ATTACH06_FE_Training_Instructor_Guide_141216_v5.pdf

Pocket J Fixed Element 2.3.1

Operations Training Instructor Guide V5

16 December 2014

Prepared by:

Booz Allen Hamilton Engineering Services, LLC 1300 Thomas Drive

Panama City Beach, FL 32408

DISTRIBUTION STATEMENT C: Distribution authorized to U.S. Government Agencies and their contractors for administrative/operational use (December 2014). Other requests for this document shall be referred to Air Force Life Cycle Management Center (AFLCMC).

DESTRUCTION NOTICE: Destroy by any method that will prevent disclosure of contents or reconstruction of the document.

POCKET J FIXED ELEMENT OPERATIONS TRAINING INSTRUCTOR GUIDE

ii

CONTENTS

Acronym List ................................................................................................................................. vi

1 INTRODUCTION

2 FE EQUIPMENT RACK

Visual Verification Equipment Rack

Power on Equipment Rack

Power on Control Desk

Logging onto Local Equipment

3 FE SYSTEM SOFTWARE

FE Red REMS Status Check

FE Black REMS Status Check

4 RE SYSTEM SOFTWARE

RE Red REMS Status Check

RE Black REMS Status Check

5 JRE CLIENT APPLICATION

Establishing Required Data Links

JRE Preconditions for Building Data Links

6 BUILDING DATA LINKS

FE JREAP C Data Link as UDP/IP Unicast

FE JREAP B BLOS Link (STE) to Pocket J RE Data Link

RE JREAP-C Data Link as UDP/IP Unicast

FE JREAP A Data Link as Gateway Unit PRC-117 .................. Error! Bookmark not defined.

RE JREAP A Data Link as Network Participant

Building a SADL Link ............................................................... Error! Bookmark not defined.

JRE to MIDS LVT Data Link

7 JRE CONFIGURATION

JRE Data Link Connections/Data Forwarding .......................... Error! Bookmark not defined.

Viewing JRE Data Links and Status

Editing Data Link

Resetting Active Data Links

Deleting Data Links

Establishing a Data Link Connection

JREAP C UDP/IP

JREAP B STE to STE iii

JREAP A

Call Setup

Call Tear Down

SADL

MIDS/LVT Link 16

Loading IDL Files .................................................................. Error! Bookmark not defined.

Editing IDL Files

8 REMS DISPLAY BOARD

9 PRIME APPLICATION ..................................................... Error! Bookmark not defined.

10 ROUTER

Establishing Communication Circuits

Communication Path Routing Methods

Automatic Reroute

Manual Reroute

RE Handover

11 CRYPTO LOADING PROCEDURES

KG-250 Crypto Loading

Loading SAASM GPS Crypto

MIDS LVT Zeroize Key Segments ........................................... Error! Bookmark not defined.

Transmit RE Traffic Encryption Key (TEK) Materials

12 VOIP PHONE

Placing a Conference Call

13 STE

14 TVT-DAP ........................................................................... Error! Bookmark not defined.

Formatting DAP UDO Disks

DAP Recording

TVT Playback

15 REMOTE RE EQUIPMENT SHUTDOWN

16 LOCAL EQUIPMENT SHUTDOWN

Equipment Rack Shutdown

Control Desk Equipment Shutdown

17 END OF COURSE TEST

iv

LIST OF ILLUSTRATIONS

Figure 1: FE Equipment Rack Figure 2: Red REMS Remote Monitor Figure 3: FE Red REMOCS Figure 4: Combined Link Status Figure 5: TVT DAP Display Figure 6: APC UPS Figure 7: SAASM GPS Figure 8: KG-250 Figure 9: DAP Status Figure 10: VoIP Phone Figure 11: CISCO Catalyst Switch Figure 12: DDU (RX) Display Figure 13: MITEL 5000 PBX Display Figure 14: FE Link Status Figure 15: FE Link Status PuTTy Figure 16: Black REMS Remote Monitor Figure 17: FE Black REMOCS Figure 18: FE CISCO 3845 Router Figure 19: KG-250 SIPRNet Figure 20: DDU TX Display Figure 21: RE Red LOMOCS Figure 22: RE APC UPS Figure 23: RE SAASM GPS Figure 24: RE Link Status Figure 25: RE Link Status with PuTTy Figure 26: RE KG-250 Figure 27: RE VoIP Phone Figure 28: RE Environmental Monitor Figure 29: RE RCMS Figure 30: RE PDU Figure 31: RE MCU Figure 32: RE PRC-117 Figure 33: RE SADL Control Display Figure 34: RE SADL Monitor Display Figure 35: RE Black LOMOCS Figure 36: RE Cisco 2900 Series Router Figure 37: SIPRNet KG-250 Figure 38: FE JRE Client Application Figure 39: RE JRE Client Application Figure 40: JRE Client Link Status Figure 41: JREAP B Figure 42: JREAP A Figure 43: Building a SADL Link Figure 44: Building a Link 16/Platform J Figure 45: Link Connections v

Figure 46: NDL Quick Edit Window Figure 47: Terminal Manager Figure 48: REMS Display Board Figure 49: PRIME Figure 50: DMD Power Station 7.0 Figure 51: DMD Load Outstation Figure 52: TVT DAP Computer

LIST OF TABLES

Table 1: FE Equipment Rack Table 2: Operator Verification Checklist Table 3: FE Required Data Links Table 4: RE Required Data Links Table 5: Link Status Indicator Table 6: 3800 Series Router Network Status Information Table 7: Router Connection Methods vi

Acronym List

AA-V Authentication Algorithm Version ACT Activity ADS Air Defense Sector APC American Power Conversion ARMS Amalgamated Remote Management System

BLOS

C2 Command and Control COMSEC Communications Security CONR Continental NORAD Region CPU Central Processing Unit CV Crypto Variable

DAMA Demand Assigned Multiple Access DAP Data Archive Playback DDU Directed Data Unit DMD Data Management Device

EEPROM Electronically Erasable Programmable Read-Only Memory ETR External Time Reference

FE Fixed Element FRACT1 Fractional T-1

3G Third Generation GPS Global Positioning System GUI Graphical User Interface GW Gateway

IDL Initialization Design Load IPF Interference Protection Feature IP Internet Protocol ISDN Integrated Services Digital Network

JICO Joint Interface Control Officer JRE Joint Range Extension JREAP Joint Range Extension Application Protocol vii

KAB Keep Alive Battery KEK Key Encryption Key KG Key Generator KVM Keyboard, Video, Mouse

LAN Local Area Network LCD Liquid Crystal Display LED Light Emitting Diode LIP Link 16 Interface Process LOMOCS Local Monitoring and Control System LRU Line Replaceable Unit LVT Low Volume Terminal

MCU MIDS Control Unit MIDS Multi–Functional Information Distribution System

NORAD North American Air Defense NTP Network Time Protocol

OPTASK Operational Tasking

PBX Private Branch Exchange PDU Power Distribution Unit PLT-J Platform J POTS Plain Old Telephone System PPLI Precise Participant Location and Identification PRC Portable Radio Component PRIME Pro-Logic Instant Message Exchange PuTTy Popular Secure Socket Shell and Telnet Client PWR Power

RAM Random Access Memory RCMS Remote Cryptographic Management System RE Remote Element REMOCS Remote Monitoring and Control System REMS Remote Equipment Management System RFA Radio Frequency Authorization RX Receive

SAASM Selective Availability Anti-Spoofing Module viii

SADL Situation Awareness Data Link SAT Satellite SBC Single Board Computers SKL Simple Key Loader STE Secure Telephone Equipment STJ Satellite Tactical Data Link J SYS System

TCP Transmission Control Protocol TDL Tactical Data Link TEK Traffic Encryption Key TFOM Time Figure of Merit TM Technical Manual TVT Tactical Visualization Toolkit TX Transmit

UDO Ultra Density Optical UDP User Datagram Protocol UPS Uninterruptable Power Supply USB Universal Serial Bus

VINE ViaSat Inline Network Encryptor Manager VoIP Voice over Internet Protocol VPN Virtual Private Network

1 INTRODUCTION

The Pocket J Fixed Element (FE) 2.3.1 Operations Training Instructor Guide, designed for use with the Pocket J Training program, includes individual component user guides, Microsoft PowerPoint presentations, and hands-on training. This guide will assist operators with conducting routine operations on the Pocket J FE System.

Additional Information Provided:

Electronic Copies of the Training Guides on CD PowerPoint Presentations Pocket J Technical Manual (TM) for both the FE and the Remote Element (RE) American Power Conversion (APC) Uninterruptable Power Supply (UPS) User Manual AN/PRC-117 Manual Cisco 3800 Series Router Manual Joint Range Extension (JRE) Manual Key Generator (KG) 250 Manual MITEL Voice over Internet Protocol (VoIP) Manual Multi-Functional Information Distribution System (MIDS) Low Volume Terminal (LVT)

Manual Secure Telephone Equipment (STE) Manual Selective Availability/Anti-Spoofing Module (SAASM) Global Positioning System

(GPS) Manual Situation Awareness Data Link (SADL) Manual Simple Key Loader (SKL) Manual ViaSat Amalgamated Remote Management System (ARMS)/Link 16 Interface Process

(LIP) Manual Weathergoose (Environmental Monitor) Manual

The following sections make up this guide:

FE Equipment Introduction FE System Checkout and software RE Equipment Introduction RE System Checkout and software

JRE

Pro-Logic Instant Message Exchange (PRIME) Communications Crypto Loading Procedures Shut Down Procedures for FE and RE

2 FE EQUIPMENT RACK

Figure 1 provides an illustration of the FE Equipment Rack. Table 1 explains the components contained within the FE Equipment Rack.

Figure 1: FE Equipment Rack

Visual Verification Equipment Rack

Refer to Figure 1 for an illustration of the equipment listed in Table 1. The No. column in Table 1 refers to the number callouts listed in Figure 1.

Table 1: FE Equipment Rack No. LRU Description 1 Directed Data Unit

(DDU) Transmit (TX)

There is one DDU in the upper Equipment Rack. It provides an Ethernet/Fiber-Optic connection and converts it into a Fiber- Optic/Ethernet connection for transferring data between the Black and Red rack partitions. The selector switch on the front of the unit determines operational mode.

2 Remote Monitoring and Control System (REMOCS) (Black) Server

The REMOCS (Black) Workstation monitors and/or controls Black components at the FE. It also monitors and/or controls RE communication paths and Black equipment at assigned RE sites.

Software on this computer includes Remote Equipment Management System (REMS) and other administrative programs.

3 External Hard Drive (Red)

Used to back up and store all audit logs from the Red REMOCS.

4 Cisco 3800 Series Router Upper/Lower

The two Cisco 3800 Series routers establish and maintain a connection between Link 16 Tactical Data Link (TDL), voice, and control data to and from RE and FE, using various Government-furnished communication circuits. It provides flexible routing and low-density switching, creating a Local Area Network (LAN).

5 DDU Receive (RX) There is one DDU in the lower Equipment Rack. This provides an Ethernet/Fiber-Optic connection and converts it into a Fiber- Optic/Ethernet connection for transferring data between the Black and Red rack partitions. The selector switch on the front of the unit determines operational mode.

6 External Hard Drive (Black)

Used to back up and store all audit logs from the Black

REMOCS.

7 KG-250 The KG-250 is an encryption and routing device. The RE KG- 250 and FE KG-250 establish a secure Virtual Private Network (VPN) between the RE and the FE. These devices are managed locally through FE REMOCS Workstations. The Red Equipment rack contains two KG-250s. One supports FE to FE and FE to RE VPN connections. The other KG250 is not currently used.

8 Tactical Visualization Toolkit (TVT) Server

The TVT server displays Joint Range Extension Application Protocol (JREAP)-C data. As a result, the TVT server provides Situational Awareness data, quick-look analysis, and post-mission assessment on data link performance and interoperability objectives. The TVT Server captures information on the Data Archive Playback (DAP) Drive inside the Rack, which plays back on the TVT Playback laptop.

9 REMOCS (Red)

Workstation The REMOCS (Red) Workstation monitors and/or controls Red components at the FE. At assigned RE sites, it monitors and/or controls Red equipment and Line Replaceable Unit(s) (LRU) for that site. The Red REMOCS (Red) Workstation runs REMS, ARMS, JRE Client, ViaSat Inline Network Encryptor Manager (VINE), Data Management Device (DMD), PRIME, Popular Secure Socket Shell and Telnet Client (PuTTy), and administrative software.

10 Keyboard, Video, Mouse (KVM) Switch

The KVM allows one keyboard, video display, and mouse to control and monitor the FE REMOCS (Red) Workstation, TVT/DAP computer, upper and lower JRE client Single Board Computers (SBCs), and upper and lower JRE server SBCs.

11 Upper JRE 3G The upper JRE 3G serves as the Gateway between the Northern REs and Command and Control (C2) systems. The JRE 3G has two SBCs. One is the server computer and the other is the client computer. The server provides data link management.

INSTRUCTOR NOTE: Expand on the 3G SBCs and explain that there are two ways to access them—through PuTTy or

KVM.

12 Lower JRE 3G The lower JRE 3G serves as the Gateway between the Southern REs and C2 systems. The JRE 3G has two SBCs. One is the server computer and the other is the client computer. The server provides data link management.

13 SAASM GPS The SAASM GPS provides a high-accuracy time source to all LRUs.

14 MITEL 5000 Private Branch Exchange

(PBX)

The PBX is a programmable digital, voice/data, hybrid telephone system that provides secure VoIP communications between the FE and RE as well as between RE units.

15 Rackmount UPS The UPS powers the entire rack. In the event of a loss of power, power surge, or power line frequency disturbance, the UPS internally disconnects equipment from the utility line and provides continuous, but limited, power supply via an internal battery until the utility line returns to safe levels or the battery fully discharges.

16 KVM Extenders KVM Extenders connect to the REMOCS (Black) Workstation to extend the keyboard, monitor, and mouse functions. Another KVM Extender connects to the KVM Switch, which connects to the REMOCS (Red) Workstation, TVT/DAP Server, upper and lower JRE Client SBC, and upper and lower JRE 3rd Generation (3G) Gateway (GW) SBCs.

17 DAP Drive There are two DAP drives delivered with the system. Each DAP drive is supplied with at least one, two-sided 60 GB disc. The DAP drive inside the rack functions with the rackmount TVT.

This DAP drive provides the ability to archive track data to Ultra Density Optical (UDO) disks. The DAP drive located at the Control Desk is identical to the one inside the Rack. This DAP drive is connected to the TVT Playback laptop to facilitate playback of recordings.

Power on Equipment Rack

NOTE: Due to operational restrictions, an initial start position during training is not always possible; however, the Instructor will explain all steps.

Open front Equipment Rack doors by pulling vertical latch outward and turning latch 45 degrees clockwise.

NOTE: During start-up, high Central Processing Unit (CPU) utilization will be encountered.

As a result, complete power on of the rack can take up to 5 minutes.

To power on rackmount UPS, press Test button on front panel of UPS located at bottom of the Equipment Rack.

Switch Power switch to both Cisco 3800 series routers to ON position.

NOTE: Wait until the Activity (ACT) Light Emitting Diode (LED) on the front of both Cisco 3800 series routers flashes green before continuing. This could take up to 5 minutes.

INSTRUCTOR NOTE: Explain that if the ACT light is not flashing, connectivity problems will arise.

Switch Power switch to upper and lower DDUs to ON position.

If turned off, switch Main Power switch on upper and lower JRE 3G chassis to ON position.

Press and release power button on REMOCS (Red) and REMOCS (Black), and TVT

Computers. A Green LED light will illuminate indicating power is applied.

If PBX does not automatically power on and LED displays alert “Universal Serial Bus

(USB) Failure,” select Yes. PBX will reboot and execute system check. After system check, LED should display “MITEL 5000.”

Press Playback DAP Drive power button to on.

Power on Control Desk

NOTE: Not all FE sites utilize the recommended set up of the Control Desk. Although the set up may be different, functionality of the software is the same. Items included with the Control Desk are a UPS, Red Monitor, Black Monitor, Display Board, KVM switches, VoIP Phone, and

STE and REMOCS Speakers. If a site chooses not to use the recommended Control Desk setup, the system will be set up to ensure no change in system functionality.

Press Control Desk UPS power button to on (if used).

Verify Control Desk Power Strip is on (if used).

Press TVT Playback laptop power button to on (if used).

Using the Operator Verification Checklist located in Table 2, ensure all LRUs are on.

NOTE: If any of the following items are not functioning properly, refer to Corrective Actions located in Chapter 4 in the FE Operator Technical Manual.

Table 2: Operator Verification Checklist

LRU Items to Verify Notes/Comments

Lower Rack Rackmount UPS Online LED indicator on UPS stops blinking and turns solid green. Column of Battery Charge LEDs illuminates (indicating battery charge condition).

Load LEDs illuminate, indicating load on UPS.

All Battery Charge LEDs will illuminate when batteries are fully charged.

PBX After 60 seconds, Liquid Crystal Display (LCD) screen remains illuminated.

LED displays MITEL 5000

SAASM GPS Power and Online indicators illuminate green.

It may take 10–15 minutes for SAASM GPS to lock onto satellites.

Alarm/Fault may flash red until

TIMELOCK.

REF Lock and Ready illuminates steady green after TIMELOCK.

JRE 3G Server (2) Power LED illuminates green.

Fan Fail indicator illuminates green.

Overtemp indicator illuminates green.

Hard Drives have steady blue “0”.

Red GPS Status LEDs blinks.

KG-250 and SIPR

KG-250

After 60 seconds, Power (PWR)/READY LED remain illuminated green.

SIPR KG-250 not used

Blower Airflow is present in the cabinet. Feel for airflow in upper and lower rack

DAP Drive Green LED illuminates. Green LED illuminates when a UDO disk is inserted in the drive. If no disk inserted, light will not illuminate.

LRU Items to Verify Notes/Comments

KVM Switch Red Power LED illuminates.

RX DDU RX LED illuminates Green; TX LED illuminates Red.

TVT/DAP Green LAN activity LED illuminates.

Green HD LED illuminates.

Green Power LED illuminates.

REMOCS (Red) Green LAN activity LED illuminates.

Upper Rack REMOCS (Black) Green LAN activity LED illuminates.

3800 Series router (2) System (SYS) LED remains illuminated green. SYS/PWR LED illuminates green. Green ACT LED flashes.

Blower Airflow is present in the cabinet. Feel for airflow in upper and lower rack

TX DDU TX LED Green; RX LED Red.

Control Desk VoIP Phone Extension number, time, and date dis-play on LCD.

STE(2) Lift handset to verify dial tone.

Logging onto Local Equipment

From REMOCS (Black) Workstation, log in as pocketj user (password is site specific).

Windows Desktop displays. Within 1 minute, the REMS Remote Monitor (User) screen displays.

NOTE: Double-click REMS icon on the desktop for the REMOCS (Red and Black) if REMS Software does not automatically launch.

From REMOCS (Red) Workstation:

Press Ctrl + Alt + m to activate KVM Menu, and select REMOCS (Red).

Press Enter.

Log in as pocketj user (password is site specific). Windows Desktop displays. The following will automatically launch:

NOTE: Upon initial start, programs can take up to 2 minutes to boot.

PRIME

REMS

Display Board JRE Client.

Press Ctrl + Alt + m to activate KVM Menu, and select JRE Upper Server.

Press Enter.

Log in as operator (password is site specific).

Select Agree to acknowledge license agreement. Solaris Desktop will display.

NOTE: Occasionally the JRE 3G Servers do not boot when power is applied. When this occurs, hold the server side reset button on the front of the JRE 3G chassis for 12 seconds to manually reboot the server.

Repeat above steps for JRE Lower Server.

Press Ctrl + Alt + m to activate KVM Menu, and select TVT DAP.

Press Enter.

Log in as pocketj user (password is site specific). Windows Desktop displays. The following will automatically launch:

TVT Application DAP Capture Application

NOTE: If TVT and DAP Software do not automatically launch, double-click TVT and DAP icons on the Workstation desktop.

At TVT Playback laptop, log in as pocketj user (password is site specific). Windows

Desktop displays. The following will automatically launch:

TVT Application DAP Playback Application

NOTE: Not all sites use the TVT Playback laptop; however, in the event the capability is used, follow the steps below.

3 FE SYSTEM SOFTWARE

The instructions in this section detail the operation and functionality of the software as delivered with the Pocket J System.

FE Red REMS Status Check

REMS Software is operated from the REMOCS (Red) and REMOCS (Black) Workstations.

This application monitors and controls equipment at the FE and RE sites. This section outlines monitoring of the FE Red Equipment.

From REMOCS (Red) Workstation, press Ctrl + Alt + m, and select REMOCS (Red).

Select + beside REMS Remote Monitor as shown in Figure 2. This allows FE operator to verify monitored sites, if not already expanded.

Figure 2: Red REMS Remote Monitor

From sidebar menu tree, select + beside the FE site name to expand monitored equipment as shown in Figure 2.

NOTE: The sidebar menu tree of the REMS Remote Monitor (user) Screen shows equipment at the FE and RE sites, once expanded. A malfunctioning LRU or error status will cause an audible alert and two visual alerts—one at the FE and one at the RE. The visual alerts consist of a white x inside a red circle in the sidebar menu tree and the REMS Remote Monitor Alert section.

NOTE: If any item differs from the following software checks, refer to Corrective Actions within the Pocket J FE Technical Manual, or call the Pocket J Help Desk.

INSTRUCTOR NOTE: Ensure student knows that the X means REMS cannot communicate with the LRU; the X actually consist of a white x inside a red circle, but is commonly referred to as “red X”.

Select Red REMOCS.

Verify Average CPU Usage (%) is below 20% and Space Used (%) is below 60% as shown in Figure 3.

Figure 3: FE Red REMOCS

NOTE: CPU running at a higher capacity than 20% and space utilized at greater than 60% can slow the computer processes causing the computer to perform slowly and interfere with the Pocket J mission.

Select Combined Link Status as shown in Figure 4.

Verify that RE column in Combined Link Status lists all REs and FEs that connect to FE and status in Active Column is correct.

Verify Satellite (SAT) J, SADL, and MIDS Radio link status for REs is accurate.

o Green/Active, Red/Inactive, Gray/Off

Figure 4: Combined Link Status

Select TVT DAP.

Verify Average CPU Usage (%) is below 20% and Space Used (%) is below 60% as shown in Figure 5.

Figure 5: TVT DAP Display

Pocket J mission.

Select UPS.

Verify UPS Temperature is below 110 (yellow line), Battery Capacity is 100%, Amperage is between 2 and 12, and Input Voltage is between 110 and 123 as shown in Figure 6.

Figure 6: APC UPS

INSTRUCTOR NOTE: Battery capacity should always be at 100% unless running on battery or charging.

Select SAASM GPS as shown in Figure 7.

Verify in Position section that proper Latitude and Longitude display.

Verify in TIME section, upper right rectangle reads Locked and Time Figure of Merit

(TFOM) is 3 or 4, and Network Time Protocol (NTP) Service is Enabled.

Verify in Satellite Signal Strength (dB) section, there are at least three satellites with green bars. Satellite strength will normally vary and change over time.

Figure 7: SAASM GPS

To select status of KG-250, select KG-250 from left tree menu. Display screen will be blank, monitoring status only.

From Tools menu in upper left corner, select KG-250. A new page will open. Select Continue to website.

A new window will open with log in page for the KG-250 as shown in Figure 8.

Close KG250 window.

Figure 8: KG-250

Select DAP.

Monitor UDO disk storage capacity and Capture rate as shown in Figure 9.

Verify UDO Storage Primary and Secondary Space Used (%) are below 75%. If above 75%, replace the UDO disk with a new one and store full disk in accordance with local procedures.

Figure 9: DAP Status

NOTE: Once a disk has been inserted into the Pocket J System, it is classified.

NOTE: The storage limit is set to 75% to allow the operators enough time to switch out the disk.

This will ensure that the mission is not affected by maxing out these resources. Network throughput will only change during DAP Recording.

Select VoIP Phone icon in sidebar menu tree. A gray screen displays, and no additional information will be available.

Monitor VoIP Phone for connectivity only as shown in Figure 10. A visual and audible alert indicates a lack of connectivity.

Figure 10: VoIP Phone

Select Cisco Catalyst Switch icon in sidebar menu tree. A gray screen displays, and no additional information will be available.

Monitor Cisco Catalyst switch for connectivity only as shown in Figure 11. Visual and audible alerts indicate a lack of connectivity.

Figure 11: CISCO Catalyst Switch

Select DDU (RX) icon in sidebar menu tree. A gray screen displays, and no additional information is available.

Monitor DDU (RX) for connectivity only as shown in Figure 12. Visual and audible alerts indicate a lack of connectivity.

Figure 12: DDU (RX) Display

Select MITEL 5000 PBX icon in sidebar menu tree. A gray screen displays, and no additional information is available.

Monitor MITEL 5000 PBX for connectivity only as shown in Figure 13. Visual and audible alerts indicate a lack of connectivity.

Figure 13: MITEL 5000 PBX Display

To check JRE 3G Server Status, select Link Status as shown in Figure 14.

JRE section shows status of data links built on server and allows user to turn data links on/off.

JRE section shows status of data links built on server and allows user to turn data links on/off. In Mode column, green means link is on, gray means link is off.

In State column, green means on and receiving messages, red means link is on but not receiving messages, gray means link is off, and yellow indicates receive errors.

Server Status section shows Active if REMS Software is connected to JRE 3G Server.

Verify Server Status reads Active.

Verify Launch PuTTy to JRE and Launch JRE Client buttons are available.

o Terminal Status section’s indicators will be gray for FE.

Select Link Status Lower and perform same checks.

Figure 14: FE Link Status

Select Launch PuTTy as shown in Figure 15.

o PuTTy allows operator to interact with JRE Server without direct access. Server can be turned off and reset through PuTTy.

o Close PuTTy.

Figure 15: FE Link Status PuTTy

FE Black REMS Status Check

This application is used to monitor and control equipment at the FE and RE sites. This section outlines monitoring of the FE Black Equipment.

Select + beside REMS Remote Monitor as shown in Figure 16. This will allow FE operator to verify monitored sites.

From sidebar menu tree, select + beside local FE site name to expand equipment being monitored.

Figure 16: Black REMS Remote Monitor

NOTE: The sidebar menu tree of the REMS Remote Monitor (user) Screen shows equipment at the FE and RE sites, once expanded. A malfunctioning LRU or error status will cause an audible alert and two visual alerts—one at the FE and one at the RE. The visual alerts consist of a white x inside a red circle in the sidebar menu tree and the REMS Remote Monitor Alert section.

Select Black REMOCS as shown in Figure 17.

Verify Average CPU Usage (%) is below 20% and Space Used (%) is below 60%.

Figure 17: FE Black REMOCS

Pocket J mission.

To monitor Network Status and Throughput, select Cisco 3845 Router of choice as shown in Figure 18.

o The three different communication circuits that are available are Fractional T-1

(FRACT1), Integrated Services Digital Network (ISDN), or Plain Old Telephone System (POTS). Currently, SIPRNet is not available.

Figure 18: FE Cisco 3845 Router

NOTE: Router 1 is used for daily operations and Router 2 is used for expansion operations.

INSTRUCTOR NOTE: Explain that the Cisco Router automatically selects the best available communication line with Automatic Reroute enabled.

Select KG-250 (SIPRNet).

Monitor KG-250 SIPRNet for connectivity only as shown in Figure 19. Visual and audible alerts indicate a lack of connectivity.

Figure 19: KG-250 SIPRNet

Monitor DDU (TX) for connectivity only as shown in Figure 20.

Visual and audible alerts indicate a lack of connectivity.

Figure 20: DDU TX Display

4 RE SYSTEM SOFTWARE

When delivered, the RE system has all required software installed and configured for use. The instructions in this section detail the monitoring, operation, and functionality of software remotely controlled from the FE location.

RE Red REMS Status Check

The RE REMS Software is operated from the REMOCS (Red) and REMOCS (Black) Workstations located at the FE site. This application is used to monitor and control equipment at the FE and RE sites. This section outlines monitoring of the RE Red Equipment.

NOTE: The sidebar menu tree of the REMS Remote Monitor (user) Screen shows equipment at the FE and RE sites, once expanded. A malfunctioning LRU or error status will cause an audible alert and two visual alerts—one at the FE and one at the RE. The visual alerts consist of a white x inside a red circle in the sidebar menu tree and the REMS Remote Monitor Alert section.

Press Ctrl + Alt + m, and select REMOCS (Red).

Select + beside REMS Remote Monitor as shown in Figure 2. This will allow FE operator to verify monitored sites.

Select + next to the RE site that is being viewed.

To view equipment status, highlight equipment name.

From monitored RE site, select Red Local Monitoring and Control System

(LOMOCS).

Verify Avg CPU Usage (%) is below 20% and Space Used (%) is below 60% as shown in Figure 21.

Figure 21: RE Red LOMOCS

Pocket J mission.

Select UPS.

Verify UPS Temperature is below 110 (yellow line), Battery Capacity is 100%, Amperage is between 2 and 12, and Input Voltage is between 110 and 123 as shown in Figure 22.

Figure 22: RE APC UPS

To check SAASM GPS status, select SAASM GPS as shown in Figure 23.

Verify in Position section that proper Latitude and Longitude display.

Verify in TIME section, upper right rectangle reads Locked and TFOM is 3 or 4, and

NTP Service is Enabled.

Verify in the Satellite Signal Strength (dB) section, there are at least three satellites with green bars. Satellite strength will normally vary and change over time.

Figure 23: RE SAASM GPS

INSTRUCTOR NOTE: LOCKED status is required for the one PPS to be available to the SADL and MIDS radios.

To check JRE 3G Server Status, select Link Status as shown in Figure 24.

JRE section shows status of data links built on server and allows user to turn data links on/off.

JRE section shows status of data links built on server and allows user to turn data links on/off. In Mode column, green means link is on and gray means link is off.

In State column, green means on and receiving messages, red means link is on but not receiving messages, and gray means link is off and yellow indicates receive errors.

Server Status section shows Active if REMS Software is connected to the JRE 3G Server.

Verify that Server Status reads Active.

Verify Launch PuTTy to JRE and Launch JRE Client buttons are available.

Figure 24: RE Link Status

Select Launch PuTTy.

As shown in Figure 25, PuTTy allows RE operator to interact with the JRE 3G without accessing the actual Server. The server can be turned off and reset through PuTTy.

Close PuTTy.

Figure 25: RE Link Status with PuTTy

Select KG-250 from left tree menu. The display screen will be blank, monitoring status only.

From Tools menu in upper left corner, select KG-250. A new page will open. Select Continue to website.

A new window will open with log in page for the KG-250 as shown in Figure 26.

Close KG250 window.

Figure 26: RE KG-250

Select VoIP.

Monitor VoIP Phone for connectivity only as shown in Figure 27. Visual and audible alerts indicate a lack of connectivity.

Figure 27: RE VoIP Phone

To view status of Relative Humidity, Relative Air Flow, External Air Flow, Cooling Fan, and Temperature, select Environmental Monitor icon in sidebar menu tree.

Verify all indicators are illuminated green as shown in Figure 28.

Figure 28: RE Environmental Monitor

NOTE: The Cooling Fan measures dbs, not noise. If the radio power is off, and there is low-level noise near the system, the Cooling Fan may turn red.

Select Remote Cryptographic Management System (RCMS).

in Figure 29.

Figure 29: RE RCMS

Pocket J mission.

To monitor Power Distribution Unit (PDU) Load Status, Outlet Status, and Outlet Controls, select PDU icon in the sidebar menu tree as shown in Figure 30.

o Outlet Status: A powered outlet illuminates green; an unpowered outlet is gray.

The load status shows amperage draw and threshold for PDU overload.

o Updates: The screen status refreshes on a periodic basis. For an instant refresh, the operator may select the Refresh button.

o Outlet Controls: To power on, off, or reboot all LRUs, select On Immediate, Off Immediate or Reboot in drop-down menu, and select Apply to all Outlets and choose Apply.

Figure 30: RE PDU

INSTRUCTOR NOTE: Select ON or STANDBY in the MIDS Control Unit (MCU) MIDS Power Control before shutting down the system or turning the LVT-II outlet off to avoid zeroizing the MIDS/LVT crypto.

To monitor MIDS Power Control, Radio Rack Security, MIDS Crypto Zeroize, and Real

Time Status, select MCU icon in sidebar menu tree.

As shown in Figure 31, MCU status screen displays and shows the following:

o MIDS Power Control allows the operator to change status between On, Off, and Standby.

o MIDS Crypto Zeroize allows the operator to zeroize by choosing ARM Zeroize, then selecting Zeroize.

o By selecting the Security Bypass in Radio rack Security, the operator can open the rack doors without losing crypto.

o Real Time Status shows status of MIDS Power Control and Radio rack Security.

Figure 31: RE MCU

NOTE: The MCU hardware should always remain in Remote while the LVT radio will always remain in Standby.

To monitor PRC-117 Demand Assigned Multiple Access (DAMA), Battery Graphs, PRC- 117 Remote Control Status, Satellite, and Call status, select PRC-117 icon in sidebar menu tree.

As shown in Figure 32, the PRC-117 status screen displays and shows the following:

o When the PRC-117 is properly working, the status reads “DAMA”. If the PRC-

117 radio is not working properly, the status reads “Not in DAMA”.

o When the PRC-117 is in DAMA mode, this section shows the following information displayed from the Radio.

In the Battery section, under Battery Voltage, green indicates normal operating conditions. Yellow or red indicate battery replacement required.

Hub Status should read Nominal.

Remote Control Status shows ability to perform remote control function based on settings on the PRC-117 Radio.

Satellite indicates an established satellite connection.

Configure button loads a configuration file into PRC-117 Radio from FE location.

o When Radio is not in DAMA mode, this section is blank.

Figure 32: RE PRC-117

To monitor SADL Radio status, select desired RE site SADL 11 Radio icon in sidebar menu tree.

SADL 11 status screen displays.

o There are two tabs (the Control tab and the Monitor tab), each containing unique information:

Select Control tab to Configure Precise Participant Location and Identification (PPLI), enter parameters required to initialize, select, and enable/disable External Time Reference (ETR) Capable value, and Initialize the SADL Radio as shown in Figure 33.

o Once the Initialize button is selected, packet information will begin to scroll, indicating an established connection with the SADL Radio.

o Zeroize allows operator to zeroize by choosing Arm and selecting Zeroize.

o A green box showing “Connected” indicates REMS has communication ability with the radio. A red box showing “Disconnected” indicates lack of communication between REMS and SADL Radio.

Figure 33: RE SADL Control Display

NOTE: All SADL Parameters are in the Operational Tasking (OPTASK) Link.

INSTRUCTOR NOTE: Explain that the SADL Link Status will remain red until a SADL aircraft flies into the pocket.

Select Monitor tab as shown in Figure 34 to view JREAP-C Link Status, SADL Link

Status, and monitor Keep Alive Battery (KAB).

Figure 34: RE SADL Monitor Display

NOTE: The SADL will show a red status until a Link Participant enters the gateway.

RE Black REMS Status Check

This application is used to monitor and control equipment at the FE and RE sites. This section outlines monitoring of the RE Black Equipment.

Select + beside Black REMS Remote Monitor. This will allow the FE operator to verify monitored sites.

From sidebar menu tree, select + beside RE site name to expand equipment being monitored.

NOTE: The sidebar menu tree of the REMS Remote Monitor (user) Screen shows equipment at the FE and RE sites, once expanded. A malfunctioning LRU or error status will cause an audible alert and two visual alerts—one at the FE and one at the RE. The visual alerts consist of a white “x” inside a red circle in the sidebar menu tree and the REMS Remote Monitor Alert section.

Select RE Black LOMOCS.

in Figure 35.

Figure 35: RE Black LOMOCS

Pocket J mission.

To monitor traffic, connection type, and monitored ports of the router, select CISCO 2911 Router as shown in Figure 36. The three communication paths available are FRACT1, ISDN and POTS.

Pocket J Fixed Element Operations Training Instructor Guide

Figure 36: RE Cisco 2900 Series Router

Select KG-250 SIPRNet icon from sidebar menu tree as shown in Figure 37.

No status screen will display. Monitor KG-250 Black side for connectivity only.

Figure 37: SIPRNet KG-250

5 JRE CLIENT APPLICATION

The JRE Client Application is the primary user interface for the JRE 3G. This application provides a Graphical User Interface (GUI) for configuring the JRE 3G Server. The JRE Client Application is used to configure data links between the JRE 3G Servers, REMS, and equipment such as the SADL Radio and MIDS LVT securely. In addition, this application provides routing, filtering, and processing of Link 16 TDL J Series messages. The interface is used to check link status, manage data forwarding, apply filters, view situational awareness, send and receive chat messages, view link and system status, control Link 16 terminals, monitor Link 16 terminal status, modify Link 16 terminal Initialization Design Load (IDL) and save specific settings. As a GUI, this shows information on a map on the screen: data links, link status, messages, terminals, filters, and surveillance data for situational awareness. For additional information regarding JRE operations, refer to Operation and Maintenance Instructions with Illustrated parts Breakdown Organizational Level Joint Range Extension Gateway 31S5-2TYQ123-8-1.

At REMOCS (Red) Workstation, REMS software FE equipment tree, select Link Status

Upper or Link Status Lower.

Select Launch JRE Client.

JRE Client Application displays as shown in Figure 38.

Verify program connects to the proper JRE by verifying Internet Protocol (IP) address

(Connected to 172.XX.XX.XX) at bottom left of window.

Select Links tab at the bottom of the screen. Configured links will be displayed The FE operator will need to accomplish this again for the second JRE.

Figure 38: FE JRE Client Application

To launch JRE Client for RE being monitored, select Link Status under RE left tree.

Select Launch JRE Client.

JRE Client Application displays as shown in Figure 39.

Verify program connects to proper JRE by verifying IP address (Connected to

172.XX.XX.XX) at bottom left of window.

Select Links tab at bottom of screen. Configured links will display

Figure 39: RE JRE Client Application

Establishing Required Data Links

A data link is a communication pathway between the FE or RE and a destination. Data links enable the FE to serve as an interface hub for situation awareness data sharing and exchange between REs and JRE GW data links (established via the JRE GW). The JRE data links enable information from the SADL Radio, MIDS LVT, PRC-117, and Beyond Line of Sight (BLOS) STE to be exchanged via the FE and conveyed to all participants on the network. Certain JRE data links must be created using the JRE Client Application to attain minimal system communications.

These required data links must not be changed from the baseline configurations without prior approval from proper authority. Unauthorized changes may inhibit the ability for the FE to perform a proper RE handover to another FE.

JRE Preconditions for Building Data Links

The JRE Client must be configured before proceeding. Confirm JRE 3G Servers power on.

If not launched, launch JRE Client Application on the REMOCS (Red) Workstation.

Verify program connects to the proper JRE by verifying IP address (Connected to

172.XX.XX.XX) at bottom left of window.

Select Set Up in upper left menu, followed by Own Unit, which is found in drop-down menu.

Select Expert.

Edit Own Unit Configuration screen displays.

Verify/edit values on Edit Own Unit Configuration (as provided by the Joint Interface

Control Officer [JICO]).

Select OK.

Repeat steps for second JRE.

NOTE: In the Link Status section, shown in Figure 40, Mode and Rx State are color-coded to quickly identify link status. In the Mode column, green means link is on, gray means link is off.

In the Rx State column, green means on and receiving messages, yellow (MIDS) means link is on but not in a network, red means link is on but not receiving messages, and gray means link is off.

Figure 40: JRE Client Link Status

6 BUILDING DATA LINKS

At this point, the user must decide which data link will be created. Entries in the fields on the Link Settings screen depend on the type of data link being created. Table 3 and Table 4 list the required data links.

Table 3: FE Required Data Links Protocol Data Link Type

JREAP-C (V.1) User Datagram Protocol (UDP)/IP Unicast (Air Defense Sector [ADS] to RE)

JREAP-B (STE) Asynchronous (STE) Satellite Tactical Data Link J (STJ)

(JREAP-A)

PRC-117 Radio-to-JRE

Table 4: RE Required Data Links

Protocol Data Link Type JREAP-C (V.1) UDP/IP Unicast (RE to ADS) JREAP-C (V.1) Transmission Control Protocol (TCP)/IP Server SADL Link 16 Terminal LVT-2/11 JREAP-B (STE) Asynchronous (STE) STJ (JREAP-A) PRC-117 Radio-to-JRE

FE JREAP C Data Link as UDP/IP Unicast

The following procedures are for creating a JREAP-C Data Link as a UDP/IP Unicast from the FE to an RE. The FE and RE will both need to build this link to each other for it to connect.

Open JRE Client Application, if not already running, by double-clicking shortcut on

REMOCS (Red) Workstation.

Verify program connects to proper JRE by verifying IP address (Connected to

172.XX.XX.XX) at bottom left of window.

Select Links icon near top left of JRE Client window. JRE: Link Manager Window opens.

In Links Manager Window, select Create a new link icon near top left of window. A

New Link box will appear.

Using drop-down selection menus, select JREAPC (V.1) in Protocol field. Select

UDP/IP Unicast in Type field. Select Create. Create Link Window opens as shown in Figure 41.

In Designator field, type a number not already in use. In Alias field, type name of RE site.

Under General tab in the same Create Link window, verify following are selected:

Forwarding Mode—Site Specific Disable Extrapolation—box is unchecked.

Accept Remote Filters—box is checked.

Link Mode Settings—ON is selected.

In IP Settings section of General tab, type JRE IP address at RE site to which you are linking.

In Peer Port field, type distant end RE JRE port number (this must be the same as their local JRE port number used to build their link to this FE).

In Local Port field, type local JREs port number used for this link.

Select Advanced tab and select following:

Per Standard Operating Procedures, select CTR Negotiation and Preferred Time Reference.

In latency Monitoring section of the Advanced tab, select the following:

o Enable Latency Threshold—box is checked; Maximum Latency—4.0 seconds o Interval—10 seconds o Count—3

Check Enable latency Exceeded Alert box.

Select OK. The Create Link window closes and the JRE Link Manager displays with newly built link.

FE JREAP B BLOS Link (STE) to Pocket J RE Data Link

Use the following steps for creating a JREAP-B (STE) to an RE JREAP B Data Link.

Open JRE Client Application if not already running by double clicking shortcut on

REMOCS (Red) Workstation.

Verify program connects to proper JRE by verifying IP address (Connected to

Select Links icon near top left of JRE Client Application. JRE Link Manager Window opens.

In Links Manager Window, select Create a new link icon near top left of window. A New Link box appears.

Using drop-down selection menus, select JREAP B in Protocol; Select Asynchronous in Type. Select Create. Create Link Window opens as shown in Figure 41.

In Designator field, type a number not already in use. In Alias field, type BLOS/STE.

Under General tab in the same Create Link window, verify following are selected:

Forwarding Mode—No Modifications Disable Extrapolation—box is unchecked Accept Remote Filters—box is checked Link Mode Settings—ON is selected.

Cable—H Speed—9600

Select Advanced tab and select following:

Per Standard Operating Procedures, select CTR Negotiation and Preferred Time

Reference.

In latency Monitoring section of the Advanced tab, select following:

Enable Latency Threshold—box is checked; Maximum Latency—4.0 seconds Interval—10 seconds Count—3 Enable latency Exceeded Alert box is checked.

Select OK. Create Link window closes and JRE Link Manager displays.

Figure 41: JREAP B

RE JREAP-C Data Link as UDP/IP Unicast

Use the following procedures for creating a JREAP-C Data Link as a UDP/IP Unicast from the RE to the FE. The FE and RE will both need to build this link to each other for it to connect.

Open JRE Client Application if not already running by double clicking shortcut on

REMOCS (Red) desktop.

Verify program connects to REs JRE by verifying IP address (Connected to

172.XX.XX.XX) at bottom left of window.

Select Links icon near top left of JRE Client program window. The JRE: Link Manager

Window opens.

In Links Manager Window, select Create a new link icon near top left of window. A

New Link box appears.

Using drop-down selection menus, select JREAPC (V.1) in Protocol field; select UDP/IP

Unicast in Type field. Select Create. The Create Link Window opens.

In Designator field, type a name or number not already in use. In Alias field, type name of the RE or FE site.

Under General tab in the same Create Link Window, verify that the following are selected:

Disable Extrapolation—box is unchecked Accept Remote Filters—box is checked Link Mode Settings—ON is selected.

In IP Settings section of the General tab, type the JRE IP address of the RE site to which you are connecting.

In the Peer Port field, type the FE JRE port number (this must be the same as their local

JRE port number used to build their link to this FE).

In the Local Port field, type the local JREs port number used for this link.

Select Advanced tab and select the following:

o Per Standard Operating Procedures, select CTR Negotiation and Preferred Time Reference.

In the latency Monitoring section of the Advanced tab, select the following:

o Check Enable Latency Threshold box.

o Maximum Latency—4.0 seconds o Interval—10 seconds o Count—3

Check Enable Latency Exceeded Alert box.

NOTE: This system uses Strict CTR Negotiation to coordinate a common time reference between the JRE 3G at the RE and FE. Using Strict CTR Negotiation assumes the JRE is connected to and receiving time and position data from the SAASM GPS satellites. If GPS is not available, use the “Disable CTR Negotiation”.

In the latency Monitoring section of the Advanced tab, select the following:

o Check Enable Latency Threshold box.

o Maximum Latency—4.0 seconds o Interval—10 seconds o Count—3 o Check Enable Latency Exceeded Alert box.

Select OK. The Create Link Window closes and the JRE Link Manager Displays.

FE JREAP A Data Link as Gateway Unit PRC-117

Use the following steps for creating a JREAP A Data Link as a Gateway Unit (PRC-117):

Open JRE Client Application if not already running by double clicking shortcut on

REMOCS (Red) desktop.

Verify program connect to proper JRE by verifying IP address (Connected to

172.XX.XX.XX) at bottom left of window.

Select Links icon near top left of JRE Client Application program window. The JRE

Link Manager Window opens.

In Links Manager Window, select Create a new link icon near top left of window. A

New Link box appears. Using the drop-down menu, select JREAP A in Protocol field.

Select Create. The Create Link Window opens as shown in Figure 42.

Figure 42: JREAP A

In Designator field, type number not already in use. In Alias field, type PRC-117.

Under General tab in same Create Link window, verify that following are selected:

o Forwarding Mode—Site specific o Uncheck Disable Extrapolation box.

o Check Accept Remote Filters box.

o Select ON in Link Mode Settings.

o In Cable drop-down menu, select E.

o In Speed drop-down menu, select 2400.

o Uncheck Enable Clock Source (Direct Cable) box.

In Link Specific tab, enter the following data:

o JREAP A role Settings—Static Controller o Radio—AN/PRC-117F o Crypto Configuration—Embedded KG-84.

If no other participants, an alert stating “Empty Subscriber list” will display. Select Yes to acknowledge.

Select OK. If no Subscriber List info is required, select Yes.

RE JREAP A Data Link as Network Participant

Use the following steps for creating a JREAP A Data Link as a Network Participant (PRC-117) at RE sites where a PRC-117 is installed.

Open JRE Client Application if not already running by double clicking shortcut on

REMOCS (Red) desktop.

Verify program connects to proper JRE by verifying IP address (Connected to

172.XX.XX.XX) at bottom left of window.

Select Links icon near top left of JRE Client Application program window. The JRE

Link Manager Window opens.

In Links Manager Window, select Create a new link icon near top left of window. A

New Link box appears. Using drop-down menu, select JREAP A in Protocol field. Select Create. The Create Link window opens.

In Designator field, type number not already in use. In the Alias field, type PRC-117.

Under General tab in same Create Link window, verify the following are selected:

o Uncheck Disable Extrapolation box.

o Check Accept Remote Filters box.

o Select ON in Link Mode Settings.

o In Cable drop-down menu, select A.

o In Speed drop-down menu, select 2400.

o Uncheck Enable Clock Source (Direct Cable).

In Link Specific tab, enter the following data:

o JREAP A role Settings—Network Participant o Radio—AN/PRC-117F o Crypto Configuration—Embedded KG-84

Select OK.

Building a SADL Link

The following steps are for creating a SADL Data Link on the REs JRE Client.

Open JRE Client Application program if not already running by double clicking the shortcut on REMOCS (Red) desktop.

Verify program connects to proper JRE by…