ATTACH07_RE_InstructorTrainingGuide141216_v6.pdf

Pocket J Remote Element 2.3.1 Operations Training Instructor Guide

Version 6

16 December 2014

Prepared by:

Booz Allen Hamilton Engineering Services, LLC

1300 Thomas Drive Panama City Beach, FL 32408

DISTRIBUTION STATEMENT C: Distribution authorized to U.S. Government Agencies and their contractors for administrative/operational use (December 2014). Other requests for this document shall be referred to Air Force Life Cycle Management Center (AFLCMC).

DESTRUCTION NOTICE: Destroy by any method that will prevent disclosure of contents or reconstruction of the document.

POCKET J REMOTE ELEMENT OPERATIONS TRAINING INSTRUCTOR GUIDE

ii

1. INTRODUCTION

2. RE EQUIPMENT RACK

Visual Verification Equipment Rack

3. RE RADIO RACK

Visual Verification Radio Rack

Power on Radio Rack and Equipment Rack

Logging onto Equipment

4. RE SYSTEM SOFTWARE

RE Red REMS Status Check

RE Black REMS Status Check

5. JRE CLIENT APPLICATION

6. ESTABLISHING A DATA LINK CONNECTION

JREAP B

JREAP A

7. CRYPTO LOADING PROCEDURES

KG‐250 Crypto Loading

SAASM GPS Crypto Loading

SADL Crypto Loading

PRC‐117 Crypto Loading

MIDS/LVT Crypto Loading

MIDS/LVT Local Crypto Loading

8. PRIME APPLICATION

9. VOIP PHONE

10. STE

11. RE EQUIPMENT SHUTDOWN

12. END OF COURSE QUESTIONS

iii

LIST OF ILLUSTRATIONS

Figure 1: RE Equipment Rack Figure 2: RE Radio Rack Figure 3: Red REMS Remote Monitor Figure 4: RE Red LOMOCS Figure 5: RE APC UPS Figure 6: RE SAASM GPS Figure 7: RE Link Status Figure 8: RE Link Status with PuTTy Figure 9: RE KG-250 Figure 10: RE VoIP Phone Figure 11: RE Environmental Monitor Figure 12: RE RCMS Figure 13: RE PDU Figure 14: RE MCU Figure 15: RE PRC-117 Figure 16: RE SADL Control Display Figure 17: RE SADL Monitor Display Figure 18: Black Remote Monitor Figure 19: Black LOMOCS Figure 20: RE Cisco 2900 Series Router Figure 21: SIPRNet KG-250 Figure 22: RE JRE Client Application Figure 23: PRIME

LIST OF TABLES

Table 1: RE Equipment Rack Table 2: RE Radio Rack Table 3: Operator Verification Checklist iv

Acronym List

AA-V Authentication Algorithm Version ACT Activity APC American Power Conversion AUX Auxiliary

BLOS Beyond Line of Sight

CPU Central Processing Unit CT Cypher Text CV Crypto Variable

DAMA Demand Assigned Multiple Access DMD Data Management Device

EEPROM Electronically Erasable Programmable Read Only Memory ENT Enter EPLRS Enhanced Position Location Reference System ETR External Time Reference

FE Fixed Element FRACT1 Fractional T-1

GPS Global Positioning System GUI Graphical User Interface

IDL Initialization Design Load IP Internet Protocol ISDN Integrated Services Digital Network

JRE Joint Range Extension JREAP Joint Range Extension Application Protocol

KAB Keep Alive Battery KG Key Generator KSV Key Selection Vector

LD Load LED Light Emitting Diode LIP Link 16 Interface Process v

LOMOCS Local Monitoring and Control System LRU Line Replaceable Unit LVT Low Volume Terminal

MCU MIDS Control Unit MIDS Multi-Functional Information Distribution System

NET Network

OPTASK Operational Tasking

PDU Power Distribution Unit POTS Plain Old Telephone System PPLI Precise Participant Location and Identification

PRIME Pro-Logic Instant Message Exchange PuTTy Popular Secure Socket Shell and Telnet Client PWR Power

RCMS Remote Cryptographic Management System RE Remote Element REF Reference REMS Remote Equipment Management System

SAASM Selective Availability Anti-Spoofing Module SADL Situation Awareness Data Link SATCOM Satellite Communications SKL Simple Key Loader STE Secure Telephone Equipment SYS System

TDL Tactical Data Link TEK Traffic Encryption Key TFOM Time Figure of Merit TSK Transmission Security Key

UHF Ultra High Frequency UPS Uninterruptible Power Supply

VoIP Voice over Internet Protocol

1. INTRODUCTION

The Pocket J Remote Element (RE) 2.3.1 Operations Training Instructor Guide is for use with the individual component user manuals, Microsoft PowerPoint presentations, and hands-on training to provide comprehensive Pocket J RE training. This guide will assist operators with conducting routine operations on the Pocket J RE System.

Additional Information Provided:

Pocket J RE Technical Manual Electronic Copies of the Training Guides on CD PowerPoint Presentations American Power Conversion (APC) Uninterruptable Power Supply (UPS) User

Manual AN/PRC-117 Manual Cisco 2900 Series Router Manual Joint Range Extension (JRE) Manual MITEL Voice over Internet Protocol (VoIP) Manual Multi-Functional Information Distribution System (MIDS) Low Volume Terminal

(LVT) Manual Secure Telephone Equipment (STE) Manual Selective Availability Anti-Spoofing Module (SAASM) Global Positioning System

(GPS) Manual Simple Key Loader (SKL) Manual Situation Awareness Data Link (SADL) Manual ViaSat Key Generator (KG) 250 Manual Weathergoose (Environmental Monitor) Manual

This guide is broken down into the following sections:

RE Equipment Introduction

— Hardware

Powering On and Off RE System System Checkout

— Software Crypto Loading Procedures Auxiliary (AUX) Equipment

2. RE EQUIPMENT RACK

Figure 1 provides an illustration of the RE Equipment Rack. Table 1 explains the components contained within the front side of the RE Equipment rack.

Figure 1: RE Equipment Rack

Visual Verification Equipment Rack

Refer to Figure 1 for an illustration of the equipment described in Table 1. The No. column in Table 1 refers to the number callouts shown in Figure 1.

NOTE: Figure 1 shows those components that are viewable from the front of the rack.

Table 1: RE Equipment Rack No. LRU Description 1 SIPRNet KG-250 The KG-250 is a programmable Internet Protocol (IP) encryptor used to encrypt and decrypt data at the IP level between the RE and the Fixed Element (FE). Currently, the SIPRNet KG-250 is not used.

2 Cisco 2900 Router

The 2900 Series Router directs and controls all data communication throughout the RE. The router serves as the central hub interconnecting the RE components as well as the FE and RE.

3 Local Monitoring and Control

System

(LOMOCS)

(Black) laptop

The LOMOCS (Black) laptop provides control, status, monitoring, and local control of the system. It runs Remote Equipment Management System (REMS) and local management software used for monitoring the system.

LOMOCS (Red) laptop

The LOMOCS (Red) laptop provides control, status, monitoring and local control of the system. It runs REMS, JRE Client, Link 16 Interface Process (LIP) Service, Pro- Logic Instant Message Exchange (PRIME), Popular Secure Socket Shell and Telnet Client (PuTTy), and local management software used for monitoring the system.

5 Command Console The Command Console locally interfaces with the JRE 3G server and Client computers.

INSTRUCTOR NOTE: Explain how to switch between the Server and the Client by pressing the Scroll Lock twice.

6 KG-250 The KG-250 is a programmable IP encryptor used to encrypt and decrypt data at the IP level between the RE and the FE.

7 JRE 3G Server The JRE 3G Server provides Link 16 routing, filtering, and message processing. The software checks link status, manages data forwarding, applies filters, and views situational awareness.

8 STE The STE provides secure voice/data communications.

9 Rackmount UPS Conditions power for the Equipment rack. In the event of a loss of power, power surge, or power line frequency disturbance, the UPS internally disconnects equipment from the utility line and provides a continued, but limited, power supply via an internal battery until the utility line returns to safe levels or the battery fully discharges.

3. RE RADIO RACK

Figure 2 provides an illustration of the RE Radio Rack. Table 2 explains the components contained within the front side of the RE Radio Rack.

NOTE: Figure 2 shows those components that are viewable from the front of the rack.

Figure 2: RE Radio Rack

12*

Visual Verification Radio Rack

Refer to Figure 2 for an illustration of the equipment described in Table 2. The No. column in Table 2 refers to the number callouts listed in Figure 2.

Table 2: RE Radio Rack No. LRU Description 10 SAASM GPS The SAASM GPS provides a high-accuracy time source to all Line Replaceable Units (LRU) and External Time Reference (ETR) for the MIDS LVT and SADL radios.

11 Remote Cryptographic Management System

(RCMS)

The RCMS provides the ability to remotely rekey and zeroize the MIDS/LVT radio crypto.

12 MIDS Control Unit (MCU) The MCU provides remote control and ability to remotely zeroize the MIDS LVT.

13 MIDS/LVT Radio The MIDS/LVT Radio provides Link 16 capabilities to air, land, and marine platforms.

It provides integrated position determination, navigation, and identification data with a high degree of information security and resistance to jamming.

14 PRC-117 Radio The PRC-117 Radio supports secure data transmission in all modes of Ultra High Frequency (UHF) Satellite Communications (SATCOM). It provides Beyond Line of Sight (BLOS), Demand Assigned Multiple Access (DAMA), UHF capability.

15 SADL Radio The SADL Radio is a non-protocol specific data radio based on the U.S. Army Enhanced Position Location Reference System (EPLRS) radio.

Power on Radio Rack and Equipment Rack

Open Radio Rack front door by pulling vertical latch outward and turning latch 45 degrees clockwise.

NOTE: Failure to bypass Radio Rack security by extending the intrusion switch plunger before powering on Equipment Rack will result in loss of crypto.

INSTRUCTOR NOTE: Explain that the Crypto should still be loaded if following the proper shutdown procedures.

Fully extend intrusion switch plunger on Radio Rack (ensure rear door is closed) to manually bypass security (pull firmly on plunger until it extends about 1/8 inch).

Open Equipment Rack doors by pulling the vertical latch outward and turning the latch 45 degrees clockwise.

NOTE: The Power Distribution Unit (PDU) in the RE Radio Rack takes approximately 2 minutes to boot and provide power to the LRU in the rack.

To power on UPS located in Equipment Rack, press Test button on the front, right-hand side of the UPS.

Located in Radio Rack:

Verify PRC-117 Function Switch is in Cypher Text (CT) position.

Verify SADL Radio Function Switch is in ON position.

Verify LVT Radio Function Switch is in STBY position.

Verify MCU Function Switch is in REMOTE position.

Located in Equipment Rack:

If not in ON position, depress power button on front of Cisco 2900 Series router.

NOTE: During start-up, expect high Central Processing Unit (CPU) utilization. As a result, complete power-on of the rack can take up to 5 minutes.

Press power button on front of JRE 3G Server chassis.

NOTE: Occasionally the JRE 3G Server side does not boot when powered on. When this occurs, hold the server side reset button on the front of the JRE 3G Server for 12 seconds to manually reboot the server. The password will not display in the password field when typing password into the JRE Server.

NOTE: Press “scroll lock” twice if JRE Client does not display.

Fully extend JRE Command Console from Equipment Rack.

Tilt monitor forward to view screen.

Solaris login screen displays after initial boot sequence is complete.

Close Command Console and slide into rack.

Fully extend shelf containing LOMOCS (Red) laptop from Equipment Rack until locked into place.

Open LOMOCS (Red) laptop.

Press power button. After initial boot sequence, Windows login screen displays.

Close LOMOCS (Red) laptop and slide shelf back into rack.

Fully extend shelf containing LOMOCS (Black) laptop from Equipment Rack until locked into place.

NOTE: Ensure the Active Light Emitting Diode (LED) light is blinking on the front panel of the 2900 series router prior to powering on the LOMOCS (Black) laptop.

Open LOMOCS (Black) laptop.

Press power button. After initial boot sequence, Windows login screen displays.

Close LOMOCS (Black) laptop and slide shelf back into rack.

Using Operator Verification Checklist located in Table 3, make sure LRUs are powered on.

Table 3: Operator Verification Checklist LRU Items to Verify Notes/Comments

Equipment Rack

Rackmount UPS On Line LED indicator is on.

UPS stops blinking and turns solid green. Column of Battery Charge LEDs illuminates (indicating battery charge condition).

Load LEDs illuminates, indicating load on UPS.

All Battery Charge LEDs will illuminate when batteries are fully charged.

JRE 3G Server Power LED illuminates green.

Fan Fail indicator illuminates green.

Over-temp indicator illuminates green. Hard drives show steady blue “0”. Red GPS Status LEDs blinks.

JRE Command Console

With JRE Command Console fully extended, verify Windows login screen displays. Press “Scroll Lock” twice to verify Solaris login screen displays.

LOMOCS (Red) laptop

Laptop will display Windows login display.

LOMOCS (Black) laptop

Laptop will display Windows login display.

STE Lift handset to verify dial tone.

Verify crypto card is in STE, and

CARD INSTALLED LED

illuminates amber.

Blower (Upper/Lower)

Airflow is present in the cabinet. INSTRUCTOR NOTE: Explain about not blocking the ventilation exhaust located on top of the rack.

2900 Series Router System (SYS) LED illuminates green.

Activity (ACT) LED flashes green.

KG-250 (upper and lower)

After 60 seconds, PWR/READY LED remains illuminated green on the lower KG-250 only.

The upper KG-250 will remain in an alarmed state, as it is not currently used.

Radio Rack PRC-117 Radio Control knob is in CT position.

KG-84 and Traffic Encryption Key (TEK) 01 display in upper right-hand corner of main display.

REMOTE CONTROL Enabled reads across bottom of main display.

*If, “VINSON/No Key Loaded,” is in upper right hand corner of display, reload PRC- 117 crypto.

FE site will need to load configuration file.

Lack of (TEK) 01 display means there is no crypto loaded.

SADL Radio ALARM Lamp OFF.

OUT OF NETWORK (NET) LED

blinks.

PWR Lamp ON.

Keep Alive Battery (KAB) LED

OFF.

Alarm light illuminates if there is no crypto in radio.

Out of Net light will blink only when it has been initialized by FE site.

MCU Ensure knob is in the remote position.

MIDS LVT Power lamp (green) is on.

Orange AIR FLOW INDICATOR lamp is NOT ON.

Display should read PASS or Authentication Algorithm Version

(AA-V).

Control Knob is to STANDBY.

RCMS cable attached to J4 port.

RCMS cable is black and MCU cable is gray. Ensure Black cable plugs into J4 port of MIDS LVT Radio.

If “ALARM” displays, no crypto is loaded.

RCMS POWER LED illuminates green.

SAASM GPS Power and Online indicators illuminate steady green.

Reference (REF) Lock and Ready illuminate steady green after

TIMELOCK.

Crypto Variable (CV) Valid illuminates green.

It may take 10-15 minutes for SAASM GPS to lock onto satellites.

Alarm/Fault may flash red until

TIMELOCK.

If CV Invalid illuminates, no crypto is loaded.

Twisted Pair Receivers

Power LED illuminates green.

Auxiliary Equipment

VoIP Phone Extension number, time, and date displays on LCD.

STE Lift handset to verify dial tone.

Verify crypto card is in STE, and

CARD INSTALLED LED

illuminates amber.

Close Radio Rack front door by pushing vertical latch inward and turning latch 45 degrees counterclockwise.

Logging onto Equipment

NOTE: The sidebar menu tree of the REMS Remote Monitor (user) Screen shows equipment at the RE Sites. A malfunctioning LRU or error status will cause an audible and visual alert. The visual alerts consist of a white “x” inside a red circle in the sidebar menu tree and a warning pop up window in the lower, right side of the computer.

Open LOMOCS (Black) laptop.

From LOMOCS (Black) laptop, log in as pocketj user (password site specific). Windows

Desktop displays. Within 1 minute, REMS Remote Monitor (User) Screen displays.

Close LOMOCS (Black) laptop and slide shelf back into rack.

Fully extend shelf containing LOMOCS (Red) laptop from Equipment Rack until locked into place.

Open LOMOCS (Red) laptop.

From LOMOCS (Red) laptop, log in as pocketj user (password site specific). Windows

Desktop displays. Within 1 minute, REMS Remote Monitor (User) Screen displays. The following will automatically launch:

(1) PRIME

(2) REMS

(3) JRE Client

Close LOMOCS (Red) laptop and slide shelf into rack.

NOTE: REMS software is configured to automatically launch when login is performed.

Double-click the REMS icon on the desktop to launch the REMS software.

4. RE SYSTEM SOFTWARE

When delivered, the system has all required software installed and configured for use. The instructions in this section detail the operation and functionality of software as delivered with the system.

RE Red REMS Status Check

The LOMOCS (Red) and LOMOCS (Black) laptops control the REMS software. This application is used to monitor and control equipment at the RE Sites. This section outlines monitoring of RE Red equipment.

Fully extend shelf containing LOMOCS (Red) laptop from Equipment Rack until locked into place.

Open LOMOCS (Red) laptop. Maximize REMS software to display full screen as shown in Figure 3.

Select + next to site name to expand sidebar menu tree showing equipment icons on LOMOCS (Red) laptop.

To view equipment status, highlight equipment icon (shown in Figure 3).

Figure 3: Red REMS Remote Monitor

NOTE: A malfunctioning LRU or error status will cause one audible and two visual alerts—one at the FE and one at the RE consisting of a white “x” inside a red circle over the LRU affected and a pop-up window identifying the equipment affected.

Select Red LOMOCS.

Verify Avg CPU Usage (%) is below 20% and Space Used (%) is below 60% as shown in Figure 4.

Figure 4: RE Red LOMOCS

NOTE: CPU running at a higher capacity than 20% and space utilized at greater than 60% can slow the computer processes causing the computer to perform slowly and interfere with the Pocket J mission.

Select UPS.

Verify UPS Temperature is below 110 (yellow line), Battery Capacity is 100%, Amperage is between 2 and 12, and Input Voltage is between 110 and 123 as shown in Figure 5.

Figure 5: RE APC UPS

INSTRUCTOR NOTE: Explain that UPS powers everything in both the Equipment and Radio Racks.

To check SAASM GPS status, select SAASM GPS as shown in Figure 6.

Verify in Position section that proper Latitude and Longitude display.

Verify in TIME section, upper right rectangle reads Locked, Time Figure of Merit

(TFOM) is 3 or 4, and NTP Service reads, “Enabled.”

Verify in Satellite Signal Strength (dB) section, there are at least three satellites with green bars. Satellite strength will normally vary and change over time.

Figure 6: RE SAASM GPS

INSTRUCTOR NOTE: LOCKED status is required for the one-PPS to be available to the SADL and MIDS radios.

To check JRE 3G Server Status, select Link Status as shown in Figure 7.

The JRE section shows status of data links built on the server and allows the user to turn on/off data links. In the Mode column, green means link is on, gray means link is off.

In the State column, green means on and receiving messages; red means link is on but not receiving messages; gray means link is off; and yellow indicates receive errors.

Server Status section shows Active if REMS Software is connected to the JRE 3G Server.

Verify that Server Status reads Active.

Verify buttons for Launch PuTTy to JRE and Launch JRE Client are available.

Figure 7: RE Link Status

INSTRUCTOR NOTE: Remind the students that the Launch PuTTy to JRE and the Command Console are the two ways to access the JRE Server.

Select Launch PuTTy.

As shown in Figure 8, PuTTy allows RE operator to interact with JRE 3G without accessing Server. PuTTy turns off and resets the server.

Close PuTTy.

Figure 8: RE Link Status with PuTTy

To select KG-250 status, select KG-250 from left tree menu. The display screen will be blank, monitoring the status only.

From Tools menu in upper left corner, select KG-250. A new page will open. Select Continue to website.

A new window will open with the log in page for the KG-250 as shown in Figure 9.

Close KG250 window.

Figure 9: RE KG-250

Select VoIP.

Monitor the VoIP Phone for connectivity only as shown in Figure 10. Visual and audible alerts indicate lack of connectivity.

Figure 10: RE VoIP Phone

To view status of Relative Humidity, Relative Air Flow, External Air Flow, Cooling Fan, and Temperature, select Environment Monitor icon in the sidebar menu tree as shown in Figure 11.

Verify all indicators are illuminated green.

Figure 11: RE Environmental Monitor

NOTE: The Cooling Fan does not measure noise; it measures dbs. If the power was turned off on the radio, and there was low-level noise near the system, the operator may notice the Cooling Fan turn red.

Select RCMS.

Verify Avg CPU Usage (%) is below 20% and Space Used (%) is below 60% as shown in Figure 12.

Figure 12: RE RCMS

To monitor PDU Load Status, Outlet Status, and Outlet Controls, select PDU icon in sidebar menu tree as shown in Figure 13.

o Outlet Status: A powered outlet illuminates green; an unpowered outlet is gray.

o Load Status shows amperage draw and threshold for PDU overload.

Figure 13: RE PDU o Updates: The screen status refreshes on a periodic basis. For an instant refresh, the operator may select the Refresh button located in the Updates section.

o Outlet Controls: To power on, power off, or reboot all LRUs, select On Immediate, Off Immediate, or Reboot in drop-down menu and select Apply to all Outlets and then select Apply. To individually power on, power off, or reboot a specific LRU, place a check mark by LRU name located in Outlet Status. Next, select on, off, or reboot located in the drop-down menu under Outlet Controls and select Apply.

INSTRUCTOR NOTE: Point out that there are eight outlets but only five are used.

INSTRUCTOR NOTE: Select ON or STANDBY in the MCU MIDS Power Control before shutting down the system or turning the LVT-II outlet off to avoid zeroizing the MIDS/LVT crypto.

To monitor MIDS Power Control, Radio Rack Security, MIDS Crypto Zeroize, and Real

Time Status, select MCU icon in sidebar menu tree.

As shown in Figure 14, MCU status screen displays and shows the following:

o MIDS Power Control allows the operator to change status between On, Off, and Standby.

o MIDS Crypto Zeroize allows the operator to zeroize by choosing ARM Zeroize, then selecting Zeroize.

o By selecting the Security Bypass in Radio rack Security, the operator can open the rack doors without losing crypto.

o Real Time Status shows status of MIDS Power Control and Radio rack Security.

Figure 14: RE MCU

NOTE: The MCU hardware should always remain in Remote while the LVT radio will always remain in Standby.

To monitor PRC-117 DAMA, Battery Graphs, PRC-117 Remote Control Status, Satellite, and Call status, select PRC-117 icon in sidebar menu tree.

As shown in Figure 15, PRC-117 status screen displays the following:

o When PRC-117 is properly working, status will read “DAMA”. If PRC-117 radio is not working properly, status will read “Not in DAMA”.

o When PRC-117 is in DAMA mode, this section will show information displayed from Radio.

In Battery section, under Battery Voltage, green indicates normal operating conditions. Yellow or red indicate battery replacement required.

Hub Status should read Nominal.

Remote Control Status shows ability to perform remote control function based on settings on PRC-117 Radio.

Satellite indicates an established satellite connection.

The Configure button loads a configuration file into PRC-117 Radio from the FE location.

o When the PRC-117 Radio is not in DAMA mode, this section is blank.

Figure 15: RE PRC-117

To monitor SADL Radio status, select desired RE site SADL 11 Radio icon in the sidebar menu tree.

SADL 11 status screen is displayed.

o There are two tabs (the Control tab and the Monitor tab), each containing unique information:

Select Control tab to Configure Precise Participant Location and Identification (PPLI), and enter parameters required to initialize, select, and enable/disable ETR Capable value, and Initialize SADL Radio as shown in Figure 16.

o Once Initialize button is selected, packet information will begin to scroll, indicating an established connection with SADL Radio.

o Zeroize allows operator to zeroize by choosing Arm and selecting Zeroize.

o A green box showing Connected indicates REMS has communication ability with the radio. A red box showing Disconnected indicates lack of communication between REMS and SADL Radio.

Figure 16: RE SADL Control Display

NOTE: All SADL Parameters are in the Operational Tasking (OPTASK) Link.

INSTRUCTOR NOTE: Always select “Configure PPLI” followed by “Initialize” when initializing SADL radio.

INSTRUCTOR NOTE: Explain that the SADL Link Status will remain red until a SADL aircraft flies into the pocket.

Select Monitor tab as shown in Figure 17 to view Joint Range Extension Application

Protocol (JREAP)-C Link Status, SADL Link Status, and monitor KAB.

Figure 17: RE SADL Monitor Display

INSTRUCTOR NOTE: Once initialized, the JREAP C section can take up to 2 minutes to turn green.

RE Black REMS Status Check

INSTRUCTOR NOTE: REMS is the only Pocket J software used on the LOMOCS (Black) laptop.

INSTRUCTOR NOTE: The steps in this section provide the operator a visual indication that all Black devices are functioning correctly. Upon establishing an active communications path between RE and FE, the FE operator can remotely control and monitor the RE.

NOTE: REMS Software is configured to automatically launch when login is performed.

To launch REMS Software manually, double-click the REMS icon on the desktop.

Open LOMOCS (Black) laptop.

Maximize REMS picture on LOMOCS (Black) laptop.

On the LOMOCS (Black) laptop, in REMS Remote Monitor (USER) screen, select + beside site name to expand RE Black Equipment as shown in Figure 18.

Close LOMOCS (Black) laptop and slide shelf into rack.

Figure 18: Black Remote Monitor

NOTE: A malfunctioning LRU or error status will cause an audible alert and two visual alerts— one at the FE and one at the RE consisting of a white “x” inside a red circle over the LRU affected and a pop-up window identifying the equipment affected.

Verify that Avg CPU Usage (%) is below 20% and Space Used (%) is below 60% as shown in Figure 19.

Figure 19: Black LOMOCS

To monitor traffic, connection type, and monitored ports of router, select Cisco 2911 icon from sidebar menu tree as shown in Figure 20. The three communication paths available are Fractional T-1 (FRACT1), Integrated Services Digital Network (ISDN) and Plain Old Telephone System (POTS).

Figure 20: RE Cisco 2900 Series Router

INSTRUCTOR NOTE: Explain that the Cisco Router automatically prioritizes the connection type and that the Government-furnished communication circuit sends the data.

Select KG-250 SIPRNet icon from sidebar menu tree. No status screen will display as shown in Figure 21. KG-250 SIPRNet is monitored for connectivity only.

Figure 21: SIPRNet KG-250

5. JRE CLIENT APPLICATION

The JRE Client Application is the primary user interface for the JRE 3G. This application provides a Graphical User Interface (GUI) for configuring the JRE 3G Server. The JRE Client Application is used to configure secure data links between the JRE 3G Servers, REMS, and equipment such as the SADL Radio and MIDS LVT. In addition, this application provides routing, filtering, and processing of Link 16 Tactical Data Link (TDL) J Series messages. The interface is used to check link status, manage data forwarding, apply filters, view situational awareness, send and receive chat messages, view link and system status, control Link 16 terminals, monitor Link 16 terminal status, modify Link 16 terminal Initialization Design Load (IDL) and save specific settings. As a GUI, this shows information on a map on the screen: data links, link status, messages, terminals, filters, and surveillance data for situational awareness. For additional information regarding JRE operations, refer to Operation and Maintenance Instructions with Illustrated parts Breakdown Organizational Level Joint Range Extension Gateway 31S5-2TYQ123-8-1.

Fully extend shelf containing LOMOCS (Red) laptop from Equipment Rack until locked into place.

Open LOMOCS (Red) laptop.

On REMS software RE equipment tree, select Link Status.

If not already open, select Launch JRE Client.

JRE Client Application displays as shown in Figure 22.

Verify program connects to the proper JRE by verifying IP address (Connected to

172.XX.XX.XX) at bottom left of window.

Select Links tab at bottom of screen. Configured links display.

Figure 22: RE JRE Client Application

INSTRUCTOR NOTE: Explain that double-clicking the shortcut on the desktop also opens the JRE Client.

6. ESTABLISHING A DATA LINK CONNECTION

JREAP B

Although there are multiple TDLs built on the JRE located at the RE, JREAP B and JREAP A are TDLs established between the FE and the RE requiring operator assistance at the RE location.

Fully extend shelf containing LOMOCS (Red) laptop from Equipment Rack until locked into place.

Open LOMOCS (Red) laptop.

At LOMOCS (Red), select Link Status icon from REMS sidebar menu tree.

Select Launch JRE Client.

JRE application displays as shown in Figure 22.

Select Links tab at bottom of screen. Configured links will display.

If the JREAP B link is turned off (indicated by a gray color), right-click on the link name and select Turn Link On from drop-down menu.

From RE STE located on bottom shelf of RE Equipment Rack, dial number to FE STE.

Once FE operator answers STE, press Secure Voice on STE.

Once STE states Secure Voice, proceed by pressing Secure Data on STE. The JREAP B link located on JRE Client should change to green indicating the link is operational and ready to pass data.

JREAP A

To establish an operational JREAP A, the following conditions need to be initiated by the RE operator, which will allow the FE operator to control the link and radio.

into place.

Open LOMOCS (Red) laptop.

At LOMOCS (Red), select Link Status icon from REMS sidebar menu tree.

Select Launch JRE Client.

JRE application displays as shown in Figure 22.

Select Links tab at bottom of screen. Configured links will display.

If JREAP A link is turned off (indicated by a gray color), right-click on link name and select Turn Link On from drop-down menu.

Ensure following have been completed:

o PRC-117 Radio has crypto loaded. If no crypto is loaded, see Section 7 of this training guide.

o PRC-117 Radio is in Remote Control. If not, follow below instructions to place radio into remote control.

On KDU located on PRC-117 Radio, press PGM.

Use right/left arrows to select Mode: Ports.

Use right/left arrows to select Mode: Remote.

Notify FE site PRC-117 Radio is ready to receive Configuration File.

NOTE: The PRC-117 Radio connection process can take up to 5 minutes to complete authentication.

NOTE: Once the FE has finished sending the Configuration File, the FE operator will connect the satellite. Call picture will turn yellow, Network state will show Connected, and Satellite picture will show green/Connected.

7. CRYPTO LOADING PROCEDURES

The following are local crypto loading procedures for the KG-250, SAASM GPS, SADL, PRC- 117 and the MIDS LVT at the RE site.

NOTE: Prior to loading crypto, the RE Operator must notify the FE Operator, so that security bypass can be selected on the MCU. Once complete, the RE Operator must notify the FE Operator so that security bypass can be disabled.

KG‐250 Crypto Loading

INSTRUCTOR NOTE: Students will only need to load crypto in the lower KG250.

Currently the SIPRNet KG-250 is not used; however, explain that both KG-250s are loaded in the same manner.

Use an SKL to load the crypto as directed in the following procedure. For other COMSEC loading devices, consult local operating procedures. KG-250 settings have been preconfigured and should not require local modifications.

Obtain SKL.

Power on SKL.

Log in to SKL.

Open Equipment Rack doors by pulling the vertical latch outward and turning the latch

45 degrees clockwise.

Attach crypto fill cable to J2 fill port of the KG250.

On SKL, select Settings.

Select Date Load.

Select current date in drop-down menu and check ALWAYS USE SYSTEM DATE.

Select OK.

Select Keys tab. Keys for that day will display.

Highlight KG250 Key.

Select + sign to expand keys.

Select + sign to expand segment.

Highlight key to be loaded.

In upper, left corner of SKL, select File.

Select Transmit.

Select Load.

For Protocol settings, select DS101 from the drop-down menu.

If not unchecked, uncheck Send Wakeup.

Select Ok.

Select Ok to send key.

Active key loading window displays, showing status of key loads.

When key has completed loading, SKL will show Operation Successful.

Select Ok.

Select Done to return to SKL main display.

Power LED on front panel of KG-250 will illuminate green. No other LEDs should illuminate.

Disconnect fill cable from KG250.

On SKL, select File.

Select Save Database.

Select File.

Select Exit.

Select Session.

Select Log Out.

Exit application.

Power off SKL.

Close front doors of Equipment Rack.

Notify FE site that KG250 crypto has been loaded.

NOTE: Prior to loading crypto, the RE Operator must notify the FE Operator, so that security bypass can be selected on the MCU. Once complete, the RE Operator must

SAASM GPS Crypto Loading loading devices, consult local operating procedures. SAASM GPS settings have been preconfigured and should not require local modifications.

Obtain SKL.

Power on SKL.

Log in to SKL.

Open Radio rack door by pulling vertical latch outward and turning latch 45 degrees clockwise.

Attach crypto fill cable to SAASM GPS titled “Keyload contains ACD”.

On SKL, select Settings.

Select Date Load.

Select current date in drop-down menu and check ALWAYS USE SYSTEM DATE.

Select OK.

Select Keys tab. Keys for that day will display.

Highlight 103040 Key.

Select + to expand keys.

Select + to expand segment.

Highlight key to be loaded.

In upper, left corner of SKL, select File.

Select Transmit.

Select Load.

For Protocol settings, select DS102 in drop-down menu.

Select Ok.

Select Ok to send key.

When key has completed loading, SKL will show Operation Successful.

Select Ok.

Select Done to return to SKL Main Display.

On SKL, highlight 102040 Key.

Select + to expand keys.

Select + to expand segment.

Highlight key to be loaded.

In upper left corner of SKL, select File.

Select Transmit.

Select Load.

For Protocol settings, select DS102 in drop-down menu.

Select Ok.

Select Ok to send key.

When key has completed loading, SKL will show Operation Successful.

Select Ok.

Select Done to return to SKL Main Display.

On SAASM GPS, verify INVALID CV LED is not illuminated and VALID CV LED illuminates on front panel of SAASM GPS.

NOTE: If INVALID CV LED remains illuminated after 15 minutes, zeroize and reload crypto.

Disconnect Fill Cable from SAASM GPS.

On SKL, select File.

Select Save Database.

Select File.

Select Exit.

Select Session.

Select Log Out.

Exit application.

Power off SKL.

Close front door of Radio rack.

Notify FE site that SAASM GPS crypto has been loaded.

SADL Crypto Loading loading devices, consult local operating procedures. SADL settings have been preconfigured and should not require local modifications Power on SKL.

NOTE: SADL keys will be transmitted via STE from the FE site to the RE site.

Obtain SKL.

Power on SKL.

Log in to SKL.

Open Radio rack door by pulling vertical latch outward and turning latch 45 degrees clockwise.

Zeroize SADL Radio by pulling and turning the Zeroize knob.

Verify that radio self-test has completed prior to loading crypto. The Alarm light and Out of Net light will both be illuminated and not blinking.

Connect SKL fill device to J1 port on SADL Radio.

On SKL, select Settings.

Select Date Load.

Select current date in drop-down menu and check ALWAYS USE SYSTEM DATE.

Select Key tabs. Keys for that day will display.

Highlight SADL key (*E).

Select + to expand keys.

Select + to expand segment.

Highlight segment to be loaded.

In upper left corner of SKL, select File.

Select Transmit.

Select Load EPLRS.

Set following:

o DIVID=F o For segment number, select the number next to the key (1 for days 1–15 and 2 for days 16 through the end of the month) o Key=TEK

Select Load.

Select Next.

Toggle load switch on SADL radio when status screen reads Press Initiate Button.

Window on SKL asks if Bit Parity is correct on radio, select Yes.

Disconnect SKL from radio to receive key status.

Select OK.

Reload equipment, select NO.

Select Done.

On SKL, select File.

Select Save Database.

Select File.

Select Exit.

Select Session.

Select Log Out.

Exit application.

Power off SKL.

Notify FE site that SADL crypto has been loaded.

PRC‐117 Crypto Loading loading devices, consult local operating procedures. PRC-117 settings have been preconfigured and should not require local modifications.

Obtain SKL.

Power on SKL.

Log in to SKL.

Open Equipment rack doors by pulling vertical latch outward and turning latch 45 degrees clockwise.

Attach crypto fill cable to J1 fill port on PRC-117.

On SKL, select Settings.

Select Date Load.

Select current date in drop-down menu and check ALWAYS USE SYSTEM DATE.

Select OK.

Select Keys tab. Keys for that day will display.

On SKL, highlight PRC-117 Satellite key.

Select + to expand keys.

Select + to expand segment.

Highlight key to be loaded.

In upper left corner of SKL, select File.

Select Transmit.

Select Load.

For Protocol settings, select DS102 from drop-down menu. Select Ok.

Select Ok to send key.

On front of PRC-117 radio, move Function Switch to Load (LD).

Select fill device by pressing the down arrow until screen reads: FILL MENU FILL

Device KYK-13. Press Enter (ENT).

Select crypto type SATELLITE (weekly key) by pressing down arrow on PRC-117. The screen reads FILL MENU CRYPTO TYPE SATELLITE. Press ENT.

For KEY TYPE, select Transmission Security Key (TSK). Press ENT on PRC-117.

In KEY NUM field, type key number for PRC-117 crypto (01 is default).

Press Enter.

On PRC-117, press ENT key to receive crypto.

FILL DONE PRESS ANY KEY displays on PRC-117.

When key has completed loading, SKL will show Operation Successful.

Select Ok.

Select Done to return to SKL Main Display.

On PRC-117, FILL DONE PRESS ANY KEY will display.

Press ENT. Radio will display MORE FILL DATA.

Press on Down Arrow on Radio, to toggle between YES and NO.

Select YES, if monthly key must be loaded. Select NO, if complete.

On PRC-117, Press ENT.

Press CLEAR key once to return to Crypto Type display on Radio.

Using down arrow, select KG-84. Press ENT.

Press ENT for TEK Key Type.

In KEY NUM field, type key number for PRC-117 crypto (01 is default).

Press Enter.

On SKL, highlight PRC-117 KG84 key.

Select + to expand keys.

Select + to expand segment.

Highlight key to be loaded.

In upper left corner of SKL, select File.

Select Transmit.

Select Load.

For Protocol settings, select DS102 from drop-down menu. Select Ok.

Select Ok to send key.

On the PRC-117 Radio, press ENT to receive key.

On PRC-117 FILL DONE PRESS ANY KEY will display.

When key has completed loading, SKL will show Operation Successful.

Select Ok, and select Done to return to SKL Main Display.

Press ENT on PRC-117 radio.

Disconnect Fill Cable from PRC-117.

MORE FILL DATA is displayed on PRC-117.

Press Down Arrow to select NO.

Press ENT. The display will read CHANGE SW FROM LD.

Move PRC-117 Function Switch from LD to CT.

Disconnect fill cable from PRC-117.

On SKL, select File.

Select Save Database.

Select File.

Select Exit.

Select Session.

Select Log Out.

Exit application.

Power off SKL.

Close front doors of Radio rack.

Notify FE site that the PRC-117 crypto has been loaded.

MIDS/LVT Crypto Loading loading devices, consult local operating procedures. MIDS/LVT settings have been preconfigured and should not require local modifications. All keys must be loaded into the correct slots during crypto changeover for the Link 16 network to function properly.

Obtain SKL.

Power on SKL.

Log in to SKL.

Open Radio rack doors by pulling vertical latch outward and turning latch 45 degrees clockwise.

Disconnect RCMS cable from J4 port of MIDS LVT radio.

Connect SKL fill device to J4 port of MIDS LVT radio.

On SKL, select Settings.

Select Date Load.

Select current date in drop-down menu and check ALWAYS USE SYSTEM DATE.

Select OK.

Select Keys tab. Keys for that day will display.

On SKL, highlight MIDS/LVT Electronically Erasable Programmable Read Only

Memory (EEPROM) key.

Select + to expand keys.

Highlight key to be loaded.

NOTE: Sites connected to WADS will use USEAD 13; sites connected to EADS will use USEAD 71; sites connected to CONR will use USEAD 49.

In upper left corner of the SKL, select File.

Select Load.

For Protocol settings, select DS101 in drop-down menu.

Check boxes beside Send Wakeup and Thornton Key Load.

Under Thorton Key Load, select … box.

Verify following selections in window:

o KGV8B o E1

Select EEPROM.

Select OK.

On KEY LOAD Settings screen, select Ok.

On Load ECU Wizard, select Next.

On Load Equipment Results, select Close.

When key has completed loading, SKL will show Operation Successful. Select Ok and

Done to return to SKL Main Display.

SKL will return to key selection window.

On SKL, highlight MIDS/LVT EEPROM key.

Select + to expand keys.

Highlight key to be loaded.

NOTE: Sites connected to WADS will use USEAD 13; sites connected to EADS will use USEAD 71; sites connected to CONR will use USEAD 49.

In upper, left corner of SKL, select File.

Select Load.

For Protocol settings, select DS101 in drop-down menu.

Check boxes beside Send Wakeup and Thornton Key Load.

Under Thorton Key Load, select … box.

Verify following selections in window:

o KGV-8B o E2

Select EEPROM.

Select OK.

On KEY LOAD Settings screen, select Ok.

On Load ECU Wizard, select Next.

On Load Equipment Results, select Close.

When key has completed loading, SKL will show Operation Successful.

Select Ok.

Select Done to return to SKL Main Display.

Disconnect Cable fill device from MIDS/LVT and replace with RCMS cable.

On SKL, select File.

Select Save Database.

Select File.

Select Exit.

Select Session.

Select Log Out.

Exit application.

Power off SKL.

Notify FE site that MIDS LVT crypto has been loaded.

NOTE: MIDS/LVT will not display PASS in radio window until FE site sends DMD key to radio.

MIDS/LVT Local Crypto Loading

These steps are to be used only when the FE is unable to remotely push TEK to the RE Site. Use an SKL to load the crypto as directed in the following procedure. For other COMSEC loading devices, consult local operating procedures. MIDS/LVT settings have been preconfigured and should not require local modifications. All keys must be loaded into the correct slots during crypto changeover for the Link 16 network to function properly.

Obtain SKL.

Power on SKL.

Log in to SKL.

Open Radio rack doors by pulling vertical latch outward and turning latch 45 degrees clockwise.

Disconnect RCMS cable from J4 port of MIDS LVT radio.

Connect SKL fill device to J4 port of MIDS LVT radio.

On SKL, select Settings.

Select Date Load.

Select current date in drop-down menu and check ALWAYS USE SYSTEM DATE.

Select OK.

Select Keys tab. Keys for that day will display.

On SKL, highlight MIDS/LVT RAM key.

Select + to expand keys.

Select + to expand segment.

Highlight key to be loaded.

In upper, left corner of SKL, select File.

Select Transmit.

Select Load.

For Protocol settings, select DS101 in drop-down menu.

Check box beside Send Wakeup and Thornton Key Load.

Under Thorton Key Load, select … box.

Verify following selections are in window:

o KGV-8B o R0

Select RAM.

Select OK.

On KEY LOAD Settings screen, select Ok.

On Load ECU Wizard, select Next.

On Load Equipment Results, select Close.

When the key has completed loading, the SKL will show Operation Successful.

Select Ok.

Select Done to return to SKL Main Display.

SKL will return to key selection window.

On SKL, highlight MIDS/LVT RAM key.

Select + to expand keys.

Select + to expand segment.

Highlight key to be loaded.

In upper, left corner of SKL, select File.

Select Transmit.

Select Load.

For Protocol settings, select DS101 in drop-down menu.

Check boxes beside Send Wakeup and Thornton Key Load.

Under Thorton Key Load, select … box.

Verify following selections are in window:

o KGV-8B o R1

Select RAM.

Select OK.

8. PRIME APPLICATION

PRIME allows for RE/FE communication via secure chat links. PRIME automatically launches when the LOMOCS (Red) Workstation powers on. Minimize other applications to view the PRIME Screen.

NOTE: Establish a secure communications path for PRIME to be functional.

into place.

Open LOMOCS (Red) laptop.

If not already open, double-click PRIME icon on desktop to launch.

Select + to Expand Accounts as shown in Figure 23.

Select + beside <Site Name> to expand available messaging contacts. Contacts marked with a green circle are connected. Contacts marked with a gray circle are disconnected.

Double-click beside connected FE site name to display chat window.

When chat window displays, proceed with chat.

Once message is typed, select submit.

Once complete, close LOMOCS (Red) laptop and slide shelf into rack.

Figure 23: PRIME

9. VOIP PHONE

The following steps describe using the VoIP Phone. Information regarding programming and advanced functionality is located in the Mitel Administrator’s Guide.

INSTRUCTOR NOTE: EADS VOIP extension is x1000. WADS VOIP extension is x1100.

NOTE: Phones arrive at sites in a preconfigured state.

On VoIP Phone, verify time and date are correct.

Verify extension number of phone displays in upper, left corner of LCD and extension matches phone extensions provided by site System Administrator.

Lift hand set to verify dial tone.

Place a call to FE VoIP Phone.

10. STE

There is one STE located on top of the Radio Rack, and a second STE is located at the bottom inside of the Equipment Rack. This STE provides the ability to communicate via secure voice if enabled.

Verify Key Selection Vector (KSV)-21 card is inserted into front slot and Card Inserted

LED is illuminated.

Lift hand set to verify dial tone. Voice STE is set to make a non-secure call.

Place a non-secure call to another Voice STE.

Once call is established, press SecVoice button to go secure on call.

Verify both ends show SECRET on display.

INSTRUCTOR NOTE: Explain to students that both STEs are interchangeable if needed. Advise students to write down the Fortezza card ID number for system integrity.

11. RE EQUIPMENT SHUTDOWN

The following procedures shut down RE equipment. Contact FE Site before powering off any LRUs. Request Security Bypass enabled and ensure it is secure prior to continuing.

Open front doors of Equipment Rack by pulling vertical latch outward and turning latch

45 degrees clockwise.

Fully extend shelf containing LOMOCS (Red) laptop from Equipment Rack until locked into place.

Open LOMOCS (Red) laptop.

On REMS software located on LOMOCS (Red) laptop, select MCU from tree, select

Standby, and check Security Bypass.

At LOMOCS (Red) laptop in REMS, select PDU. PDU status screen displays.

Under Outlet Controls, check Apply to All Outlets.

In Control Action drop-down menu, select Off Immediate and select Apply.

After 2–4 minutes, all outlets under Outlet Status will turn gray indicating power to

LRUs is off.

Equipment Malfunction warning box will display and a red circle with a white X will appear over icon in sidebar menu tree for SAASM GPS and SADL Radio.

Select Acknowledge for each warning box, including MIDS Cooling Fan warning.

NOTE: The MIDS cooling fan warning will continue until system completely shuts down.

Select Link Status in sidebar menu tree. Link Status screen displays.

Select Launch PuTTy button. PuTTy login screen displays.

At command prompt, type operator and press Enter. Type operator password and press

Enter.

At command prompt, type su and press Enter.

Enter superuser password at prompt, and press Enter. A # prompt is displayed indicating superuser mode.

Type init 5, and press Enter. JRE 3G Server begins shut down process and PuTTy loses connection to JRE 3G Server indicated by Fatal Error screen.

Select OK.

Close PuTTy by clicking X in screen.

Once a red circle with a white x is displayed over REMS Link Status, JRE is able to be manually shut down.

Manually shut down JRE 3G by pressing main power switch to OFF position.

Close all running programs on LOMOCS (Red) laptop by clicking X in screens.

Power off LOMOCS (Red) laptop by selecting Start and Shut Down.

Close LOMOCS (Red) laptop and slide shelf into rack.

Fully extend shelf containing LOMOCS (Black) laptop from Equipment Rack until locked into place.

Open LOMOCS (Black) laptop.

Close all running programs on LOMOCS (Black) laptop by selecting X in screens.

Power off LOMOCS (Black) laptop by selecting Start and Shut Down.

Power off CISCO 2900 series router by manually pressing power switch to OFF position.

Press bottom button on UPS. All powered on LRUs will shut down.

Open front doors of Radio rack by pulling vertical latch outward and turning latch 45 degrees clockwise.

Move PRC-117 function switch to OFF position.

Close front doors of Equipment and Radio Racks.

Notify FE site that system powers down.

12. END OF COURSE QUESTIONS

1. To what position must the 3.1 Version MCU unit control knob be set prior to controlling the MIDS LVT through REMS? Remote

2. During system power-up, after turning on the Cisco 2900 Series router, what must be observed and why? The ACT LED light must be flashing. Will cause connectivity problems.

3. Which LRU do you select in the REMS tree to bypass the Radio Rack security? MIDS Control Unit (MCU). Check the SECURITY BYPASS box in the Radio Rack Security section.

4. Besides placing a check mark next to SECURITY BYPASS, what else must be done to avoid crypto loss during equipment shutdown? Select STANDBY in REMS MCU Radio Power Control section.

5. Name two ways to access the JRE server. PuTTY or Command Console

6. What must be performed prior to powering on the system after opening the Radio rack doors? Fully extend the intrusion switch plungers.

7. How can you tell if the cabinet blower is on and functional? Feel for airflow at the back of the cabinet at the inlet filter.

8. Because of the exhaust vent location, what will prevent system over-temp? Keep the top of the rack clear of items.

9. What are the three main communication paths the Cisco 2911 router will use and in what order will it prioritize them? FRACT1, ISDN, and POTs (in that order)

10. What does a red circle with a white X in the middle represent? An item has lost communications with REMS.

11. The PDU controls how many outlets and which ones are used? Eight outlets and five are used

12. What items are powered by the Equipment rack UPS? The entire Equipment and Radio Racks

13. How many satellite signal strength indicators on the REMS SAASM GPS must be in the green for the GPS to work? Three

14. When selecting the Monitor tab under the SADL 11xy or SADL 11z REMS Software, what must happen to have the SADL Link Status “SADL” turn from red to green?

Fighter with SADL enters the link.

15. Name two ways to bring up the JRE…