HCLOS integration to WIN-T WO1 Joachims 45 IBCT Network Tech Tyson.g.joachims.mil@mail.mil 1(580)732-0897

HCLOS Advantages Disadvantages High Capacity: bandwidth is much higher than STT Low latency: calls connect immediately Easy to setup (using IP) Disadvantages Line of site: requires prior planning to find locations that will work

Physical Connection JNN connects to HCLOSv3 CPN connects to HCLOSv1

Connection BDE to BN FDMA: Dedicated up to 52-Mbps TDMA: Shared up to 13-Mbps Up to 34-Mbps

HCLOSv3 Shelter The IP Switch located on the curbside of the shelter is a cisco layer 2 switch. It connects the fiber from the SEP to the radio. It should have the following VLANs: 222 Management 245 From XT2R to Fortress (trusted) 246 From XT2R to Fortress (trusted) 247 From XT2R to Fortress (trusted) 345 From Fortress to Radio 1 (untrusted) 346 From Fortress to Radio 2 (untrusted) 347 From Fortress to Radio 3 (untrusted) A free IP address from the VLAN 222 should be assigned to the switch to provide remote configuration. Since VLAN 222 does not traverse the link, the IP address should come from the local network (i.e. the HCLOSv3 gets it’s IP address from the JNN’s VLAN 222 while the HCLOSv1 gets its IP address from the CPN VLAN 222. The IP Encrypter (Fortress) provides AES-128 encryption and firewall capabilities for the wireless link. This type of encryption is fine considering that NIPR and SIPR are using type 1 encryption (via TACLANE) before ever traversing the wireless link.

Logical Network Diagram HCLOSv1 Switch CPN Colorless T2R VLAN 222,245-247 Access Port Trunk Port Interface IP Address G1/0.245 10.114.32.10/30 G1/0.246 Shutdown G1/0.247 Shutdown Untrusted 345-347 Trusted 245-247 VLAN 345 HCLOSv3 Switch CPN Colorless T2R JNN Colorless T2R Access Port HCLOSv1 Switch VLAN 222,245-247 Access Port VLAN 346 Access Port VLAN 222,245-247 Trunk Port Trunk Port Access Port Interface IP Address G1/0.245 10.114.32.9/30 G1/0.246 10.114.32.13/30 G1/0.247 10.114.32.17/30 Interface IP Address G1/0.245 Shutdown G1/0.246 10.114.32.14/30 G1/0.247 Shutdown Trusted 245-247 Untrusted 345-347 Untrusted 345-347 Trusted 245-247 VLAN 347 HCLOSv1 Switch CPN Colorless T2R VLAN 222,245-247 Access Port Trunk Port Interface IP Address G1/0.245 Shutdown G1/0.246 Shutdown G1/0.247 10.114.32.18/30 Untrusted 345-347 Trusted 245-247

Interface Connections HCLOSv1 Switch CPN Colorless T2R Fa1/1 Gi1/1 Gi0/14 Interface IP Address G1/0.245 10.114.32.10/30 G1/0.246 Shutdown G1/0.247 Shutdown HCLOSv3 Switch CPN Colorless T2R JNN Colorless T2R Fa1/1 HCLOSv1 Switch Gi0/14 Fa1/2 Fa1/1 Gi1/1 Gi1/1 Gi0/14 Fa1/3 Interface IP Address G1/0.245 10.114.32.9/30 G1/0.246 10.114.32.13/30 G1/0.247 10.114.32.17/30 Interface IP Address G1/0.245 Shutdown G1/0.246 10.114.32.14/30 G1/0.247 Shutdown Trusted 245-247 Untrusted 345-347 HCLOSv1 Switch CPN Colorless T2R Gi1/1 Fa1/1 Gi0/14 Interface IP Address G1/0.245 Shutdown G1/0.246 Shutdown G1/0.247 10.114.32.18/30

Radio Timing If connected in this way, ensure that the port assignment is set to IP If it is set to IP + DATA, you will receive timing errors If one side is set to IP only and the other is set to IP + Data, traffic will not traverse the wireless link

Verifying Connectivity On the Colorless Tier 2 Router, perform a “show ospfv3 neighbor” command. You should see the distant end as a neighbor on GigabitEthernet1/0.245 (or the configured interface for the link). Seeing a neighbor listed under Tunnel 97919 also just means that there is a second way to get to the neighbor and can provide fail over in the event that one connection goes down. On the Colorless Tier 2 Router, perform a “show run | ip route” If there is a command there showing 0.0.0.0 0.0.0.0 [linkway IP address], then all traffic destined for outside the network will still traverse the local side’s STT. In the case that an STT fails completely, change the destination of the static route for another STT’s Linkway.

Troubleshooting (Fortress) To bypass the fortress, change the VLAN going to the radio to the trusted VLAN on both sides (i.e. from 345 to 245) If the connection establishes, the settings within the Fortress need to be reconfigured.

Training HCLOS can be set within 25 meters of one another with the following: Attenuators between radio and antenna Output power on radio set to 1 (Warning: if the radio is powered off and back on, it will reset to power level 7 which will burn out the distant radio)