076R201-000
Issue 6
LAN-Extension over E1 for a Flat IP Network

In this procedure, you must configure two SCIP-E1 units to operate in LAN-X mode on both sides
of the WAN: the Central Office SCIP-E1 and the remote SCIP-E1. The Default value for each
network parameter is shown in the command string as: [default]. If the default value applies to your
network, you do not need to re-enter it. Otherwise, use the CLI to set the configuration value as
required. Type ? following any command, sub-command or parameter for context-sensitive online
help.
Note
Configure the Central Office SCIP-E1

1. After initializing the Central Office SCIP-E1 for configuration, perform the following steps to
configure the unit for LAN-extension on a E1 network.
2. Set the system prompt for the Central Office unit by typing:
configure prompt [your_CO_site]

configure
configure
configure
configure
Note
e1
e1
e1
e1
clock-source [line]
framing [crc-4on]
timeslots [1-31 64]

configure interfaces ip-address ethernet0 [###.###.###.###] [###.###.###.###]
For example:


7. Configure and enable the serial0 interface for LAN-extension mode by typing:
configure interfaces link-encap serial0 lanx
076R201-000
Issue 6

3-15
8. Enable span-tree by typing:

configure span-tree [enable]
Note
Once spanning tree is enabled, additional configurable options are available for that function. Do not change
these additional spanning tree options from the default settings unless you have a comprehensive
understanding of the spanning tree protocol. (Ref. IEEE 802.1D)

Note

11. You have completed the configuration of the central site SCIP in LAN-extension mode, for a
flat (no routing) network environment. You can check your settings with the following two
techniques:
Type show config to display the current configuration of the SCIP.
Configure the Remote SCIP

12. Attach the hyperterminal to the craft port of the remote SCIP unit.
13. After the initializing sequence, set the system prompt for the remote unit by typing
configure prompt [your_REM_site]

configure
configure
configure
configure
Note
e1
e1
e1
e1
clock-source [line]
framing [crc-4on]
timeslots [1-31 64]
15. Enable the ethernet interface by typing:

16. Configure and enable the serial0 interface for LAN-extension mode by typing:
configure interfaces link-encap serial0 lanx
3-16

076R201-000
Issue 6
17. Enable span-tree by typing:

configure span-tree [enable]
Note
Once spanning tree is enabled, additional configurable options are available for that function. Do not change
these additional spanning tree options from the default settings unless you have a comprehensive
understanding of the spanning tree protocol (Ref. IEEE 802.1D). To learn more about available options for
spanning tree, type configure span-tree ?.
18. Configure and enable ethernet0 for LAN-X management by one of two methods.
METHOD 1: Configure and enable ethernet0 directly at the remote SCIP by typing:
configure interfaces ip-address ethernet0 [###.###.###.###]
[###.###.###.###]
For example:
Then type:
configure interfaces ip-address default-route ethernet0
[default router IP]

configure lanx-router mgt ethernet0
METHOD 2: Use the local SCIP to configure the IP and default route of the remote
SCIP. Once the LAN-X link is up, type from the local SCIP:
configure lanx-router remote ip-address ethernet0 [###.###.###.###]
[###.###.###.###]
For example:
configure lanx-router remote ip-address ethernet0 172.16.5.10
255.255.0.0
Then type:
configure lanx-router remote default-route ethernet0 [default router IP]
Note
The serial0 may also be assigned an IP address for LAN-X management.
19. Type show lanx-router to display the remote unit IP information. Modify, if needed.

22. You have completed the configuration of the remote SCIP in LAN-extension mode, for a flat
(no routing) network environment. You can check your settings with the following two
techniques:
076R201-000
Issue 6
Type show config to display the current configuration of the SCIP.
3-17
TYPICAL REMOTE OFFICE LAN
CENTRAL SITE LAN

NETWORK
MANAGER
HOST
HOST
LAN
172.16.0.0/16
HOST
HOST
HOST
ETHERNET0
INBAND
MANAGEMENT
ADDRESS
172.16.5.10/16
LAN
172.16.0.0/16
SCIP-E1
General
DataComm
HOST
MANAGEMENT
ADDRESS
172.16.5.6/16
General
DataComm
SERIAL0
E1
ETHERNET0
(LAN-X)
E1 LINE TIMING
SERIAL0
SCIP-E1
TERM1
TERM2
.
.
.
TERM8
MANAGED
CRAFT DEVICES
DEVICE 1
E1 INTERNAL TIMING
DEVICE 2
.
.
.
DEVICE 8
Figure 3-4
Note
3-18
SCIP-E1 LAN-Extension in a Flat E1 Network (No Routing)
This concludes the required configurations for a typical flat E1 (LAN-X) network. As needed, refer to
Chapter 5, Additional Features .

076R201-000
Issue 6
Chapter 4:
The Web Interface
Introduction to SCIP-E1 Web Management

In addition to the command line interface at the Craft and Telnet interfaces, SCIP-E1 provides
access to a web interface through its integral HTTP server. This server allows authorized users to
view and change SCIP-E1 configuration and operation parameters in a streamlined logical format
via their popular web browsers. This release of the SCIP-E1 provides the web-based Command
Line Interface.
Web Management Requirements

1. Minimum browser requirements are as follows:
Note
Netscape Communicator Versions 4.5 through 5.x are supported.
Internet Explorer 5.0 or higher.
Cookies must be enabled
At the terminal or craft interface, you can toggle http disable/enable to clear all cookies.
2. Via the Telnet or the Craft interface, SCIP-E1 must be configured for web management
using the ADMIN commands that:
enable the http interface.
configure user accounts by entering names, passwords and

read/write permissions for any authorized users.
3. Via the Craft or Telnet interface, SCIP-E1 must be configured for management with an IP
address and mask in order to satisfy the IP link and SNMP control. This allows a connection to
the SCIP-E1 web interface.
4. SCIP-E1 permits up to eight authorized users and supervisors in simultaneous web
management sessions. If eight sessions are in progress, any additional users will be denied
access.
076R201-000
Issue 6

4-1
The Web Interface
Starting A Web Session

This release of the SCIP-E1 provides the web-based Command Line Interface. To start a web
management session, type the IP address of a SCIP-E1 unit or type the host name at any browser.
The following login authorization screen appears:
Username:
Password:
(optional)
Supervisor password:
Login
User Name and Password

The SCIP-E1 web interface is protected by pre-configured user names, passwords and the
associated access privileges as assigned by an Administrator. A valid password can be up to 20
alphanumeric characters.
Access Modes
Access modes configured by the Administrator will determine whether a user name has Read-only
or Read-Write privileges to the SCIP-E1 web screens.
Note
4-2
User Mode
(Read Only access)
Supervisor Mode
(Read/Write access permits data entry and configuration changes.)
Admin Mode - Access Denied

(Admin commands must be entered via Telnet or Craft interface.)
Access will be denied to any user or supervisor if there are already eight web sessions in progress.

076R201-000
Issue 6
The Web Interface
Command Line Web Screen

Commands entered at the Command Line webpages operate exactly the same as at a Telnet or
terminal CLI interface. The Command Line web screens consist of a series of tables that allow users
and supervisors to execute commands and associated arguments by clicking on the links in the table.
The top level command menu is shown below.
When you click a command from the menu, any required arguments for that command appear.
To return to the command line top menu from any argument screen, use your web browsers
Back button, the SCIP Command Line selection, or click the Top Menu link at the bottom
of an argument table.
For a detailed guide to CLI, click on the help menu item. A table of command default settings
is also provided in Appendix A, Table A-1: Default Configuration.
YOUR SYSTEM NAME (172.16.5.155)

clear
configure
help
show
reboot
netstat
services
logout
Table 4-1
Reset functions
Configure system parameters
Show/Enable/Disable HTTP, SNMP, TELNET, TFTP & FTP Services
End this web session.
Command Line Web Screen
Field
Description
clear
Displays a selectable list of sub-commands that will clear arp-cache entries and
counters on one or more ports.
Displays a selectable list of sub-commands that are used to configure

configure
(Supervisor Access Only) parameters for SCIP-E1 IP Routing, Management and Ports
help
Displays a read-only display describing online help, the command access

modes, some common sub-commands and arguments, and information on
downloading configuration batch files.
show
Displays a selectable list of sub-commands that show SCIP-E1 status and

several operating, configuration and network parameters.
Halts SCIP-E1 operation and performs a reboot using existing configuration.

reboot
(Supervisor Access Only)
Note
netstat
Displays local, remote IP addresses, state and statisitics on current TCP socket
connections.
services
Displays the status of HTTP, SNMP FTP, TELNET and TFTP services as
Enabled or Disabled.
logout
Logs out of the session and returns to the SCIP-E1 login authorization screen.
Supervisor Access is required for configure and reboot commands; thus, with User Access these
commands will not be displayed.
Configuration commands that are restricted to ADMIN mode will not be displayed. You must log out of the
web interface and make a Telnet or terminal connection in ADMIN mode to access/execute those commands.
076R201-000
Issue 6

4-3
The Web Interface
4-4

076R201-000
Issue 6
Chapter 5:
Additional Features
Overview of Additional Features
Network Time
TACACS+ Authentication Protocol
Modem Security (SCIP with integral modem)
MACL (Media Access Control List) Security
Contact Sense
Expedited Traffic Queuing (SCIP in LAN-X mode only)
Ethernet Jumbo Packets (SCIP in LAN-X mode only)
Ethernet Broadcast Limiting (SCIP in LAN-X mode only)
Spanning Tree Protocol
Telnet Menu
Network Time
SCIP supports Simple Network Time Protocol (RFC2030) and Time Protocol (RFC 868). When
configured for SNTP or TP, SCIP will receive and use Greenwich Mean Time (GMT) to timestamp
the SNMP traps, System Messages and Alarms when they are generated. When neither SNTP nor
TP is configured, the SCIP will use a relative System Up Time for timestamping.
SNTP/TP Client Configuration Procedure
1. Configure SCIP for receiving GMT, type:
configure time server add [SNTP or TP server IP address]
2. Configure SCIP for either SNTP or TP by typing one of the following commands:
For SNTP, type: configure protocol sntp [SNTP version number]
To configure SCIP for TP, type: configure protocol tp
3. Enable the desired protocol by typing: configure enable time
Note
To verify the configuration, type show time.
076R201-000
Issue 6

5-1
Additional Features

In addition to local authentication where the usernames and passwords reside on each individual
SCIP device, SCIP can be configured for TACACS+ authentication. This capability supports the
CISCO TACACS+ protocol for authentication between the SCIP device and the TACACS+ server.
When TACACS+ is enabled, the TACACS+ server becomes the central point for managing
network-wide usernames and passwords. This is especially useful when provisioning SCIP devices
in large networks.
TACACS+ usernames and passwords are authenticated for all access methods: craft, Telnet, and
HTTP. You must be logged in with ADMIN privileges to access SCIPs TACACS+ commands.
Detailed information and configuration procedures are provided in the paragraphs below.
For help in setting TACACS+ parameters, type:

configure tacacs+ ?
To show the status of TACACS+, type:

show tacacs+
Figure 5-1
5-2
Help and Status Displays for TACACS+

076R201-000
Issue 6
Additional Features
TACACS+ Server Configuration

Consult your TACACS+ server documentation to configure the server. To function properly with
the SCIP devices in the network, your TACACS+ server must satisfy the requirements listed below:
The TACACS+ key configured on the server must match the key configured on the SCIP.
At least one TACACS+ account must be set up.
If TACACS+ authentication for Supervisor/Admin privilege is desired, use the default

accounts on your TACACS+ server:
$gdc_scip_admin$ (for admin privilege)
$gdc_scip_supervisor$ (for supervisor privilege)
For user-defined accounts, use the following syntax:

$[name]$
TACACS+ Client (SCIP) Configuration Procedure
Perform all of the steps in the following configuration and verification procedures. Be sure to read
the special considerations for using TACACS+ authentication, listed at the end of this section.
Note
You must log in with ADMIN privileges to execute the commands in this procedure.
1. At the prompt, type:

enable
2. Type your ADMIN password, then press Enter.

3. Configure TACACS+ client on the SCIP by typing the following CLI commands. Actual
values shown are SCIP defaults. Per-server key and per-server timeout entries are optional.
configure
configure
configure
configure
configure
Note
tacacs+
tacacs+
tacacs+
tacacs+
tacacs+
server add [server IP address] [per-server key] [per-server timeout]

key [tacacs+ default key]
attempts [3]
timeout [5]
authen enable
TACACS+ authentication is now enabled for user login via Telnet or HTTP (web) only.
4. If desired, enable TACACS+ authentication for console (craft) login by typing:

configure tacacs+ console enable
5. If TACACS+ authentication for Supervisor/Admin privilege is desired, use the default

accounts on your TACACS+ client (SCIP):
$gdc_scip_admin$ (for admin privilege)
$gdc_scip_supervisor$ (for supervisor privilege)
076R201-000
Issue 6

5-3
Additional Features
6. For user-defined supervisor/admin privilege accounts, use the following syntax:

[name]
7. To configure SCIP for your user-defined supervisor/admin privilege accounts, type the
following commands:
configure tacacs+ admin [name]
configure tacacs+ supv [name]
Note
User-defined accounts on the TACACS+ server must match those on the TACACS+ client (SCIP).
8. If desired, enable TACACS+ authentication for supervisor/admin privilege by typing:

configure tacacs+ en-pass enable
Note
If the TACACS+ authentication for the console or the supervisor/admin privilege is enabled but the
TACACS+ authentication is disabled, then the console or supervisor/admin privilege will be locally
authenticated.
9. Authentication banners identify the SCIP device a user is trying to access, and whether local or
TACACS+ authentication is in use. If spaces are to be used in the description, use the doublequoted string format. To configure banners, type:
configure tacacs+ banner tacacs+ [description]
configure tacacs+ banner local [description]
TACACS+ Verification Procedure

When a SCIP device is enabled for TACACS+ authentication, it is highly recommended that
TACACS+ authentication be tested before exiting the SCIP configuration session. The following
test verifies if the TACACS+ server is reachable/responding, and if the key is properly configured.
Note
IMPORTANT! Failure to test the TACACS+ authentication can result in lockout of all users even from the
console port. If possible, observe the console window on the TACACS+ server for any error messages.
1. Ping the TACACS+ server to be sure it can be reached from SCIP device:
SCIP-E1% ping [IP address]
2. Once the TACACS+ server responds to the ping, test TACACS+ authentication by typing:
configure tacacs+ testing authen
3. Respond to the prompt with your username and password, just like Telnet. After the password
is entered, a pass or fail indication and some diagnostic information will display concerning
message exchange with the TACACS+ server.
4. Test the TACACS+ supervisor/admin password by typing:
configure tacacs+ testing sup-admin
5. Respond to the prompt with your TACACS+ enable password.

5-4

076R201-000
Issue 6
Additional Features
TACACS+ Fallback Option

SCIPs authentication strategy uses TACACS+, if so configured, but the device will revert to local
authentication (default) if the TACACS+ server is unreachable or not responding due to network
outage, server down, etc. In such situations, authentication falls back to SCIPs local list of 20
usernames and passwords. For users who insist on using only TACACS+, SCIP provides a fallback
option which blocks local authentication. The fallback option command is as follows:
configure tacacs+ fallback enable [or disable]
Note
IMPORTANT! Disable the Fallback option with caution. If TACACS+ authentication is being used with
fallback disabled option and the TACACS+ server becomes unreachable, you will be locked out of all
authentication until the TACACS+ server is reachable again. Therefore, disable this option with caution.
If you have disabled the fallback option and the TACACS+ does not respond, remains unreachable
or there is a configuration error (key, IP address, etc.), you will have to default all configuration to
factory defaults as described below.
1. From the console (craft) port, power cycle the unit by typing: reboot
2. During power cycle and while the unzip dots are being displayed on the screen, type: menu
3. After the unzip completes, a three line menu appears. Command the SCIP to load factory
defaults by typing: L
4. Use the default passwords to reconfigure the SCIP from scratch.
Note
Disabling of the fallback option is only supported in SCIP devices at Firmware Version 2.6.0 and higher.
TACACS+ Special Considerations
In order to change local authentication configuration values or enable and configure TACACS+
authentication, ADMIN access is required.
In the event of an incorrectly configured key, or missing ADMIN or SUPERVISOR entries at

the TACACS+ server, a lockout condition may occur, preventing any access to the SCIP
device. To restore control, wait for the SCIP to timeout its attempts to reach a server; this will
force SCIP to revert to local authentication. Repeat the TACACS+ Configuration procedure
using the corrected values.
Up to five TACACS+ servers may be specified:
In applications with a single TACACS+ server, if the server does not respond, the
SCIP will revert to local authentication.
In applications with redundant TACACS+ servers, the SCIP device will look for the first
responding TACACS+ server, starting with the first configured IP, then the second
configure IP, and so on. When a server responds, the default key will be used if the perserver key is not specified.
An authentication timeout will occur when the TACACS+ server is unreachable, when the
TACACS+ service is not responding, or if the TACACS+ server IP address is incorrect. The
default timeout value will be used if the per-server timeout is not specified.
When using TACACS+ authentication, the prompts for username/password will be capitalized:
Username, Password. When using local authentication, the prompts for username/
password will not be capitalized: username, password.
The configure tacacs+ testing commands work for both local authentication and
TACACS+ authentication.
076R201-000
Issue 6

5-5
Additional Features
Modem Security
Modem Security
When the SCIP-E1 is equipped with an internal modem, the default mode is autoanswer. The
unit also supports callback mode. In this mode, the modem is configured with a list of callback
locations and phone numbers. With modem authentication enabled, the username and password is
enforced. Security is enhanced when the unit is configured with caller ID locations and phone
numbers.
For help in setting modem security parameters, type any of the following commands:
configure modem callback
configure modem caller-id
configure modem authen
To show the status of modem security parameters, type any of the following commands:
show modem callback
show modem mode
show modem caller-id
show modem authen
Figure 5-2
5-6
Help and Status Displays for Modem Security Features

076R201-000
Issue 6
Additional Features
Media Access Control (MAC) Security

SCIP-E1 in LAN-X mode provides MAC Security by filtering MAC addresses filtering according
to a user-defined Media Access Control List (MACL). A MACL can be defined for each interface
(ethernet0, serial0, serial1) with up to 100 unique MAC addresses configured for each MACL.
When enabled, the MACL filters (discards) any unicast, multicast or broadcast packet received
which does not have its source MAC address defined in the MACL will be filtered.
Note
Spanning Tree is necessary in LANX mode to prevent loops. Therefore, Spanning Tree packets (BPDU) are
never filtered; they must be processed and/or forwarded at all times.
Figure 5-4, Figure 5-5 and Figure 5-6 demonstrate examples of SCIP in LAN-X mode configured
for MAC Security. In each example, SCIP devices will detect illegal MAC addresses received at
the LAN or WAN interfaces and discard (filter) traffic so that it never enters the network. MAC
security is enforced for every access method: craft, Telnet, and HTTP. You must have ADMIN or
SUPERVISOR privileges to access SCIPs MACL commands.
For help in setting MACL parameters, type:

configure macl ?
To show the status of the MACL, type:

show macl [interface]
Figure 5-3
076R201-000
Issue 6
Help and Status Displays for MAC Security

5-7
Additional Features
MAC Filtering for Security

To prevent unauthorized access from the remote site to the local site, enable a MACL at
SCIP-B e0, and then add to the MACL all MACs from the remote hosts. To use the MACL learn
option for this, enable MACL learning on SCIP-B e0, and then ping all remote hosts from the local
site. The MACL will automatically learn all remote MACs.
For added security, enable a MACL at SCIP-A s0 and be sure it includes the same remote MACs
plus the MAC for SCIP-B (necessary to manage SCIP-B). MACL learning can be used to
conveniently accomplish this.
LOCAL SITE
REMOTE SITE
E1 (LAN-X)
MACL
FILTER
MACL
FILTER
LOCAL
HOST
LOCAL
HOST
LOCAL
HOST
SCIP
"A"
e0
SCIP
"B"
s0
s0
LOCAL
HOST
e0
LOCAL
HOST
LOCAL
HOST
ILLEGAL
FRAMES
DISCARDED
Figure 5-4
Note
5-8
ILLEGAL
FRAMES
DISCARDED
MAC Filtering for Security
In order for the SCIP to send SNMP traps to a SNMP trap host, the source MAC address of that host must be
included in the SCIPs MACL.

076R201-000
Issue 6
Additional Features
MAC Filtering for Improved Performance

SCIP has a three-port integral etherswitch. Port1 and port2 are accessed at the front panel; port3 is
an internal port which is permanently connected to the SCIP interface, e0. (For clarity, the
etherswitch ports are not shown in the figure below.) The etherswitch automatically filters out
unicast packets that are not needed between local and remote hosts. However, broadcast packets
from all local hosts still traverse s0.
For users that want maximum performance across s0, a MACL can be added to SCIP-A e0 to
filter out all unnecessary broadcasts. Here, MACL learning cannot be used. Only the MACs for
routers, servers and admin workstations on the local site necessary to talk with the remote hosts are
used to create the MACL. Any local hosts that do not need to talk with remote hosts are omitted
from the MACL on e0 and will be filtered.
For typical networks, a ten to thirty per cent increase in performance can be achieved across the
WAN by eliminating unnecessary broadcasts.
LOCAL SITE
REMOTE SITE
E1 (LAN-X)
MACL
FILTER
LOCAL
HOST
LOCAL
HOST
LOCAL
HOST
SCIP
"A"
e0
SCIP
"B"
s0
s0
LOCAL
HOST
e0
LOCAL
HOST
LOCAL
HOST
ILLEGAL
FRAMES
DISCARDED
Figure 5-5
MAC Security for Improved Performance
MAC Filtering and Spanning Tree

It is strongly recommended to enable Spanning Tree to prevent loops in LAN-X applications. When
MAC filtering is also enabled, some interesting conditions come to light. When redundant SCIPs
are used with Spanning Tree, one SCIP will be in blocking mode to prevent a loop. Typically, one
of the remote SCIPs will have its e0 blocked, as shown below. In this example, SCIP-D e0 will
see MAC addresses from both the local site and remote site. The local site MAC addresses (all
broadcasts and some unicast) will travel from SCIP-A to SCIP-B to SCIP-D e0. Typically, the
MACLs on remote site SCIPs will not include MACs from the local site. Therefore, the local MACs
will appear as a MACL violation on SCIP-D e0.
076R201-000
Issue 6

5-9
Additional Features
When a SCIP unit has Spanning tree enabled, and when e0 and s0 (or s1) are not in the
forwarding state, MACL violation traps are suppressed. All violations will still be filtered and
optionally logged to the MACL violation log, but no trap will be sent. Violation traps from
SCIP-B e0 will be sent since its interfaces are both in the forwarding state. But SCIP-B e0 will
not receive MACs from the local site because those will be blocked by SCIP-D.
Additionally, if MAC filtering is being used with Spanning Tree as in the above diagram, it is
recommended to have all MACLs defined with the same set of MAC addresses. This is because a
network failure could happen at any point in the diagram, resulting in some filtered interfaces
receiving all MACs. For example, if SCIP-A e0 becomes unusable (cable problem, external
etherswitch problem, etc.), SCIP-D e0 will unblock and SCIP-A s0 will now see both local
MACs and remote MACs.
For ease of use, a single batch script file defining all MAC addresses for the above diagram can be
downloaded and run for all four MACLs shown above. This means each SCIP has its own MAC
address included in the MACL. This takes up an extra entry space in the MACL but is otherwise
harmless. Comments can be added to the script file to help identify the equipment and IP address
associated with the MAC address. Comment syntax in SCIP batch script files are as follows:
# This is a comment line
Note
The # sign must be the first character in the line and be followed by at least one space.
LOCAL SITE
REMOTE SITE
E1 (LAN-X)
MACL
FILTER
MACL
FILTER
LOCAL
HOST
LOCAL
HOST
LOCAL
HOST
SCIP
"A"
e0
SCIP
"B"
s0
s0
LOCAL
HOST
e0
LOCAL
HOST
LOCAL
HOST
MACL
FILTER
MACL
FILTER
SCIP
"C"
e0
Figure 5-6
5-10
SCIP
"D"
s0
s0
BLOCKING
e0
MAC Filtering and Spanning Tree

076R201-000
Issue 6
Additional Features
Contact Sense
Contact Sense
When the SCIP is configured for Contact Sense, the term ports 1 - 8 cease to function as terminal
server ports and serve instead as contact ports (contact1 - contact8). If an external relay is connected
between Xmt and Rcv pins of any contact port, SCIP can sense the state of the relay contacts. All
eight ports can be polled very quickly, providing Contact Sense for all ports simultaneously.
Each contact port must be configured as Normally Opened or Normally Closed. A closed condition
on a normally opened port will cause an ACTIVE condition. Likewise, an open condition on a
normally closed port will cause an ACTIVE condition. When the contact port returns to its normal
state a CLEAR condition is in effect. Any transition between open and closed will generate an
SNMP trap which is recorded in the SYS MSG log and the Alarm log.
For help in setting Contact Sense parameters, type: configure contact ?

To show the status of Contact Sense, type: show contact
SCIP-E1% configure contact ?

___________Help for "configure contact "______________________
normal-state Set contact normally opened or closed; requires 2 parameter(s)
description
Change contact description; requires 2 parameter(s)
enable
Set admin state ON (sense contact); requires 1 parameter(s)
disable
Set admin state OFF (ignore contact); requires 1 parameter(s)
clear
Clear contact alarm; requires 1 parameter(s)
SCIP-E1% show contact

_________________________Contact Status______________________
Contact
Admin
Normal
Current
Alarm
Name
State
State
State
Status
----------------------------contact1
OFF
NO
OPEN
CLEAR
contact2
OFF
NO
OPEN
CLEAR
contact3
OFF
NO
OPEN
CLEAR
contact4
OFF
NO
OPEN
CLEAR
contact5
OFF
NO
OPEN
CLEAR
contact6
OFF
NO
OPEN
CLEAR
contact7
OFF
NO
OPEN
CLEAR
contact8
OFF
NO
OPEN
CLEAR
Contact Descriptions
----------------------------------------------------------contact1 Door Open
contact2 Temperature High
contact3
contact4
contact5
contact6
contact7
contact8
Figure 5-7
Note
Help and Status Displays for Contact Sense
Contact Sense and Terminal Server functions are mutually exclusive; only one can be enabled at a time.
If the user tries to enable both simultaneously, a warning message is displayed.
076R201-000
Issue 6

5-11
Additional Features
Contact Sense
Contact Sense Procedure

Perform the following procedure for each connection to an external relay at the site. The procedure
below configures an individual contact port using the contact port number (c[#]) in the command
string. If desired, you can configure a parameter for all contact ports at once by typing all in place
of c[#].
1. Set the normal operating state of the each contact port by typing:
configure contact normal-state c[#] [NO or NC]
where c[#] is contact port 1 - 8, and the normal state for that port is Normally Open (NO)
or Normally Closed (NC). Default is Normally Open.
2. If desired, enter an alphanumeric description of the contact port by typing:
configure contact description c[#] [contact description]
Note
If a space is desirable in the description, you must use a double-quoted string, as shown above.
3. Enable the contact port by typing:

configure contact enable c[#]
4. Repeat the procedure for each external relay to be monitored by Contact Sense.
5. Disable any contact ports that will not be monitored by Contact Sense by typing:
configure contact disable c[#]
6. The SCIP is now monitoring the enabled contact ports.
5-12
To view the current configuration parameters and status of all contact ports including
current state and alarm status of enabled contact ports, type: show contact
To manually clear an active alarm condition, type:

configure contact clear c[#]
If after clearing, the alarm condition still exists, a new alarm condition is generated
resulting in a new SNMP Trap.

076R201-000
Issue 6
Additional Features
LAN-X Features
LAN-X Features
SCIP in LAN-X mode supports the following additional features via lanx-router commands or
traffic commands:
Enable/disable Ethernet Jumbo Packets (default is Disabled)
Enable/Disable Ethernet Broadcast Limiting (default is Enabled)
Expedited Traffic Queuing (default is Disabled)
For help in setting LAN-X parameters, type: configure lanx-router ?

To show the status of LAN-X parameters, type show lanx-router
Figure 5-8
Help and Show Displays for LAN-X Functions
Ethernet Broadcast Limiting

SCIP in LAN-X mode supports ethernet broadcast limiting. Broadcast limiting prevents switched
ports on a LAN from being disrupted by a broadcast storm on one of the ports. A LAN broadcast
storm occurs when broadcast or multicast packets flood the LAN, creating excessive traffic and
degrading network performance.
Broadcast limiting is controlled by setting a percentage of total available bandwidth that can be used
by broadcast traffic. The default setting for Broadcast limiting is Enabled, with limiting set to
10% of LAN-X bandwidth. A threshold value of 100 percent means that no limit is placed on
broadcast traffic.
Ethernet Jumbo (Extended) Packets

SCIP in LAN-X mode supports the sending and receiving of jumbo frame size packets which are
up to 6 times the size of standard Ethernet packets. Jumbo packets delivers up to 1536 byte packets
instead of a 1518 byte packet for standard Ethernet. The extended length is required for specific
applications such as VLAN tagging. The default setting for jumbo packets is off (Disabled).
076R201-000
Issue 6

5-13
Additional Features
LAN-X Features
Expedited Traffic Queuing

In LAN-X applications, SCIP can provide priority queuing for IP traffic marked as Expedited
traffic. VoIP is typically marked for Expedited Forwarding by VoIP vendors. SCIP has three
transmit priority queues per interface:
Urgent Queue used only for Spanning Tree messages and LANX layer 2 Keep Alive
messages. (Holds up to 10 packets.)
Expedited Queue used only for IPv4 and IPv6 packets marked as EF.
(Holds up to 50 packets.)
Normal Queue used for all other traffic. (Holds up to 50 packets.)
For help in setting traffic parameters, type any of the following commands:
configure traffic ?
configure traffic dscp ?
configure traffic rate ?
To show the status of traffic parameters, type: show traffic
To show TX Expedited Queue Statistics by interface, type show interfaces [interface]
Figure 5-9
5-14
Help and Status Displays for Expedited Traffic

076R201-000
Issue 6
Additional Features
LAN-X Features
Typical Expedited Traffic Application

Example:
It is desired to extend the LAN from a central site to a remote location using an E1 connection. The
LAN traffic is expected to be light to moderate with occasional sustained bursts for file transfers. It
is also desired to use VoIP between the remote site and the central site. VoIP must be given priority
to maintain quality voice service. (VoIP vendors typically mark their IP traffic for Expedited
Forwarding.)
A pair of SCIPs operating in LANX mode can be used to provide LAN extension between the
central site and remote site. When configured for Expedited Traffic Queuing, SCIP will provide
priority service to the VoIP traffic marked for expedited forwarding even during peak utilization
(file transfers) of normal traffic. If necessary, SCIP will drop normal traffic to provide the priority
service for VoIP.
SCIPs built-in three-port Etherswitch will reduce unnecessary unicast LAN traffic. In addition,
SCIPs MAC filtering will reduce unnecessary LAN broadcast traffic and provide security from
unauthorized PCs at the remote site trying to hack into the central site.
Special Considerations
076R201-000
Issue 6
SCIP expedited traffic queuing is supported only in LAN-X mode where Ethernets are
connected across a T1/E1 WAN providing transparent layer 2 connectivity.
SCIP can provide priority queuing for IPv4 and IPv6 packets marked with Differentiated
Services Codepoint for EF (Expedited Forwarding) value 0xB8. SCIP can also provide priority
queuing for another DSCP value other than 0xB8 if desired.
SCIP does not modify the DSCP value of any IP packet. It only compares the IP packet DSCP
value to the configured DSCP value.
A max rate may be configured for expedited traffic to ensure it does not completely overwhelm
normal priority traffic. Expedited traffic that is in violation of this rate limiting is left on the
Expedited Queue until the next available time window. This may result in dropped expedited
traffic if the sustained rate exceeds the configured max rate.
Expedited traffic queuing may be enabled or disabled. It is disabled by default. When expedited
traffic queuing is enabled, SCIP measures the peak expedited traffic rate as an aid to setting the
max rate parameter.

5-15
Additional Features
LAN-X Features

In LAN-X applications, SCIP with Spanning Tree Protocol complies with IEEE 802.1D 1998 and
has been tested with third-party bridges such as the CISCO IOS, Version 12.0 (7). Spanning Tree
Protocol determines the active topology of a bridged LAN so that there is no more than one active
data path between any two workstations in that bridged LAN. The chosen data path for each LAN
segment shall have at least Root Path Cost. Spanning Tree Protocol automatically reconfigures the
active topology of a bridged LAN when there is a breakdown in the active data path. The chosen
data path for each LAN segment shall have at least Root Path Cost.
For help in setting Spanning Tree parameters, type: configure span-tree ?

To show the status of Spanning Tree parameters, type show span-tree
Figure 5-10 Help and Status Displays for Spanning Tree
5-16

076R201-000
Issue 6
Additional Features
LAN-X Features
STP Defaults
Once Spanning Tree Protocol (STP) is enabled, the network administrator can change several STP
default settings, listed in Table 5-1.
Table 5-1
Setting
Default Value
Bridge Priority
32768
Bridge Hello Time
2 seconds
Bridge Max Time
20 seconds
Bridge Forwarding Delay
15 seconds
Port Priority
128
Port Path Cost
100 (E0), 350 (30 DS0s)
076R201-000
Issue 6
STP Defaults in an E1 Network
If the DS0 is changed, the Port Path Cost is also changed to the corresponding default value.
When this is the case, users can change the Port Path Cost value to the preferred value. This
value shall remain unless the DS0 is changed again.
If the number of DS0s is between 1 - 24, the default Port Path Cost will increase by 100 for
every DS0 decrement, while the default Port Path Cost will decrease by 100 for every DS0
increment.
increment.
increment.

5-17
Additional Features
Telnet Menu Access
Telnet Menu Access

SCIP supports Telnet access to the command line interface and also to each enabled terminal server
port. A successful Telnet connection to the SCIP will display the Telnet menu. In the figure below,
a typical menu is shown with five enabled terminal server ports.
Figure 5-11 SCIP Telnet Menu Selections
Telnet Access Procedure

1. At the DOS prompt, type:
telnet [SCIP IP address]
2. Login to the SCIP with supervisor or admin privileges.

3. Configure the Telnet menu by typing:
configure term-serv tel-menu enable
4.
Exit the Telnet session and then begin a new session.
5. Login to the SCIP. The Telnet menu appears.
5-18
Select menu option 9 to access the command line interface.
Select menu options 1 thru 8 to access any enabled Terminal Server port.

076R201-000
Issue 6
Chapter 6:
Diagnostics & Monitoring
Alarms Overview
SCIP provides the following alarms and diagnostic tools which inform users about catastrophic or
impaired line conditions:
E1 Line Code Violations (LCV) alarm
E1 Loss of Frame Alignment (LFA) alarm
E1 Loss of Signal (LOS) alarm
E1 Alarm Indication Signal (AIS)
E1 Cyclic Redundancy Check (CRC) error alarm
E1 Remote Alarm Indicator (RAI) alarm
E1 Far-End Block Error (FEBE) alarm
E1 Frame Alignment Signaling (FAS) alarm
Diagnostic Tools
LAN-X Check verifies the integrity of the link using various sized test packets.
Traceroute can assist in diagnosing IP connectivity problems.
To execute a traceroute, type: trace-rte [Destination IP address]
To execute a LAN-X test, type: diags lanx
To cancel a LAN-X test or a traceroute, press the CTRL-C keys.
LAN-X Link Integrity Check

When network problems are suspected but have not surfaced in other statistics, the LAN-X Link
Integrity Check can collect statistics between two SCIPs that will verify the integrity of the E1 link.
This diagnostic is independent if IP and does not use ICMP (ping). Rather, eight different-sized test
packets are sent to the remote SCIP which loops them back to the sender. The user defines how long
the test will run by entering the number of times (passes) the eight test packets will be sent, or by
entering 0 for continuous transmission.
For example, typing: diags lanx 10 will send 10 passes of the eight test packets to the remote
SCIP over the E1 link. The diagnostic runs until all passes are sent or until the user presses the
Ctrl+C keys. The console port shows a summary of results for each of the eight packet sizes.
076R201-000
Issue 6

6-1
Diagnostic Tools
Traceroute
Traceroute, invoked by the CLI command trace-rte, attempts to trace the route (path) a packet
takes through a network by making use of the TTL (Time to live) field in the IP packet header. The
TTL field is designed to prevent packets from running in loops by allowing every router that
forwards an IP packet to decrements the TTL field. When this field is decremented to zero, the
packet's life is expired. The router then discards the packet and sends an ICMP message indicating
Time Exceeded to the sender.
Traceroute sends a UDP datagram with a TTL value of 1 to the destination in an attempt to have the
first hop router identify itself by sending the ICMP Time Exceeded message. If successful,
traceroute then sends a UDP datagram with a TTL value of 2 to the destination attempting to
identify the second hop router, and so on until the destination is reached.
Special Considerations
TCP/IP was not designed to specifically support Traceroute. Therefore, Traceroute may not work
in all cases, but it is a useful technique for diagnosing IP connectivity problems. The following
conditions may affect Traceroute output:
6-2
SCIPs in LANX mode, bridges and Etherswitches do not act as routers; they operate only in
layer 2 and are transparent to IP. Since these devices will not decrement the TTL field, they will
not show up in Traceroute output as a router hop.
Traceroute traces the path of many packets, not just one. Ideally, all those packets would follow
the same route, but this is by no means assured. In the event of a link failure during the
Traceroute, your packets may be rerouted, resulting in a Traceroute output that is a confused
combination of two separate routes.
You will only see one receiving IP address from each router, no sending addresses. That is, you
will see the interfaces routers are receiving packets on, but not the interfaces routers are sending
the packets on. The sending interfaces can often be deduced by matching each router with the
next one in line - typically only one interface would be used between them.
Problems inherent in TCP/IP routing or implementation may result in packets with incorrect
TLL values, no route back to the sender, or a route through an interface other than the one the
packet was received on.

076R201-000
Issue 6
Monitoring Features
Monitoring Features
SNMP Traps
SCIP supports SNMP traps for several events, listed below. All traps are queued for up to four trap
hosts and are kept on the queue until IP connectivity to the trap host is verified. The last ten traps
for each trap host are queued. Queuing SNMP traps before sending to the trap host greatly improves
the trap success in the event of network outages. Once the network is restored and IP connectivity
is verified, the queued trap is sent. Each log message is time-stamped with a relative System Up
Time (default) or with GMT, if so configured. Refer to Chapter 5 under the paragraphs on Network
Time as needed. SCIP supports the following SNMP traps:
Cold start
Authentication failure
Ethernet0 LinkUp/Down
Serial0 LinkUp/Down
Serial1 LinkUp/Down
Modem0 LinkUp/Down (if so equipped)
Etherswitch port1 Up/Down
Etherswitch port2 Up/Down
Contact sense Started/Stopped
Contact alarm Active/Clear
MACL violation
SNMP Trap Configuration

To configure SCIP to send SNMP alarm traps to designated IP addresses, perform the
following steps:
1. Login to SCIP as an administrator or supervisor.
2. Configure the destination IP address for SNMP traps by typing:
configure snmp trap add [destination IP address] [community] enable
3. Identify the SCIP in SNMP format by typing:

configure snmp system [name]
configure snmp system [contact]
configure snmp system [location]
4. Configure the community name and define access privileges by typing:

configure snmp community add [community name] [access privilege] enable
5. To show the configured SNMP trap parameters, type any of the following commands:
show snmp traps
show snmp traps community
show snmp traps system
Note
Access privileges are defined as read-only (ro ) or read-write (rw ).
076R201-000
Issue 6

6-3
Monitoring Features
System Message Log

The System Message log shows a history of the last 100 SYS MSG events saved to the log. This
log is useful in examining link status, spanning tree protocol changes, diagnostic test activity, MAC
security violations, TACACS+ failures, etc. The System Message log is not saved when the unit
reboots. Each log message is time-stamped with a relative System Up Time (default) or with GMT,
if so configured. Refer to Chapter 5 under the paragraphs on Network Time as needed.
To show the last 100 logged events, type:

show log sysmsg
To clear the log, type:

clear log sysmsg
Figure 6-1
Example: System Message Log
Alarm Log
The Alarm log shows a history of the last 100 Alarm events saved to the log. The Alarm log is not
saved when the unit reboots. Each log entry is time-stamped with a relative System Up Time
(default) or with GMT, if so configured. Refer to Chapter 5 under the paragraphs on Network Time
as needed.
To show the last 100 logged alarms, type:

show log alarm

clear log alarm
Figure 6-2
6-4
Example: Alarm Log

076R201-000
Issue 6
Monitoring Features
MACL Violation Log

The MACL log shows a history of the last 100 MACL violations saved to the log. The MACL log
is not saved when the unit reboots. Each log entry is time-stamped with a relative System Up Time
as needed.
To show the last 100 logged MAC violations, type:

show log macl [interface]

clear log macl [interface]
Figure 6-3
076R201-000
Issue 6
Example: MACL Violation Log

6-5
Monitoring Features
Network Statistics
Network Statistics displays information about the current TCP socket connections, such as the local
or remote IP address, send and recieve window sizes, state, etc. To show the Network Statistics,
type: show netstat
Figure 6-4
Example: Network Statistics
Modem Activity Log

For SCIPs equipped with an internal modem, Supervisor or Admin users can access the Modem
Activity log to view a history of the last 100 modem activities saved to the log. The log reports can
include password (authentication) failures, callback failures, and caller-ID failures. The log is not
saved when the unit reboots. Each log entry is time-stamped with a relative System Up Time
as needed.
To show the last 100 logged modem activities, type:

show log modem

clear log modem
Figure 6-5
6-6
Example: Modem Activity Log

076R201-000
Issue 6
Appendix A: Application
Guidelines
General Application Information

This chapter provides additional information on standard factory default settings, configuring IP
Addresses, and any special network or product considerations.
Command Access Modes

Access to Supervisor Mode or Admin Mode is password protected. The show supervisor
command displays the current state of Supervisor Mode (enabled or disabled) and Admin Mode (on
or off).
The enable command prompts for entry of the Supervisor or Admin password.
Once Supervisor or Admin mode is enabled, the help screens will display the additional
commands made available by those modes.
The disable command returns the console to normal USER mode.
Factory defaults for user accounts are:

User Name
Password
admin
admin
supervisor
supervisor
gdc
gdc
The first two usernames are admin and supervisor. These cannot be deleted, but their
passwords should be changed before placing the unit into operation. Note that admin and
supervisor cannot be used as username logins. They are only used to enable the supervisor/
admin mode. The only default username login is defined as gdc with the password gdc. This
username may be deleted or its password should be changed.
Up to twenty usernames/passwords may be configured after supervisor. Use the configure
accounts add command string to add new usernames and passwords, or modify existing
passwords.
When the enable command is used, the password entered is first compared to the Admin
password and then to the supervisor password. This allows users with knowledge of the Supervisor
password to enter Supervisor Mode and configure all parameters except for user accounts. Only
users with knowledge of the Admin password can enter Admin mode and add/modify user accounts.
With factory default configuration, console authorization is turned off. That is, username/password
login is not required to enter user mode from the console port. Console authorization may be turned
on in Admin mode by the configure accounts console enable command string. For
Telnet connections, username/password login will always be required.
076R201-000
Issue 6

A-1
Application Guidelines
SCIP-E1 Default Configurations

SCIP-E1 is shipped from the factory with the ordered Default Profile that most suits the customer
application. The Profile establishes default values for most configurable settings required by SCIPE1 in router mode or LAN-X modes. Table A-1 describes Default Configuration Profile #1. Your
factory defaults may vary, depending on which profile was ordered with your unit.
Users can change values from the default setting via Supv or Admin access to the CLI or the web
interface. The Default Profile can be reloaded back into a SCIP-E1 whenever a clean baseline is
desirable prior to downloading a batch file configuration. To accomplish this, type default all
at the command prompt, or add the # default all command uncommented at the start of
your configuration batch file. You may need to reboot the unit.
Table A-1 Default Configuration Profile #1 (GDC P/N: TBD)
Setting
Description
System Prompt
Custom prompt
Parameters/Default
A quoted string; 20 chars max
SCIP-E1
CLI Inactivity Timer
A-2
Disconnects CLI session after the

desired interval (in secs) has
elapsed.
0 to 10,000 use 0 to disable
HTTP Service
HTTP server support for web

management
Enable or Disable
SNMP Service
SNMP server support for SNMP

management
Enable or Disable
Telnet Service
Telnet server support for telnet

management
Enable or Disable
FTP Service
FTP server support for firmware

(Flash) download
Enable or Disable
TFTP Service
TFTP server support for firmware

(Flash) download
Enable or Disable
E1 Configuration
Clock-source
Internal or Line
Framing
crc4-on or crc4-off
Timeslot
1-31 64 16
Signaling
cas-w-idles or ccs-w-marks
900
Ethernet Interface
Sets admin state on to allow xmit & Enable or Disable

recv.
Ethernet ip-address
IP address (a.b.c.d)
IP mask (a.b.c.d);
(No default)
IP broadcast address (a.b.c.d)

(optional)
255.255.255.255
Ethernet Jumbo Packets

(LAN-X only)
Limits broadcast traffic to % of

available bandwidth (default 10%)
Enable or Disabled
Ethernet Expedited
Traffic (LAN-X only)
Priority queuing for IP traffic

marked as Expedited.
Enable or Disable
Ethernet Broadcast
Limiting (LAN-X only)
Sends and receives Ethernet

packets up to 9216 bytes.
Enable or Disable
Interfaces description
A description of the interface
A quoted string; 72 chars max (No default)
Modem interface
Sets admin state ON (allow xmit

and receive)
Enable or Disable

076R201-000
Issue 6

Setting
Description
Parameters/Default
Modem0 ip-address
192.168.11.20
IP mask (a.b.c.d)
255.255.255.128
IP broadcast address (a.b.c.d)

(optional)
255.255.255.255
Modem mode
Sets modem0 for auto-answer or

callback
Auto-answer or callback
Serial0 Interface
Set admin state of port
Enable or
Link-encapsulation serial1
PPP, Frame Relay DTE, or LANX
LMI type
cisco, ansi, or q933a
LMI n391
1 to 255, 6
LMI n392
1 to 10, 3
LMI n393
1 to 10, 4
LMI t391
5 to 30, 10
IP encapsulation
ietf, cisco,snap
Set admin state of port
Enable or
S1-TX-clock
Normal or inverted
Link-encapsulation serial1
PPP, Frame Relay DTE, or LANX
LMI type
cisco, ansi, or q933a
LMI n391
1 to 255, 6
LMI n392
1 to 10, 3
LMI n393
1 to 10, 4
LMI t391
5 to 30, 10
IP encapsulation
ietf, cisco,snap
Set admin state of AUX port
Enable or Disable
192.168.11.230
IP mask (a.b.c.d)
255.255.255.0
ethernet0
Enable or Disable
modem0
Enable or Disable
serial0
Enable or Disable
serial1
Enable or Disable
aux
Enable or Disable
Serial1 Interface
AUX interface
(Future Use)
Service access
076R201-000
Issue 6

Disable
Disable
A-3

Setting
Description
Parameters/Default
Spanning tree (STP)
STP admin status
Enable or Disable
Forward delay time
1 to 30,
15
Hello time
1 to 10,
Max age time
6 to 40,
20
Priority
0 to 65535,
32768
Port cost ethernet0
1 to 65535,
100
Port priority ethernet0
0 to 255,
Port cost serial0
1 to 65535,
Port priority serial0
0 to 255,
Port cost serial1
1 to 56635,
Port priority serial1
0 to 255,
Ethernet MACL admin status
Enable or Disable
Ethernet0 MACL log
Enable or Disable
Ethernet0 trap log
Enable or Disable
Serial0 MACL admin status
Enable or Disable
Serial0 MACL log
Enable or Disable
Serial0 trap log
Enable or Disable
Serial1 MACL admin status
Enable or Disable
Serial1 MACL log
Enable or Disable
Serial1 trap log
Enable or Disable
IP-route add
Defines a static route that adds an

entry to the routing table for a
specific destination IP address or
subnet.
Interface name: ethernet0, modem0, or

modem1
Destination IP network address (a.b.c.d)
Destination IP mask (a.b.c.d)
Destination IP gateway (a.b.c.d)
Metric (1-255) (No default)
IP-route default route
Defines a default route that is the

IP address of the next hop when
no other routes are known
Interface name: ethernet0, modem0, or

modem1
Default router IP address (a.b.c.d)
(No default)
Contact sense
Configures normal state of contact
Normally open (NO) or
Media Access Control

List (LAN-X only)
128
350
128
2700
128
Normally closed (NC)
A-4
Contact sense
Configures the device for contact

sensing.
Enable or Disable
Contact description
Describes the purpose of contact.
A quoted string: 72 chars max (no default)

076R201-000
Issue 6

Setting
Description
Parameters/Default
Terminal Server
Configure terminal port
term 1 through 8
Data rate
2400, 4800,
Parity
None, Even or Odd
Data bit:
5, 6, 7, or 8
Status
Enable or Disable
Escape sequence for connection

of the port
5 ascii characters, max, ^^^
Port description
A quoted string: 72 chars max (no default)
Controls access to device

statistics and configuration
community name: 9 chars max, public

access: read-only (ro) or read-write (rw)
status: Enable or Disable
SNMP community name
9600, 19200, 38400, 57600
Note: A read-only community name allows user to gather statistics from your
SCIP, but not change the configuration of the device.
A read-write community name allows user to gather statistics and remotely
configure the device. (The device supports MIB-II system group.)
SNMP traps
Destination IP address (a.b.c.d)

Sends unit and port information
and alarms to a network controller Community name: 9 chars max
Status: Enable or Disable
UDP Port (optional) 162
SNMP system name
Assigns a name for the managed A quoted string; 128 chars max
node. Typically is the fully qualified YOUR SYSTEM NAME
domain name of the node.
SNMP system contact
Identifies the contact person for

the managed node adn the
method of contact.
Describes the physical location of

the node.
SNMP system location

Configure Time
YOUR SYSTEM CONTACT
YOUR SYSTEM LOCATION
Controls the use of Simple

Enable or Disable
Network Time Protocol (RFC2030)
and Time Protocol (RFC 868)
Note: When configured for SNTP or TP, the device will receive and use
Greenwich Mean Time (GMT) to timestamp any generated SNMP traps, System
Messages and Alarms. When neither SNTP nor TP is configured, the device will
use a relative System Up Time for timestamping.
076R201-000
Issue 6
Time protocol
Selects the time protocol
SNTP1, SNTP2,
Time server
Defines the location of the time

server
Time server IP address (a.b.c.d)

Per-server NTP version 1-4 (optional)
(Default is no server specified)
User Accounts
Configuration
(For details, refer to
Chapter 3:
Setting Up User
Accounts ,
and Chapter 5:
TACACS+ Authentication
Protocol
Username/password for read-write A quoted string; 20 chars max

access to all SCIP functions
admin admin
SNTP3, SNTP4 or TP
Username/password for read-write A quoted string; 20 chars max

access to most SCIP functions
supervisor supervisor
Username/password for read-only
access to device
gdc gdc
Console (craft port) authentication Enable or

Disable
A-5

Setting
Description
TACACS+ account
(Future Use)
TACACS+ authentication
Starts TACACS+ client

authentication for user login via
Telnet or HTTP (web) only
TACACS+ author
(Future Use)
TACACS+ attempts
Allows a specific number of

attempts to successfully log in to
the device before terminating the
session.
TACACS+ banner
Message banner displayed when a A quoted string; 72 chars max

Telnet TACACS+ login succeeds
(No banner)
TACACS+ local banner
Message banner displayed when a A quoted string; 72 chars max

console TACACS+ login succeeds (No banner)
TACACS+ console
Controls TACACS+ login

authentication via the console
Enable or Disable
TACACS+ admin
Defines a TACACS+ administrator

password
Defines a TACACS+ supervisor

password
TACACS+ supv
A-6
Parameters/Default
Enable or Disable
1 to 10 attempts, 3
$gdc_scip_admin$
$gdc_scip_supervisor$
TACACS+ en-pass
Controls admin/superv login using Enable or Disable

TACACS+ passwords
TACACS+ fallback
Controls fallback to local

authentication
Enable or Disable
TACACS+ server
Defines the TACACS+ server

location
TACACS+ Server IP address (a.b.c.d)

Per-server key: Quoted string, 72 chars
max (optional)
Per-server timeout (optional)
(Default is no server specified)
TACACS+ key
Sets a TACACS+ default

encryption key
Quoted string, 72 char max

(No default)
TACACS+ timeout
The interval the device will wait for 1 to 10 seconds, 5

the TACACS+ server to respond
before trying the next server on the
list.
Auto Reboot
To enable, uncomment the batch

file line: # reboot

Enable or Disable
076R201-000
Issue 6
Using Sub-interfaces for Frame Relay PVCs
Using Sub-interfaces for Frame Relay PVCs

To support Frame Relay PVCs, you must add sub-interfaces on the serial0 or serial1
interface using the configure interfaces add-sub command. Sub-interface names take
the form serialn.nnn where n = 0 or 1 and nnn = 1-999. Each sub-interface must have a
DLCI mapped to it before IP data can be forwarded on the sub-interface. Use the configure
frame-relay interface-dlci command to assign a DLCI to a sub-interface and then
configure its IP encapsulation. Once added, sub-interfaces can be assigned an IP address, etc.
IP Addresses
The SCIP-E1 is a routing network device that provides IP connectivity to other devices at a remote
site. Each network interface on the SCIP-E1 requires a unique numeric IP address which provides
the network prefix and the host number. Addresses are expressed in dotted decimal notation which
defines the 32-bit IP address in four 8-bit fields (or four octets), e.g., 195.88.11.4. Each octet
has a value from 000 to 255.
Using the traditional Class A, B, and C network architectures, one or more octets would be allocated
to the network prefix and host number. The more octets allocated to a network prefix, the larger the
number of networks anticipated; likewise, the more octets allocated to a host number, the larger the
number of hosts anticipated. Table A-2 describes the traditional uses of these general purpose
network architectures.
Table A-2 Class-Based IP Routing
Network Class
1st Octet
Class A
NETWORK Prefix
Up to 126 networks
Class B
2nd Octet
3rd Octet
HOST Number
~17,000,000 hosts each
NETWORK Prefix
~65,000 Networks
Class C
4th Octet
HOST Number
~17,000 hosts each
NETWORK Prefix
~ 2,000,000 Networks
HOST Number
254 hosts each
IP Addressing Examples
An example is shown below of both classical and shortened IP address representations:
Example: Classical IP notation:
IP-address ::= <Network-prefix> <Host-number>
192.168.11.1 with a subnet mask of
255.255.255.0
Example: Shortened IP notation:

192.168.11.1/24
where the /24 indicates that the first 3 octets comprise the network prefix.
076R201-000
Issue 6

A-7
IP Addresses
Network Classifications
IP addressing uses a set of fixed structure addresses known as classes (A,B, C, D, and E). An
internet address can be acquired by sending a request to the Internet Network Information Center
or from an Internet Service Provider. Table A-3 describes network classes. Note that a message sent
to a Class D address is received by all the devices sharing that address.
RFC 1918 has reserved some addresses for private Internet Addressing. In order to use these private
IP addresses, you must use a firewall, Network Address Translator, or proxy server to connect to
the Internet. These devices convert the private address into a legitimate Internet address. Table A-4
and the associated figure illustrate private addressing for a full Class A network, 16 contiguous
Class B networks and 256 contiguous Class C networks.
Table A-3 Network Classification
NTWK
Class
A
First Octet
1 - 126
Range of
Networks
Default Mask
1.0.0.0 - 127.0.0.0 255.0.0.0
Example
18.0.172.16
Class A: 127 is reserved for loopback

B
128 - 191
128.0.0.0 191.255.0.0
255.255.0.0
140.250.16.1
192 - 223
192.0.0.0 223.255.255.0
255.255.255.0
200.10.20.10
224 - 239
224.0.0.0 239.255.255.255
255.255.255.255
224.0.0.9
Description
Class A, B and C
addresses are used to
address: hosts, hubs,
switches, routers and other
IP devices.
Class D addresses are
used for multi-cast IP or
group addresses.
Class E: Reserved
INTERNET
PORT 1
172.16.2.1
NETWORK
172.16.0.0
ROUTER
Note
172.16.2.2
172.16.2.4
172.16.1.2
172.16.1.4
PORT 2
172.16.1.1
Class D addresses are used in video teleconferencing, Network Time Protocol, some routing protocols
(i.e., RIPv2 and OSPF), and some mass push installation programs. Class D traffic can be routed through
an IP network if configured with DVMRP, PIM or MOSPF
Table A-4 Private IP Addressing
Network Class
A-8
Private RFC 1918 Addresses
10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255
076R201-000
Issue 6
Bridging/Routing Guidelines
Establishing an IP Address
IP addresses and subnet masks are established by the user locally at the terminal interface. IP
addresses are stored in SCIP-E1 nonvolatile memory and retained when there is no power to the
card.
In setting up the SCIP-E1, individual IP addresses are required for the E1 interface, the modem
interface, and the Ethernet (LAN) interface. Each IP address is associated with a subnet mask which
further subdivides a standard class address for routing within an organization. A station submask
indicates the bits used for network identification. A sending station checks the bits to see if the
receiving station is on its LAN or a remote. For a remote, the sending station selects a default router
from an internal table.
From the factory, the SCIP-E1s modem interface is pre-configured with a default address of
192.168.11.220 with a subnet mask of 255.255.255.000 for initial remote dial-in. For the other
interfaces, the factory default is no IP addresses or masks.
LOCAL
NETWORK
189.254.0.0
DEFAULT ROUTER
INCOMING
IP TRAFFIC
189.254.2.1
IP DESTINATION:
191.254.2.1
(NOT LOCAL)
189.254.2.4
Figure A-1
Using Subnet Masks
Bridging/Routing Guidelines
All interfaces can pass data, although it is important to note that in LAN-X mode, the SCIP-E1 is
employed as a bridge rather than a router. That is, data is passed between ethernet0 (E0) and serial0
(S0) or serial1 (S1). The other interfaces, such as M0,can only be used to access the SCIP-E1. If the
terminal server ports are employed, they will still be accessible.Figure A-2 demonstrates the
relationship between the operation modes and permissable access via the various interfaces.
SCIP IN ROUTER MODE
SCIP IN LAN-X MODE

BRIDGE #1
S1
E0
BRIDGE #2
S1
S0
E0
076R201-000
Issue 6
S0
MO
(Dial-In)
MO
(Dial-In)
Figure A-2
S2
E0
S1
MO
(Dial-In)
Access Bridging and Routing

A-9
S0 and S1 Comparison
S0 and S1 Comparison
Both serial0 (S0) and serial1 (S1) support the following WAN protocols: PPP, Frame Relay and
LAN-X. Any CSU/DSU that has a RS-232 DCE interface can be used with the serial1 (S1) port.
Therefore, the only difference between S0 and S1 is the physical interface. The S1 interface requires
an external CSU/DSU and generally can only run at lower speeds. However, the network
connection is flexible since the CSU/DSU can be a DDS, fractional E1 or others.
Because S1 is the same as S0 at the link layer (layer 2), all examples pertaining to PPP, Frame Relay
or LAN-X on the S0 interface are also applicable to the S1 interface.
Figure A-3 demonstrates a typical configuration of SCIP-E1 with an external CSU/DSU,
employing the S1 interface
S1
E0
General
DataComm
DCE
SCIP-E1
CSU/DSU
NTWK
Network
NTWK
CSU/DSU
ROUTER
Figure A-3
A-10
Serial0 and Serial1 Comparison

076R201-000
Issue 6

The SCIP-E1 with Spanning Tree Protocol complies with IEEE 802.1D 1998 and has been tested
with third-party bridges such as the CISCO IOS, Version 12.0 (7).
STP Defaults
Once Spanning Tree Protocol (STP) is enabled, the network administrator can change several STP
default settings, listed in Table A-5.
Table A-5 STP Defaults
Setting
Default Value
Bridge Priority
32768
Bridge Hello Time
2 seconds
Bridge Max Time
20 seconds
Bridge Forwarding Delay
15 seconds
Port Priority
128
Port Path Cost
100 (E0), 2700 (S1), 500 (24 DS0s), 325 (31 DS0s)
If the DS0 is changed, the Port Path Cost is also changed to the corresponding default value.
When this is the case, users can change the Port Path Cost value to the preferred value. This
value shall remain unless the DS0 is changed again.
If the number of DS0s is between 1 - 24, the default Port path Cost will increase by 100 for
increment.
every DS0 decrement, while the default Port Cost will decrease by 25 for every DS0
increment.
Timeslot Assignments
Table A-6 lists examples of legitimate signaling timeslot assignments.
Table A-6 Determining Timeslots
Type of Signaling
Timeslots Cost
Data Timeslots
No signaling
1 - 10
1 - 10
CAS-16 with Idle
1 - 20
1 - 15, 17 - 20, and 16 is CAS with Idle
CCS with Mark
1 - 20, where CSS DS0 is 14
1 - 13, 15 - 20, and 14 is Mark (all ones)
CAS-16 with Idle
1 - 10
1 - 9, and 16 is CAS with Idle
CCS with Mark
1 - 10, where CSS DS0 is 14
1 - 9, and 14 is Mark (all ones)
076R201-000
Issue 6

A-11
Batch Up/Download Overview
Batch Up/Download Overview

For advanced users with SUPERVISOR mode enabled, there is a batch feature available to
simplify configuring (or re-configuring) multiple SCIP-E1s. This feature allows the user to upload
an ASCII text batch script from a pre-configured SCIP-E1 via the FTP or TFTP get operation.
Use the show config command to view the batch script that would be generated from the SCIPE1 for a subsequent FTP or TFTP upload. This text file may be modified and/or downloaded to the
same SCIP-E1 or another SCIP-E1 via FTP or TFTP.
A batch script file may also be created by a text editor (NotePad) and then downloaded from
terminal emulation program (i.e., MS HyperTerminal) at the CTRL interface. Users can initially
setup the SCIP-E1 from a predefined configuration file, rather than entering one command at a time.
Special Considerations for Batch Files
You must be in SUPERVISOR mode to execute a batch file, since batch script files use the
configure command.
You must be in ADMIN mode if the batch script file contains user accounts configuration.
The downloaded batch script file will reside in the batch queue. The following commands can
then be used on the file:
Use the batch show command to view the batch script file in the batch queue.
Use the batch run command to execute the batch script file in the batch queue.
An execution of the batch run command will terminate at any invalid command string.
All commands executed up to that point will be in affect.
Batch Download Procedure

1. To use batch download, make a plain text file (using Notepad) with the first and last lines as
shown:
batch begin
batch end
2. Between the begin and end lines, type valid SCIP-E1 commands along with all
arguments. Typically, these commands would include IP interface configuration, terminal line
baud rate configurations and static routes, as shown in the example below:
An example download file:
batch begin
configure interfaces ip-address e0 172.16.4.145 255.255.0.0 255.255.255.255
configure ip-route add e0 128.1.0.0 255.255.0.0 128.1.1.10 1
configure ip-route add e0 135.1.0.0 255.255.0.0 135.1.1.5 1
configure term-serv comms term1 9600 8 N 1
batch end
3. To use the batch download feature, set the file transfer settings of the terminal emulation
program to wait for remote character echo. Set Line Termination to CR and Line Terminating
Timing to 1 mSec.
4.
Enter SUPERVISOR mode or ADMIN mode and activate the file transfer.
5. When the scip-e1# prompt returns to the screen, type batch show to view the
downloaded commands. If desired, type batch run to execute the file.
A-12

076R201-000
Issue 6
Using Smart CLI
Using Smart CLI

The Smart CLI commands can be executed from a hyperterminal connection, a password-protected
Telnet connection or at the web interface. When using CLI at the web interface, be aware that you
will not be able to execute those commands that are restricted to the ADMIN mode.
The SCIP-E1 command line interface is composed of commands, zero or more subcommands and
zero or more arguments. The general syntax of a command entered at the command prompt is:
command <subcommand(s)> if any
<required argument(s)> if any
Finding Commands and Subcommands

Use the ? character to get a description of commands available, or at any time in the command
line to get context help. The syntax of a help description is:
Brief description of command or subcommand
command
parameter(s) description, if any, for the command or subcommand
For example:
When you type the ? character at the beginning of a command line, the screen displays all the
commands available along with a one line description of each command:
scip-e1%> ?
_______________________SpectraComm IP Commands___________________________
clear
Reset functions
configure Configure system parameters
connect
Connect to terminal interface or modem
default
Default configuration to factory values.
disable
Turn off supervisor/admin commands
enable
Turn on supervisor/admin commands
help
ping
Send ping to remote device
show
trace-rte Trace route packets take to remote device
_______________________Utility Commands___________________________________
batch
Store and/or run commands in batch mode
diags
Run diagnostics
exit
Exit SpectraComm IP Command Line Interface
flash
Copy flash files/select flash boot file
reboot
netstat
services
Show/Enable/Disable HTTP, SNMP, TELNET, TFTP & FTP Services
who-am-i
Show current user name
_______________________Notes______________________________________________
Commands may be abbreviated. Command text expands when space is entered.
Use "?" at any time on the command line to get help. Use CTRL-C to abort
command line. Use Up/Down arrow keys to recall previous command lines.
When you type show the screen displays help for only the show command:
scip-e1%> show?
show
076R201-000
Issue 6

A-13
Using Smart CLI
When you type show ? the screen displays Help for all of the show sub commands:
scip-e1% show ?
___________Help for "show "______________________
accounts
Show login accounts info
arp-cache
Show ARP cache entries
banner
Show login banner
config
Show configuration as batch script text commands
contact
Show contact sense parameters
directory
Show flash directory file info
etherswitch Show status of integral Ethernet Switch
frame-relay Show frame relay parameters
history
Show command history (last 20 commands)
inactivity
Show inactivity timer
interfaces
Show status and statistics for one or more interfaces
ip-route
Show ip static route table
lanx-router Show LAN extension or routing modes
log
Show log history
macl
Show media access control list; requires 1 parameter(s)
modem
Show modem parameters
reboot-count Show reboot/powerup count since last clear
services
Show HTTP, SNMP, TELNET, TFTP & FTP Services
snmp
Show SNMP Server parameters
span-tree
Show Spanning Tree parameters
supervisor
Show supervisor/admin mode
tacacs+
Show TACACS+ query parameters
e1
Show E1 parameters
term-serv
Show terminal server parameters
time
Show time service parameters
traffic
Show traffic priority parameters
version
Show system H/W and S/W status
When you type configure ? in SUPERVISOR/ADMIN mode, the screen displays all the
subcommands for the configure command.
scip-e1% configure ?
___________Help for "configure "______________________
accounts
Configure usernames and passwords
banner
Configure login banner
contact
Configure contact sense parameters
frame-relay Configure frame relay parameters
inactivity
Configure inactivity timer; requires 1 parameter(s)
interfaces
Configure interface parameters
ip-route
Configure ip static route table
lanx-router Configure LAN extension or routing mode
macl
Configure media access control list
modem
Configure modem parameters
prompt
Configure custom prompt; requires 1 parameter(s)
services
Configure HTTP, SNMP, TELNET, TFTP & FTP Services
snmp
Configure SNMP Server parameters
span-tree
Configure Spanning Tree Parameters
tacacs+
Configure TACACS+ query parameters
e1
Configure E1 parameters
term-serv
Configure terminal server parameters
time
Configure time service parameters
traffic
Configure traffic priorities
A-14

076R201-000
Issue 6
Using Smart CLI
When you type configure interfaces ? the screen displays help for that specific
subcommand:
___________Help for "configure interfaces "______________________
add-sub
Add new sub-interface; requires 1 parameter(s)
remove-sub
Remove existing sub-interface; requires 1 parameter(s)
ip-address
Configure interface IP address; requires 3 parameter(s)
delete-ip
Delete interface IP address; requires 2 parameter(s)
description
Change interface description; requires 2 parameter(s)
enable
Set admin state ON (allow xmit & recv); requires 1 parameter(s)
disable
Set admin state OFF (stop xmit & recv); requires 1 parameter(s)
link-encap
Set link encapsulation; requires 2 parameter(s)
s1-tx-clock
Set serial1 transmit clock; requires 1 parameter(s)
Parameters separated by spaces may be entered after the last subcommand on the command
line. If you do not enter all required arguments on the command line, you will be prompted for
the missing ones after pressing Enter or the carriage return.
Arguments
If a command or subcommand requires arguments, you can type the ? character after the last
subcommand to display a description of the required parameters to complete the command line.
For example:
When you type configure interfaces ip-address ? the screen will show the three
required parameters and one optional parameter used to configure an IP address for an interface:
scip-e1%> configure interfaces ip-address ?
___________Help for "configure interfaces ip-address "______________________
ip-address
Configure interface IP address; requires 3 parameter(s)
interface name (ethernet0, modem0, serialn, serialn.nnn)
IP mask (a.b.c.d)
IP broadcast address (a.b.c.d) (optional; default 255.255.255.255)
Entering a Command String

Each command string is executed by pressing the Enter key (or <cr>). The general syntax is:
command <subcommand(s)> if any
<required argument(s)> if any
Aborting a Command
Use the CTRL-C character to abort a command at any time and return to the main prompt.
076R201-000
Issue 6

A-15
Using Smart CLI
Command Short Cuts

You only have to type the minimum number of characters needed to identify a command or
subcommand to the CLI. When space or return is entered, the CLI will expand the abbreviation to
the full command name.
For example:
The full command name configure may be selected by any of the following:
scip-e1%> conf
scip-e1%> confi
scip-e1%> config
When a space is entered, all of the above strings will expand to configure. Extra spaces between
command, subcommands or arguments are ignored.
Arguments composed of strings such as interface name may be abbreviated to minimum
uniqueness. Interface names are ethernet0, modem0, serialn.nnn where n is serial
interface 0 or 1 , and nnn is a sub-interface value of 1 - 999.
The e character is sufficient to select ethernet0. The m character is sufficient to select
modem0. Typing ser0.nnn or s0.nnn is sufficient to select a sub-interface.
Command Recall
There are two ways to recall previously entered commands:
A-16
Arrow UP Recall
Use the Arrow Up key to recall previously entered commands in reverse order.
Use the backspace key to edit the command string, if needed. Press Enter to execute.
Command History Recall
Type show history to display a numbered history of the previous 20 commands.
At the command prompt, type ![##] where ## is the line number of the desired command.

076R201-000
Issue 6
Troubleshooting Communications Problems

Ethernet (LAN) Communication Problems
IP Address not set correctly in SCIP-E1.
Cables not installed.
Default Route not set when router exists.
1. Connect a VT100-compatible terminal to the CTRL port to check the IP Address and mask in
the SCIP-E1 and ensure the values is correct.
2. Perform ping to determine whether the SCIP-E1 is communicating on the network.
WAN Communication Problems
IP Address not set correctly in SCIP-E1 (if using IP Addressing on a sub-interface).
IP Address for the SCIP-E1 in the network manager not correct.
Cables not installed.
1. At the command prompt, type show f lmi to check that the serial0 interface is UP.
2. At the command prompt, type show int to check that the Line Protocol is UP on all
interfaces you intend to use.
3. At the command prompt, type show ip-route to check that you have a path for the
destination IP to route to the interface.
4. Perform ping to determine whether the SCIP-E1 is communicating on the network.
5. If ping was not successful, make sure that the link connection is established.
WEB Communication Problems
Browser not configured for accessing SCIP-E1.
Eight web management sessions already in progress.
1. At your browser, ensure that cookies are enabled.

2. Ensure that your user name and password have been entered correctly.
3. Check that SCIP-E1 has been configured with HTTP enabled.
076R201-000
Issue 6

A-17
A-18

076R201-000
Issue 6
The Best Connections in the Business

SC-IP Installation &amp; Operation

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

SC-IP Installation &amp; Operation

Uploaded by

Copyright:

Available Formats

6SHFWUD&RPP#,3#

Supports TACACS+ Authentication, Contact Sense, SNMP Traps; Provides logging

Supports MACL Security and additional TACACS+ Authentication features.

Expanded configuration default information

Additional SNMP traps, LAN-X features, modem security features.

Added/clarified cable information for Ntwk/Modem and Contact Sense interface.

SpectraComm Shelf and Enclosure Installation and Operation Manual

SpectraComm 2000 Shelf Installation and Operation Manual

SC1001/1002 Enclosure Installation and Operation Manual

SpectraComm Ethernet Switch Card Installation & Operation Manual

Operation Manuals for individual SCM-compatible elements

Refer to www.gdc.com for

-REV is the hardware revision (-000, -001, etc.)

Chapter 1: Introduction and Specifications

Chapter 2: Installation & Connections

SpectraComm IP E1 Router Card

Chapter 3: SCIP-E1 Configuration

Chapter 4: The Web Interface

Chapter 5: Additional Features

Chapter 6: Diagnostics & Monitoring

SpectraComm IP E1 Router Card

Appendix A:Application Guidelines

SpectraComm IP E1 Router Card

SpectraComm IP E1 Router Card

Scope of this Manual

SpectraComm IP E1 Router Card

Repairs must be performed by qualified service personnel only.

Never install network wiring during an electrical storm.

SpectraComm IP E1 Router Card

General DataComm, Inc.

SpectraComm IP E1 Router Card

Support Services and Training

Support Services and Training

Corporate Client Services

Factory Direct Support & Repair

General DataComm, Inc.

Telephones: 1 800 523-1737

Telephones: 1 800 523-1737

SpectraComm IP E1 Router Card

SCIP-E1 also function as a LAN-extension devices which extend a carriers

SpectraComm IP E1 as Static IP Router

SCIP-E1 as LAN-extension Device

SpectraComm IP E1 Router Card

Introduction and Specifications

Features and Benefits

Transports data at Fractional E1 up to Full E1 (2.048 Mbps) using standard E1 interface.

Synchronous AUX RS-232 interface up to 128K (with short cable).

In static router applications, SCIP-E1 provides low-cost IP connectivity to the carriers

Front Panel LEDs indicate traffic, power and test status.

Enhanced security with multi-level password protection and inactivity timers.

Scalable, high performance LAN via 10/100BASE-TX ethernet switch support.

Supports firmware (Flash) downloads via FTP or TFTP protocols.

Enable/disable modem authentication, caller ID authentication.

Streamlined configuration of multiple SCIPs via ASCII batch file upload/download.

Supports TACACS+ Authentication Protocol.

Supports E1 network alarm reporting.

Introduction and Specifications

Craft (Console) Port

SpectraComm IP E1 Router Card

Introduction and Specifications

SpectraComm IP E1 Router Card

Introduction and Specifications

Line Code Violations (LCV) alarm

Loss of Frame Alignment (LFA) alarm

SC-IP Installation & Operation

SC-IP Installation & Operation