1. HCLOS integration to WIN-T
WO1 Joachims
45 IBCT Network Tech
1(580)

2. HCLOS Advantages Disadvantages
High Capacity: bandwidth is much higher than STT
Low latency: calls connect immediately
Easy to setup (using IP)
Disadvantages
Line of site: requires prior planning to find locations that will work

3. Physical Connection
JNN connects to HCLOSv3
CPN connects to HCLOSv1

4. Connection BDE to BN FDMA: Dedicated up to 52-Mbps
TDMA: Shared up to 13-Mbps
Up to 34-Mbps

5. HCLOSv3 Shelter
The IP Switch located on the curbside of the shelter is a cisco layer 2 switch. It connects the fiber from the SEP to the radio. It should have the following VLANs: 222 Management 245 From XT2R to Fortress (trusted) 246 From XT2R to Fortress (trusted) 247 From XT2R to Fortress (trusted) 345 From Fortress to Radio 1 (untrusted) 346 From Fortress to Radio 2 (untrusted) 347 From Fortress to Radio 3 (untrusted) A free IP address from the VLAN 222 should be assigned to the switch to provide remote configuration. Since VLAN 222 does not traverse the link, the IP address should come from the local network (i.e. the HCLOSv3 gets it’s IP address from the JNN’s VLAN 222 while the HCLOSv1 gets its IP address from the CPN VLAN 222. The IP Encrypter (Fortress) provides AES-128 encryption and firewall capabilities for the wireless link. This type of encryption is fine considering that NIPR and SIPR are using type 1 encryption (via TACLANE) before ever traversing the wireless link.

6. Logical Network Diagram
HCLOSv1 Switch
CPN Colorless T2R
VLAN 222,
Access Port
Trunk Port
Interface IP Address
G1/ /30
G1/ Shutdown
G1/ Shutdown
Untrusted
Trusted
VLAN 345
HCLOSv3 Switch
CPN Colorless T2R
JNN Colorless T2R
Access Port
HCLOSv1 Switch
VLAN 222,
Access Port
VLAN 346
Access Port
VLAN 222,
Trunk Port
Trunk Port
Access Port
Interface IP Address
G1/ /30
G1/ /30
G1/ /30
Interface IP Address
G1/ Shutdown
G1/ /30
G1/ Shutdown
Trusted
Untrusted
Untrusted
Trusted
VLAN 347
HCLOSv1 Switch
CPN Colorless T2R
VLAN 222,
Access Port
Trunk Port
Interface IP Address
G1/ Shutdown
G1/ Shutdown
G1/ /30
Untrusted
Trusted

7. Interface Connections
HCLOSv1 Switch
CPN Colorless T2R
Fa1/1
Gi1/1
Gi0/14
Interface IP Address
G1/ /30
G1/ Shutdown
G1/ Shutdown
HCLOSv3 Switch
CPN Colorless T2R
JNN Colorless T2R
Fa1/1
HCLOSv1 Switch
Gi0/14
Fa1/2
Fa1/1
Gi1/1
Gi1/1
Gi0/14
Fa1/3
Interface IP Address
G1/ /30
G1/ /30
G1/ /30
Interface IP Address
G1/ Shutdown
G1/ /30
G1/ Shutdown
Trusted
Untrusted
HCLOSv1 Switch
CPN Colorless T2R
Gi1/1
Fa1/1
Gi0/14
Interface IP Address
G1/ Shutdown
G1/ Shutdown
G1/ /30

8. Radio Timing
If connected in this way, ensure that the port assignment is set to IP
If it is set to IP + DATA, you will receive timing errors
If one side is set to IP only and the other is set to IP + Data, traffic will not traverse the wireless link

9. Verifying Connectivity
On the Colorless Tier 2 Router, perform a “show ospfv3 neighbor” command.
You should see the distant end as a neighbor on GigabitEthernet1/0.245 (or the configured interface for the link).
Seeing a neighbor listed under Tunnel also just means that there is a second way to get to the neighbor and can provide fail over in the event that one connection goes down.
On the Colorless Tier 2 Router, perform a “show run | ip route”
If there is a command there showing [linkway IP address], then all traffic destined for outside the network will still traverse the local side’s STT. In the case that an STT fails completely, change the destination of the static route for another STT’s Linkway.

10. Troubleshooting (Fortress)
To bypass the fortress, change the VLAN going to the radio to the trusted VLAN on both sides (i.e. from 345 to 245)
If the connection establishes, the settings within the Fortress need to be reconfigured.

11. Training
HCLOS can be set within 25 meters of one another with the following:
Attenuators between radio and antenna
Output power on radio set to 1 (Warning: if the radio is powered off and back on, it will reset to power level 7 which will burn out the distant radio)