Top Banner
SyncServer S350 Ultra Precise & Versatile GPS Network Time Server Setting new standards for security, reliability, redundancy and versatility in network time servers, the SyncServer ® S350 GPS Network Time Server is the solution for synchronizing the time on servers and workstations for large or expanding IT enterprises. Accurately synchronized clocks are critical for network log file accuracy, security, billing systems, electronic transactions, database integrity, VoIP, and many other essential applications. The S350 continues the SyncServer legacy of being the easiest to set up and maintain network time servers in the world. The front panel is designed to quickly bring the server online with a few front panel keystrokes or DHCP. To fully configure the unit, use the very intuitive web interface or the step-by-step web-based wizards for the most common operations. Once online, the S350 provides very reliable and secure network synchronization technology by combining multi-port network interfaces with multiple time reference technology and enhanced security protocols. Support of essen- tial security and network protocols provide for easy management and seamless integration into your existing and future network. The S350 is the only time server available with a Gigabit Ethernet port plus three addi- tional 10/100Base-T ports. This translates into high availability and throughput to support hundreds of thousands of network clients while maintaining microsecond caliber NTP KEY FEATURES Ultra High-Bandwidth NTP Time Server Stratum 1 Operation via GPS Satellites Gigabit Ethernet port plus 3 additional Independent 10/100Base-T Ports Internal Dial-up Modem for Time Reference Redundancy Independent Time References: GPS, Timecodes, 1PPS, 10 MHz Versatile Timing Outputs: IRIG A/B/E/G/NASA36/XR3/2137 AM or DCLS, 1PPS, 10 MHz, Sysplex Stratum 2 Operation via NTP Servers RADIUS, NTPv4 Autokey, MD5 Authentication Secure Web-Based Management SSH, SSL, SCP, SNMP, Custom MIB, HTTPS, Telnet, and More IPv6 and IPv4 Compatible Nanosecond Time Accuracy to UTC Alarm Relays Rubidium & OCXO Oscillator Upgrades Upgrade to Radio Broadcast Time Sync Optional T1/E1 Input/Output IEEE 1588 / PTP Grandmaster Option Time Interval Measurement Option KEY BENEFITS Synchronize Thousands of Client, Server & Workstation Clocks Very Reliable and Secure Source of Time for Your Network Multiple NTP Ports for Easy Network Configuration and Adaptation Extremely Accurate Time Source for Network Synchronization Enhanced Network & Security Features User Prioritized Reference Selection between, GPS, Timecode, 1PPS and 10 MHz Access Multiple Time Sources for Reliable and Secure Time Intuitive Web Interface for Easy Control & Maintenance timestamp accuracy. These four completely independent ports provide the flexibility needed to easily adapt to different and changing net- work topologies and security requirements. The Stratum 1 S350 will automatically synchronize to GPS, IRIG, 1PPS, and 10 MHz sources. Users can set the priority and the S350 will smoothly transition from one refer- ence to the next if the higher priority signal is lost or regained. An internal modem will synchronize to dial-up time sources if local references are not available.The S350 can also revert to a Stratum 2 mode and retrieve time from other user-designated time servers. Similarly the S350 generates many timecodes, 1PPS and 10 MHz outputs and can be upgraded to an internal Rubidium atomic oscillator that keeps the S350 accurate to microseconds per day. Optionally, T1/E1 inputs/outputs are available as is an AM radio to synchronize to national time broadcasts. IEEE 1588 / PTP is also an easy upgrade to the S350. Included with the PTP option is the 1PPS time interval meas- urement useful for measuring hardware based PTP slave accuracy. The SyncServer S350 is your answer to bringing perfect timing to your network – securely, reliably and easily – and for many years to come.
8

S350 AUG 08 - marubun.co.jp · SyncServer S350 Ultra Precise & Versatile GPS Network Time Server Setting new standards for security, reliability, redundancy and versatility in network

Sep 05, 2019

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: S350 AUG 08 - marubun.co.jp · SyncServer S350 Ultra Precise & Versatile GPS Network Time Server Setting new standards for security, reliability, redundancy and versatility in network

SyncServer S350Ultra Precise & Versatile GPS Network Time Server

Setting new standards for security, reliability,redundancy and versatility in network timeservers, the SyncServer® S350 GPS NetworkTime Server is the solution for synchronizingthe time on servers and workstations forlarge or expanding IT enterprises. Accuratelysynchronized clocks are critical for networklog file accuracy, security, billing systems,electronic transactions, database integrity,VoIP, and many other essential applications.

The S350 continues the SyncServer legacy ofbeing the easiest to set up and maintain network time servers in the world. The frontpanel is designed to quickly bring the serveronline with a few front panel keystrokes orDHCP. To fully configure the unit, use the very intuitive web interface or the step-by-stepweb-based wizards for the most commonoperations.

Once online, the S350 provides very reliable andsecure network synchronization technologyby combining multi-port network interfaceswith multiple time reference technology andenhanced security protocols. Support of essen-tial security and network protocols provide foreasy management and seamless integrationinto your existing and future network.

The S350 is the only time server availablewith a Gigabit Ethernet port plus three addi-tional 10/100Base-T ports. This translates intohigh availability and throughput to supporthundreds of thousands of network clientswhile maintaining microsecond caliber NTP

KEY FEATURES• Ultra High-Bandwidth NTP Time Server

• Stratum 1 Operation via GPS Satellites

• Gigabit Ethernet port plus 3 additionalIndependent 10/100Base-T Ports

• Internal Dial-up Modem for TimeReference Redundancy

• Independent Time References: GPS,Timecodes, 1PPS, 10 MHz

• Versatile Timing Outputs: IRIGA/B/E/G/NASA36/XR3/2137 AM orDCLS, 1PPS, 10 MHz, Sysplex

• Stratum 2 Operation via NTP Servers

• RADIUS, NTPv4 Autokey, MD5 Authentication

• Secure Web-Based Management

• SSH, SSL, SCP, SNMP, Custom MIB,HTTPS, Telnet, and More

• IPv6 and IPv4 Compatible

• Nanosecond Time Accuracy to UTC

• Alarm Relays

• Rubidium & OCXO Oscillator Upgrades

• Upgrade to Radio Broadcast Time Sync

• Optional T1/E1 Input/Output

• IEEE 1588 / PTP Grandmaster Option

• Time Interval Measurement Option

KEY BENEFITS• Synchronize Thousands of Client,

Server & Workstation Clocks

• Very Reliable and Secure Source ofTime for Your Network

• Multiple NTP Ports for Easy NetworkConfiguration and Adaptation

• Extremely Accurate Time Source forNetwork Synchronization

• Enhanced Network & Security Features

• User Prioritized Reference Selectionbetween, GPS, Timecode, 1PPS and10 MHz

• Access Multiple Time Sources for Reliable and Secure Time

• Intuitive Web Interface for Easy Control & Maintenance

timestamp accuracy. These four completelyindependent ports provide the flexibility neededto easily adapt to different and changing net-work topologies and security requirements.

The Stratum 1 S350 will automatically synchronize to GPS, IRIG, 1PPS, and 10 MHzsources. Users can set the priority and theS350 will smoothly transition from one refer-ence to the next if the higher priority signal islost or regained. An internal modem will synchronize to dial-up time sources if localreferences are not available.The S350 canalso revert to a Stratum 2 mode and retrievetime from other user-designated time servers.Similarly the S350 generates many timecodes,1PPS and 10 MHz outputs and can be upgradedto an internal Rubidium atomic oscillator thatkeeps the S350 accurate to microseconds per day.

Optionally, T1/E1 inputs/outputs are availableas is an AM radio to synchronize to nationaltime broadcasts. IEEE 1588 / PTP is also aneasy upgrade to the S350. Included with thePTP option is the 1PPS time interval meas-urement useful for measuring hardwarebased PTP slave accuracy.

The SyncServer S350 is your answer to bringingperfect timing to your network – securely,reliably and easily – and for many years to come.

Page 2: S350 AUG 08 - marubun.co.jp · SyncServer S350 Ultra Precise & Versatile GPS Network Time Server Setting new standards for security, reliability, redundancy and versatility in network

S350 NETWORKING EXCELLENCE

Gigabit Ethernet for UnmatchedHigh Performance with UnparalleledFlexibilityThe S350 has four dedicated and iso-lated Ethernet ports, one of which isGigabit Ethernet. These are connectedto a very high-speed microprocessorand a 50 nanosecond accurate clock toassure unparalleled high bandwidth NTPperformance. This more than meetsthe need of servicing 7000 NTP requestsper second while maintaining microsecondcaliber timestamp accuracy.

Four Ports for Flexibility and SecurityMultiple ports provide the flexibility toadapt to different network topologiesas networks grow and change. An S350can be the single time source to syn-chronize clients that are on differentsubnets and different physical networks.It is also an ideal solution for synchro-nized time on in-band and out-of bandnetworks. Since each port is independent,

it can appear as though there are fourclocks available, even though there isonly a single time reference. In securitysensitive networks we suggest using oneport for maintenance and control func-tions and the other three ports for NTPtiming functions only. This way the controlport IP address information can be keptprivate and not distributed with the NTPaddresses. IP address access control listsfor each port also add enhanced security.

Extensive Protocol Support for Secureand Easy Network Integration andManagementAll of the expected network managementand monitoring protocols are standardin the S350. Secure access protocolssuch as RADIUS, SSL, HTTPS, SSH, alongwith legacy protocols such as DHCPand Telnet are included to provide you achoice in server management. SNMPv3 with a custom MIB allows you toautomatically monitor the S350 and beadvised of any important status changes.Any of these protocols can be quicklyand easily disabled via the web basedmanagement interface.

Futureproof Your NetworkThe S350 supports both IPv4 and IPv6.The S350 works whether you are usingIPv4, IPv4/IPv6 mixed-mode, or theIPv6 environment. This means your S350can scale with your network operationsand provide value for many years to come.

Automatic Software UpgradeAvailability NotificationThe S350 can periodically check theSymmetricom web site for newer ver-sions of firmware. If a newer version isavailable, an informational SNMP trapor email is sent along with a statusmessage in the web interface.

Point & Click Software UpgradesUpgrading the firmware in the S350 iseasy. Just browse to identify the firmwarefile and click the upload button. It is justas simple to backup and restore theserver configuration files. This intuitiveapproach simplifies server management.

Time Server Log Files A running log of activity and server configuration changes is maintained forlater reference.

2

BEST PRACT ICES

• Always configure time clients to reference at least two timeservers.

• Two time servers provide redundant time source protectionfor time clients.

• Peering between time serversassures time continuity to timeclients if other time sources arenot available.

• Increase network security byserving time via ports GbE, 2 and 3 and reserving port 1 formanagement only.

Four network ports (including Gigabit) provide networkconfiguration flexibility and enhanced security.“Multiple” isolated and synchronized time servers canalso be configured.

Examples of Network TimingConfigurations

Basic configuration

Resilient configuration incorporating aRubidium Oscillator for improvedholdover performance.

Redundant, resilient and secureconfiguration incorporating a RubidiumOscillator in the primary server andpeering to another server for backupredundancy.

Resilient internal configuration. However,security, accuracy and reliability risksexist when peering with an external time server through the firewall.

Page 3: S350 AUG 08 - marubun.co.jp · SyncServer S350 Ultra Precise & Versatile GPS Network Time Server Setting new standards for security, reliability, redundancy and versatility in network

Control at Your Finger TipsThe interface on the S350 has beendeveloped and tested from a user per-spective. Keypad operation is quick andeasy when using the full numeric keypadand control keys. You can cycle throughdifferent time formats by pressing the[TIME] key or get detailed status infor-mation by pressing the [STATUS] key. TheS350 offers front panel menu controlvia the [MENU] button.

Quick and Easy InstallationThe S350 has been optimized for quicksetup via the keypad, requiring a mini-mum number of keystrokes. Just enterthe basic network parameters or selectDHCP and the unit is online. Once online,

the web interface is the best and easiestway to customize the time server.

Primary configuration and managementof the S350 is done via the intuitive andeasy-to-use web interface. It is the firsttime server that offers wizards to stream-line common setup and managementtasks. No other time server is availablewith such an effortless interface thatprovides intuitive navigation and depthof control.

Crisp, Bright Display and LEDsWhether you need to view time infor-mation close-up or far away, the 256x32high-resolution, variable intensity vac-uum fluorescent display provides highvisibility time and status in a variety ofuser selectable formats. The 1, 2 or 4line display of data makes for a crystalclear time display along with an inform-ative presentation of important config-uration information. The four LEDsprovide at-a-glance status of the currenttime reference, network connection status,NTP operational status and requestactivity, and any existing alarm situation.

SYNCSERVER S350

3

The full numeric keypad is the most efficient way tonavigate a menu driven interface. The [TIME] & [STATUS]buttons quickly display the most critical information.

BEST PRACT ICES

• A full numeric keypad with a display makes for quick initialsetup and installation.

• Most interactions with a timeserver are remote and are bestserved with a full featured web interface and good SNMPmonitoring.

Alarm Relays for Monitoring SystemsThe S350 features in-depth internalmonitoring, very flexible configurations,and external alarming. Alarm relays areone of several ways the unit can reportalarm conditions to an alarm monitoringsystem. One relay is activated if powerto the server is ever lost. The other relayis user configurable to activate if thereis any major alarm, or any major/minoralarm.

Informative Status LEDs provide at-a-glance health ofthe network time server. The USB ports add additionalflexibility in back-up, restore and upgrade operations.

Crisp and bright vacuum fluorescent display offers highreadability both near and far. Characters can be large,medium or small. Intensity is user adjustable.

User configurable alarm relays for major/minor alarmsas well loss-of-power alarm relay.

S350 ADVANCED AND FUNCTIONAL DESIGN

• Very high-speed processor for superiorNTP server performance

• 7000 NTP requests per second withmicrosecond caliber time stamp accuracy

• Easily upgradeable firmware via webinterface (simple point & click)

• 12 channel GPS receiver with single satellite timing for urbancanyon environments

• High reliability, wide rangepower supply (AC or DC)

• No fan• No hard drive

• 2x Alarm Relays

• Modem forbackup timereference

• 4 ports: 1x Gigabit Ethernet,3x 10/100Base-T

• Timecodes. 1PPS, 10 MHz inputs and outputs

• Radio Ready lowFrequency Radiooption

Optional Oscillators• Rubidium atomic oscillator option for

3 µs per day holdover accuracy

• OCXO oscillator option for 1 ms perday holdover accuracy

• Optional T1/E1 inputs and outputs

• Optional IEEE 1588 / PTPGrandmaster hardware timestamping

• Optional 1PPS Time Interval Measurement

Page 4: S350 AUG 08 - marubun.co.jp · SyncServer S350 Ultra Precise & Versatile GPS Network Time Server Setting new standards for security, reliability, redundancy and versatility in network

S350 FULL-FEATURED WEBINTERFACE

Intuitive, Easy-to-Use and SecureThe S350 is designed to have the webinterface be the primary status andcontrol console. It is organized intological groupings such as Status,Network, Timing, etc. The tabbed panelsoffer easy exploration of features and

easy configuration of the server. Typicalweb interface conventions are followedso that operation is quickly mastered.Server access is password protected,with a choice of RADIUS authenticationand SSL encryption for maximumsecurity. The web interface is enabledonly through Port 1 so that the usermay choose to keep that port IPaddress exclusive and secure whileserving time protocols only from Ports2, 3 and/or GbE.

Wizards Speed Routine ServerConfiguration TasksThe S350 includes wizards toguide you step-by-step throughthe more frequent or expectedoperations. From experiencewe know there are certainconfiguration activities thatmost customers will, at somepoint, want to perform with the

server. These include initial set-up, configuringtime source behaviors, back-upand restore operations,firmware upgrades, and more.The wizards make theseoperations very easy. Like allsystems that include wizards,you can use the detailed con-figuration pages elsewhere in

the web interfacefor custom configu-ration of the server.

Built-in HelpSystemThe complete S350 manual isbuilt into the web interface.The manual opens in a separatebrowser window. It is organ-ized to match the control buttons and tabs so thatinformation is quickly andeasily found. On most pagesthere is a link directly to themanual page for that panel.

In addition there are context sensitiverollover descriptors of various featuresand tabs on any given panel.

Full System Status andLog FilesAn essential part of a time server isknowing the system status when youneed to. The S350 provides a semi-cus-tomizable green/red/orange light statuswith system messages for quick, at-a-glance information. Detailed statusinformation is available on all of themajor subsystems of the server via thetabbed panels in the Status section.

Any alarms or critical alerts are quicklyfound on the Alarm panel. To examineoperational events, the Log section ofthe web interface provides detailedlistings of System, NTP, SNMP, HTTP,and Event activities.

4

BEST PRACT ICES

• Configuring a time server isgenerally done once and seldomrepeated. For that reason it should be easy to configure and maintain.

• Consider the importance of quick and easy configurationback-up and restore operations,as well as the simplicity offirmware upgrades.

• Web based wizards save time and eliminate configuration conflicts. Easy configuration of advanced features is alsoimportant.

• Turning on the auto-notificationof firmware update availabilityassures awareness of currentfirmware revisions.

Page 5: S350 AUG 08 - marubun.co.jp · SyncServer S350 Ultra Precise & Versatile GPS Network Time Server Setting new standards for security, reliability, redundancy and versatility in network

national time broadcasts, and worksindoors or outdoors, anywhere or anytimethe AM signal is detected.

Synchronize to Legal Time SourcesServing time and synchronizing com-puters with time that is legally traceableto a national time standard is a require-ment for many organizations. Theinternal dial-up modem in the S350and the optional AM radio both providethat direct path to a national timesource, thus assuring compliance.

Synchronize to Legal Timevia AM RadioAll SyncServer S350s are Radio Readyto accommodate an optional AM radio/antenna from Symmetricom. Nationaltime authorities in the USA, Europeand Japan broadcast an AM time signalas an official source of time, and manycommon devices ranging from wallclocks to wristwatches synchronize tothese broadcasts. Users can prioritizethe national radio signal ahead of theGPS signal and use GPS as a backup.

SYNCSERVER S350

Improved Time Reliability withDifferent Access PathsS350 time reliability starts with differentpaths to accurate time. The many pathsinclude satellite, external timing signals,modem, and the network to provideredundancy should any one path becomedisconnected or unavailable. In addition,an optional AM radio provides a fifthpath to official time broadcasts that areavailable in many areas. Also, an optionalT1/E1 input can be used as a backupreference to other time sources.

Use Dial-Up or AM Radio whenGPS is not an OptionOften a data center is located whereGPS is not a viable option, such as awindowless basement of a tall building.The built-in modem on the S350 canprovide dial-up access via analog phone line to thenational time source main-tained by many countries.Calls are made periodicallyand the frequency of the callscan be fixed or automaticallyoptimized for accuracy. Whenused in conjunction with anoptional OCXO or Rubidiumoscillator, this solution offersa stable and reliable source oftime for the network to relyon. Similarly, the optional AMradio can synchronize to

Multiple Time Sources AssureReliable TimeThe SyncServer S350 continually monitorsmultiple sources of time and synchro-nizes to the most reliable, accurate orpreferred. The GPS satellites are themost accurate and widely available sourceof time, but not the only source. TheS350 can also use timecodes, 1PPS,10 MHz, and T1/E1 inputs, NTP peeringto other time servers over the networkand the built-in modem to periodicallydial national time services. In the eventthe preferred signal becomes unavailable,the S350 will immediately synchronizeto the next user-prioritized source oftime. In all cases the network adminis-trator is notified immediately of anychange in time reference status.

5

BEST PRACT ICES

• NTP protocol experts advise thattime servers should have at leasttwo sources of time, three is better, and four or more is best.

• Dial-up and radio broadcast signalsare also direct connections tolegal sources of time.

• Access and availability of timeshould be a consideration in every network design.

S350 TRUSTED SOURCE FOR NETWORK TIME

Internal modem and optional AM radio antenna provideaccess to national time sources for time referenceredundancy.

Page 6: S350 AUG 08 - marubun.co.jp · SyncServer S350 Ultra Precise & Versatile GPS Network Time Server Setting new standards for security, reliability, redundancy and versatility in network

A Rubidium or Cesium atomic frequencyreference is often desired as a back-upto GPS. With the optional Rubidiumoscillator, the S350 will discipline theRubidium and lock to it if other refer-ences are lost. Similarly, the S350 willseamlessly lock to the 10 MHz output ofan external Cesium standard. Alternativetiming configurations include peeringthe S350 to other user designated timeservers and national dial-up timesources as fallback time references.

Time Cross-Checking for Peace ofMind ReliabilityThe S350 can time cross-check all reference time sources against at leasttwo other time servers. This protectsagainst an improperly operating refer-ence that can subtly corrupt the time.

Flexible Control Over System TimingInputs and OutputsBy protocol definition, the S350 servesNTP in the UTC timescale (or optionallyin GPS timescale). However, the S350can display local time rather than UTCon the front panel. The time can alsobe set manually with an override on theNTP alarms so that it behaves as thoughit is tracking a legitimate time source,even though it is actually in holdover.

Sysplex Timer for Mainframe SyncA dedicated Sysplex timer port outputsserial time strings for IBM mainframeSysplex systems. The Sysplex Timer

S350 PERFECT TIMING

Best-in-Class Timing AccuracyThe Stratum 1 level S350 derivesnanosecond accurate time directly fromthe atomic clocks aboard the GPSsatellite system. By using an integrated,12-channel GPS receiver, every visiblesatellite can be tracked and used tomaintain accurate and reliable time.While tracking GPS the S350 is accurateto 50 nanoseconds to UTC. Beyondaccurate NTP time stamping, this precision is excellent for generatingthe standard timecodes, 1PPS, 10 MHzoutputs and the optional T1/E1 signals.Time code inputs/outputs include IRIGA/B/E/G/NASA36/XR3/2137 in AM andDCLS formats.

Ultra High Performance NTPThe very high speed S350 NTP processorcan effortlessly support hundreds ofthousands of network clients whilemaintaining microsecond caliber NTPtimestamp accuracy. NTP requestthroughput rates exceed 7000 requests/second while maintaining NTP timestampaccuracy. This easily translates into0.5-2 ms typical client synchronizationaccuracy on a LAN.

Versatile Timing ConfigurationsThe S350 automatically synchronizes toGPS, Timecodes, 1PPS, 10 MHz and theoptional T1/E1 and/or AM radio referencein a user specified priority. It smoothlytransitions from one reference to thenext one available if the higher prioritysignal is lost or regained. This is perfectfor operating with different backup timeor frequency sources.

BEST PRACT ICES• Remember that accurate synchronization is directly relatedto how often the time clientsupdate their time from thetime server.

• Peering with other time serversis easy and provides a redundantsource of time as a fallback.

• The optional Rubidiumoscillator keeps the S350extremely accurate whileserving NTP in the event GPSservice is interrupted.

provides a common time referenceacross all the members of an IBMSysplex.

Oscillator Upgrades Improve HoldoverAccuracy and Save You Valuable TimeThe standard S350 is equipped with atemperature compensated crystaloscillator (TCXO) that keeps the S350accurate to nanoseconds when trackingGPS. However, if all time referencesare lost, the TCXO will soon drift awayfrom perfect. Upgrading the oscillatorimproves the holdover accuracy signifi-cantly.

Oscillator Holdover DriftTCXO 18 milliseconds per dayOCXO 1 millisecond per dayRubidium 3 microseconds per day

The value of the upgraded oscillator isthat if the time references are lost, theS350 can continue to serve very accurateNTP time and maintain the output timingsignals. This provides the IT staff plentyof time to correct the problem with nodegradation or disruption in networktime synchronization accuracy.

Optional IEEE 1588 / PTPGrandmaster with 1PPS Time IntervalMeasurementsPTP Grandmaster with hardware timestamping and 1PPS Time Intervalmeasurements are easily turned on in any S350 SyncServer. 1PPS time interval measurements are useful formeasuring hardware based PTP slave accuracy.

6

1000.0

Holdover (days)

Tim

e Er

ror(

ms)

, log

sca

le

100.0

10.0

1.0

0.1

0.011E-05 10 20 30 40 50 60

TCXO OCXO Rubidium

Accumulated Drift Error by Oscillator Type

10000.0

Plot of time error in milliseconds accumulated duringholdover for different oscillator types. Note log scaleof Y-axis.

Page 7: S350 AUG 08 - marubun.co.jp · SyncServer S350 Ultra Precise & Versatile GPS Network Time Server Setting new standards for security, reliability, redundancy and versatility in network

SYNCSERVER S350

S350 UNRIVALED SECURITY

A Security ArchitectureThe S350 is carefully architected forsecurity via the multiport configuration.The web-based management interfaceis enabled only through Port 1 so thatthe administrator may choose to keepthat port IP address private and secure.Only the time protocols can be servedvia Port 2, 3 and/or GbE. Time can alsobe served from Port 1.

Management Access SecurityAccess to the web interface can beconfigured to pass through a variety ofsecurity measures including accesscontrol lists, passwords, RADIUSauthentication, and SSL encryption formaximum security. RADIUS in particularprovides excellent security and easypassword management, particularlywhen there are multiple administratorsthat need access to the server.Individual protocols such as telnet,SSH, etc. can be disabled tofurther reduce open ports andrunning daemons in the server.Locally, the keypad on theserver can be password pro-tected to prevent tampering.

User Access SecurityAside from configuring themultiple ports for differentnetwork segments, uniqueaccess control lists per portcan govern server response toclient requests for time.

Server/Client AuthenticationAuthentication is valuable toassure that time is beingretrieved from the correct timeserver and not being spoofedin some way by an imposter orman-in-the-middle. The S350supports the two NTP authen-tication protocols, MD5 andAutokey. Generally, authenti-cation is used between criticaltime clients and the time

server or between NTPpeers across a WANwhere trust is veryimportant. MD5 symmetric keycryptography is reasonably easyto deploy between clients andservers and is used to verify NTPpacket integrity. Symmetricom’sstate-of-the-art Autokey imple-mentation is based on public keycryptography and is more sophis-ticated in its deployment. Autokeyverifies both packet integrity andpacket source using digital signa-tures. The S350 supports Autokeyas a server and/or a client.

Time Reference SecurityThe best way to assure the correcttime is to have multiple, trusted timesources. The standard S350 supportssatellite based GPS, multiple externaltiming signals such as IRIG, dial-upmodem access to national time sourcesand network peering to trusted timeservers. The NTP daemon continuouslyevaluates all configured time sourcesand rejects outliers. In addition, the

optional AM radio for the S350 syn-chronizes to government-maintainedradio time broadcasts available acrossthe U.S., Europe and Japan.

BEST PRACT ICES

• Always change the factory set password. Use RADIUSauthentication if available.

• Keep the management port IPaddress private or exclusive. Usethe three other ports to servetime to the network at large.

• Use access control lists onone or more ports to blockunauthorized IP addresses.

• Lockout front panel keypadaccess to prevent unauthorizedchanges.

7

The Multiport configuration of the S350 with manage-ment on LAN 1 only is an excellent security measureand time distribution strategy.

Page 8: S350 AUG 08 - marubun.co.jp · SyncServer S350 Ultra Precise & Versatile GPS Network Time Server Setting new standards for security, reliability, redundancy and versatility in network

©2010 Symmetricom. Symmetricom and the Symmetricom logo are registered trademarks of Symmetricom, Inc. All specifications subject tochange without notice. DS/SSS350/122010/PDF

SYMMETRICOM, INC.

2300 Orchard ParkwaySan Jose, California 95131-1017tel: 408.433.0910fax: [email protected]

SyncServer S350 SPECIFICATIONS

NETWORK PROTOCOLSNTP (v2 - RFC1119, v3 - RFC1305, v4 - RFC5905)

NTP Unicast, Broadcast, Multicast, Autokey SNTP Simple Network Time Protocol(RFC4330)

TIME (RFC868)

DAYTIME (RFC867)

HTTP/SSL/HTTPS (RFC2616)

SSH/SCP (Internet Draft)

Syslog 1 to 8 serversKey management protocols can be individually disabled.

LAN 1: Management & Time protocols; LAN 2, 3 & GbE: Time protocols only.

SERVER PERFORMANCE• 7000 NTP requests per second while maintaining accuracy associated with reference

time source. The accuracy is inclusive of all NTP packet delays in and out of theSyncServer as measured at the network interface. Client synchronization accuracyto server on a LAN is 0.5 - 2 milliseconds (typical). The SyncServer easily supportsmany hundreds of thousands of NTP clients. NTP request handling capacityremains the same regardless of Stratum level.

• Stratum 1 via GPS: Overall time stamp accuracy of 7 microseconds to UTC with avariation of less than 42 microseconds typical

• Stratum 1 via Dial-up modem: <50 milliseconds to UTC (<20 ms typical).

• Stratum 2: Peering can be used as the primary mode of operation or as a back upmode in case the primary reference signals are lost. Time stamp accuracydepends on NTP peer server(s).

• Holdover Accuracy/Oscillator Aging

TCXO (standard): 18 milliseconds/day <1E-06/monthOCXO (optional): 1 milliseconds/day <1E-07/monthRubidium (optional): 3 microseconds/day <5E-11/month

GPS RECEIVER/ANTENNA• 12 channel parallel receiver

• Minimum number of satellites for time: 1 intermittently

• GPS time traceable to UTC (USNO)

• Accuracy: <50 ns RMS, 150 ns peak to peak to UTC, ≥4 satellites tracked.

• Maximum Belden 9104 cable length: 150' (45 m). For longer cable runs see Options.

INTERNAL ANALOG MODEM• Telecom approved in more than 50 countries

• Time Encoding: ACTS, JJY, and ITU-R TF583.4

MECHANICAL/ENVIRONMENTAL• Size: 1.75" x 17" x 11.25"

(4.5 cm x 43.2 cm x 28.6 cm) 1U rack mount

• Power: 100-240 VAC, 50-60 Hz, 25 watts(45 watts with Rb osc.),

• Operating temperature: 0°C to +50°C

• Storage temperature: -10°C to +70°C

• Humidity: To 95%, noncondensing

• Certifications: FCC, CE (RoHS), UL, PSE, China RoHS

• Server weight: 9 lbs (4.1 kgs), Shipping package: 16 lbs (7.3 kgs)

Front PanelDisplay: Sharp, high-resolution 32x256 dot-matrix

vacuum-fluorescent. 1, 2 or 4 line.

Keypad: 0-9 numeric, up, down, left, right, ENTER, CLR,TIME, STATUS, MENU. Keypad lockout.

LEDs (tri-color green/red/orange)

Sync: Time reference status

Network: Network connection status

NTP: NTP activity

Alarm: Fault condition

Serial: DB9-F 9600, N, 8, 1

USB: For back up, restore, and upgrade operations.

Rear PanelNetwork (4x): 1x RJ-45 10Base-T/100Base-TX/1000Base-T Gigabit Ethernet

3x RJ-45 10Base-T/100Base-TX EthernetSpeed/Duplex: Auto, 10/full/half, 100/full/half

Sysplex: DB9-M RS-232

GPS: BNC L1, 1575 MHz

IRIG in: BNC IRIG A/B/E/G/NASA36/XR3/2137/IEEE-1344AM: Ratio 2:1 to 3.5:1, Amp: 1V to 8V p-p, Ζin >5KΩDCLS: <1.5 V for logic 0, >2.0 V for logic 1

IRIG out: BNC IRIG A/B/E/G/NASA36/XR3/2137/IEEE-1344AM: Ratio 10:3, Amp: 3.5 ± 0.5 Vpp, Ζout 50ΩDCLS: <0.8 V for logic 0, >2.4 V for logic 1, Ζout 50ΩIRIG GAM: Ratio 10:3, Amp: 3.0±0.5 Vpp, Ζout 50ΩDCLS: <0.8 V for logic 0, >2.4 V for logic 1, Ζout 50Ω

1PPS-in: BNC Rising edge active, TTL into 270Ω

1PPS-out: BNC Rising edge on-time, TTL into 50Ω

10 MHz-in: BNC Sine wave or square wave, 1Vpp to 8Vpp, Ζin >50KΩ

10 MHz-out: BNC Sine wave >2Vpp & <6Vpp into 50ΩSine wave >4Vpp & <12Vpp no load

Modem: RJ-11 analog phone jack

Radio: BNC, Optional antenna required for operation.

Power: IEC 60320 C14 connector & power switch.

Relays: 2x, SPDT (Form C).

CLIENT SOFTWAREIncluded with the S350 is Symmetricom’s SymmTime NTP client for Windows. SeeOptions for comprehensive software solution.

PRODUCT INCLUDESS350 Network Time Server, L1 GPS antenna, 50' (15 m) Belden 9104 coaxial cable, 1 ft.antenna mounting mast (30 cm) with two clamps, category 5 patch cable, DB9-M to DB9-FRS-232 extension cable, manual, SymmTime NTP client for Windows, Enterprise MIBsoftware, power cord, and rack mount ear kit. Two-year warranty.

OPTIONS(To see Options datasheet at please click here)

• Rubidium or OCXO oscillator upgrade for extended holdover

• AM Radio/Antenna (40, 60 or 77.5 kHz) for WWVB (USA), JJY (Japan) or DCF77 (Europe)

• T1/E1 Input/Output (OCXO or Rubidium oscillator required to meet G.811 specification)

• ±40-60 Vdc power supply

• Window mounted GPS antenna

• GPS antenna in-line amplifier for cable runs to 300' (90 m)

• GPS antenna down/up converter for cable runs to 1500' (457 m)

• Lightning arrestor

• Comprehensive time client, server & management software for easy distribution, manage-ment and monitoring of time across the network.

• NTP Network Time Displays, 2” or 4” (5 cm or 10 cm), 6 digit, red LEDs

• IEEE 1588 / PTP Grandmaster option with 1PPS Time Interval Measurements

Rear View

Front View

SNMP v1, v2c, v3 (RFC3584)Custom MIBDHCP (RFC2131)Telnet (RFC854)MD5 Authentication (RFC1321)RADIUS (RFC2865)SMTP ForwardingIPv4, IPv6 and IPv4/IPv6 Hybrid