上海贝尔AMS5520网管简易操作文档ZJ

第一章防火墙技术点 (3)1.1功能介绍 (3)1.2防火墙端口 (3)1.2.1 Inside (4)1.2.2 Outside (4)1.2.3 Demilitarized Zone (5)1.3ACL（A CCESS LIST） (5)1.3.1 ACL的基本原理、功能与局限性 (5)1.3.2 三种主要的访问列表: (6)1.3.2.1 标准访问列表 (6)1.3.2.2 扩展访问列表 (7)1.3.2.3 命名访问列表 (10)1.3.3 ACL要点 (10)1.3.4 ACL配置显示 (11)1.4NAT（N ETWORK A DDRESS T RANSLA TION） (11)1.4.1 NAT介绍 (11)1.4.2 NAT术语 (12)1.4.3 NAT的种类 (13)1.4.3.1 Static NA T（静态地址转换） (14)1.4.3.2 Dynamic NAT（动态地址转换） (17)1.4.3.3 PA T（端口地址转换） (18)1.5路由（ROUTE） (20)1.5.1 路由原理 (20)1.5.2 路由协议 (21)1.5.3 静态路由 (22)1.6FAILOVER (23)1.6.1 FAILOVER介绍 (23)1.6.2 The Failover and Stateful Failover Links (24)1.6.3 Active/Active and Active/Standby Failover (25)1.6.4 Inter-Chassis Failover (26)1.7应用安全（A PPLICA TION L AYER P ROTOCOL I NSPECTION） (27)1.7.1 Stateful Inspection介绍 (27)1.7.2 Application Protocol Inspection的应用 (29)1.7.3 默认配置 (29)第二章防火墙体系结构 (31)2.1FWSM结构 (31)2.2ASA5520结构 (32)第三章网络拓扑结构 (33)3.1FWSM网络结构 (33)3.2ASA5520网络结构 (34)第四章防火墙配置说明 (35)4.1FWSM基本配置 (35)4.1.1 交换机配置 (35)4.1.2 FWSM配置 (35)4.1.3 Context配置（例） (37)4.2ASA5520配置（例） (39)第五章FWSM管理维护 (44)5.1软件管理 (44)5.1.1 快速软件升级 (45)5.1.2 登陆应用分区 (46)5.1.3 登陆维护分区 (46)5.2改变和恢复口令 (46)5.2.1 改变应用分区口令 (46)5.2.2 恢复应用分区口令 (46)第一章防火墙技术点本项目防火墙包括了ASA5520和FWSM，项目中所用到的主要技术点现统计如下：1.1 功能介绍Firewalls protect inside networks from unauthorized access by users on an outside network。

上海贝尔WCDMA无线接入设备及网管操作简易手册天津联通网络管理中心2011-2-21第一章贝尔网管概述及天津OMCR组网拓扑图贝尔WCDMA网管系统称为OMCR，它提供了三种方式对WCDMA中的网元进行管理：GUI界面（NSP），WICL和telnet。

本书将要介绍的是通过最常用的GUI界面（NSP）来管理网元，监控告警的方法。

天津联通贝尔3G OMCR组网拓扑图和无线设备组网图如下：第二章NSP的使用方法2.1 使用NSP 进行监控特别说明：WMS1对应的IP地址为132.174.35.102WMS2对应的IP地址为132.174.35.101以下客户端配置以WMS2安装为例。

2.1.1如何配置client1.关闭PC的防火墙打开windows 命令行窗口,输入net stop sharedaccess.2.设置PC的本地连接,确保能与OMCR相连.3.配置hosts文件在\windows\system32\drivers\etc\hosts文件末尾,加上如下行:132.174.35.102 tjserver 132.174.35.101 tjserver2 4.下载安装java程序.打开windows IE,输入http://132.174.35.101:8080/NSP/,在页面中首先选择”Download the windows32-bit JRE install”按钮完成java的下载和安装.（WMS2）2.1.2 打开NSP打开IE,输入:http://132.174.35.101:8080,回车后将出现如下登录界面:点击LANCH,进入登录窗口:输入用户名,密码,点击login,进入NSP窗口:2.1.3 修改密码在NSP中,选择菜单栏security change password,在弹出的窗口中，输入当前密码和新密码，点击OK即可。

2.1.4 使用NSP监控操作网元在NSP上面一排菜单中,点击file select network在随后弹出的layout selector对话框中,移动鼠标选中某个layout:点击view,将出现navigator窗口,在navigator窗口中双击layout,进入resource browser窗口,该窗口中包含了该layout下的所有网元:2.1.5 nodeb的状态查看如果要查看某个nodeb的状态,可以选中nodeb,点击右键,在弹出的窗口中,点击Eqipment Monitor,查看基站软件版本和IP地址查看FDDCELL, 在FDDCELL前面的两个方框,左边的显示告警状态,右边代表小区状态,把鼠标移动到右边框上,点击右键,小区状态信息将被显示出来:查看PCM2.1.6 常用操作基站最常用的操作,如reset,lock,unlock等都可以用选中操作对象,右键点击,在弹出的菜单里选择configuration,然后选择Set NE’s OAM Link Administrator state:用于lock&unlock,Reset xxxxx,在弹出的窗口中进一步确认进行相应操作.例1: reset Node B方法1:方法2例2 reset FDDCELL2.1.7 告警查看在NSP窗口上面一排菜单中,选择fault show alarms,将出现一个alarm manager窗口:在该窗口中,被选中的layout的所有告警都被显示出来,默认情况下,最新出现的告警出现在最上面,并实时更新,也可根据实际需要对告警进行排序.2.1.4 查看特定网元的告警在resource browser窗口中,选中某一网元,点击右键,选择show alarms:左键单击show alarm,在随后出现的alarm manager窗口中,该网元的告警就被显示出来.2.1.7 如何初步定位告警NSP中已经内置了告警手册,所以可以在告警窗口中随时方便地查看告警的真实原因及处理建议等内容,具体方法如下:在alarm manager 中选中要查看的告警,点击右键:在弹出的选项中选择Select Item Help,点击,该告警的帮助信息就会在如下窗口中显示出来:2.1.8 常见告警及处理方法举例2.1.6.1 PCM告警故障现象:<1>在该网元的eqipment monitor窗口中,相应的pcm左边的方框变灰,如下图所示;<2>将鼠标移动到该网元左边的方框上单击右键，可以看到该PCM 是disable的，如下图所示：<3>在该网元的alarm manager窗口，可以看到PCM FAULT之类的告警，如下图：处理方法：通知基站工程师，检查2M传输。

5520A应用操作及使用注意事项开机前检查项目●正确选择电源电压100V/120V/220V/240V ±10％⏹透过保险丝盒中心孔，检查所选电压无误。

一般不要使用交流稳压器。

●电源保险丝 2.5A/250V 延迟式●地线电源电缆中的地线必须可靠●位置保证通风散热，环境清洁并经常清洁仪器后面的空气过滤器。

●必要时，更新机器软件。

●使用前应仔细详尽地阅读使用说明书。

开机后检查项目●仪器开机后须预热30 分钟●仪器每经过7天或温度变化超过5︒C时，需整机校零一次。

电阻功能每12小时或温度变化超过 1︒C时，须校欧姆零一次1. 开机预热至规定时间。

2. 按 RESET键，3. 按SETUP键, 打开SETUP菜单，4. 根据控制显示器选按择CAL键，5. 在校准信息菜单中再次按CAL 键，6. 按ZERO键或 OHMS ZERO键，按提示操作,(将AUX Lo端和 20A端短路)7. 等待仪器自动校零。

8. 完成校零后，按几次PRE MENU键返回。

5520A 前面板接线端NORMAL电压电容输出端二线电阻输出端四线电阻电流端AUX 电流输出端四线电阻电位端GUARD屏蔽保护端20A 3A~20A电流输出端模拟热电偶输出(输入)端TC示波器信号输出端SCOPE示波器触发输出端TRIG电压功能设置和连接●用NORMAL HI端和 LO端输出电压●先输入电压数值，●选择极性＋/-●按倍数键m k M●按V键●再输入频率值●按倍数键m k M●按Hz键●按ENTER键入值有效●按OPR键输出❖输出直流毫伏电压时至低输入阻抗仪表时，应选用3.3V量程，锁定量程直接输出。

❖电压从低至高输出超过33V时，需确认安全重新按下OPR键后，才能输出。

输出电压大于100V时，有蜂鸣声提醒注意安全。

❖发生输出保护时，不可强行接通。

检查无误并经过若干秒后，方可再接通。

❖5520A输出端不可接入外部电源信号。

电流功能设置和连接●用AUX HI 端和 LO 端输出电流●先输入电数流值，●选择极性+/-●按倍数键m k M●按A键●再输入频率值●按倍数键m k M●按Hz键●按ENTER键●按OPR键输出❖当驱动模拟式交流电流表时，应在右侧控制显示器中选择 LCOMP（电感补偿）。

贝尔日常维护流程及常用指令贝尔日常维护流程及常用指令第一部分：贝尔例行维护操作 (2)1.1每日例行工作 (2)1.2每周例行工作 (2)1.3每月例行工作 (4)1.4每季度例行工作 (5)第二部分：贝尔设备故障处理 (9)2.1 链路告警 (9)2.2 安全块告警 (10)第三部分：一些有用的指令和MARCO (11)第一部分：贝尔例行维护操作1.1每日例行工作1.1.1控制室环境卫生、终端及其它外设检查机房环境和设备清洁卫生1.1.2机房温湿度检查检查机房内的温湿度表，正常的温度应该是23℃±2℃，湿度应该是40％－60％；1.1.3七号信令告警显示及处理用指令>MM<19:OPTION=ALL.如果19命令显示有CCLK、CCLD等告警，则用7599命令看告警详细内容。

>MM<7599:OPTION=LINK,LKID=ALL.检查，看到的为信令链告警；<7599:OPTION=LKSET,LKSET=ALL.检查，看到的为链路集告警；<7599:OPTION=DEST,DEST=ALL,LOGNET=ALL.检查，看到的为DEST不可达告警。

1.1.4信令链路情况显示及处理根据上步7599命令显示，用>MM<241:LKID=BB,DETAIL=SWSTAT.查看链路状态及链路配置；根据状态显示对不正常链路做出相应处理（详细处理过程见第二部分贝尔故障处理）1.1.5信令路由情况显示及处理用指令>MM<250:RTESID=CC,DETAIL=1.检查信令路由状态，如果路由不可用：直达路由，与链路不正常处理一样，非直达路由，A-TFP代表中间的STP到目的地的路由不可用。

AV代表正常，无话务；TRF代表正常有话务。

UNAV NONE 代表操作设置不可用。

1.1.6设备告警显示及处理用指令<display-active-alarms.（命令号：19），如果19显示有安全块告警，用< p="">D: I:两个宏对安全块进行闭解操作。

1 M anual operation (unloaded) provided for all product configurations; manual operation (under load)available for select catalog configurations.2 Feature/rating available for select catalog configurations.Unmatched performance, safety and serviceabilityProven performance and reliability•Automatic bypass switch provides operational redundancy and quickly restores power to criticalloads when the ATS has been isolated for test or removed for service•Automatic, non-automatic and manual A operation modes provide multiple methods of transferring the load between power sources•UL 1008 listed short-circuit and short-time B withstand closing current ratingsmaximize system reliability •Tethered remote controlallows an operator to initiate a non-automatic transfer outside the arc flash boundaryEnhanced safety•Unique three-door,compartmentalized design provides steel barriers protecting workers from energized components •All doors open/closeindependently eliminating unnecessary exposure to adjacent compartments •Integral safety interlocks automatically open the main contacts prior to the ATS or automatic bypass switch being isolated for test or removed for service•Rear shutters B automatically close to isolate bus stabs when the ATS or automatic bypass switch is being racked outEaton has enhanced its comprehensive portfolio of UL T 1008 and CSA 178 listed bypass isolation ATSsolutions with power contactor type designs specifically engineered for applications between 100 and 3000 A.Our bypass isolation ATSs are not only simple to operate, but also available in a broad selection of configurations and features to meet a wide variety of application requirements.When coupled with our extensive custom engineering capabilities, Eaton’s innovative three-door bypass isolation ATS design, robust compartmentalized construction, and redundant automatic operation set the standard for concurrent serviceability, worker safety, and optimizing critical system uptime.Improved serviceability•Innovative three-door design eliminates the need to schedule shutdowns for routine test, inspection or maintenance•Maintenance isolationswitch (MIS) permits service personnel to electricallyisolate control compartment elements and minimize shock hazard prior to beginning work —without disruption to critical loads•Control compartment door and adjoining electrical panel slide forward from the enclosure to provide easy access to wiring and components•Dual drawout design allows the ATS or automatic bypass switch to be disconnected from the electrical bus and isolated in cell for regular testing as prescribed by code (NFPA T 70, 99, 110)•Testing of isolated switch can be performed while ATS or automatic bypass switch is in automatic or non-automatic mode of operationSimplified installation and integration•Field-configurable terminals allow cable ingress at top/bottom for power source and load connections•Internal floor-mount anchors minimize footprint andfacilitate efficient integration into an equipment lineup •Seismic certified to OSHPD,CBC, IBC and UBC•Front and rear access availableFeatures and benefitsBypass isolationContactor type, 100–3000 AOpen/closed transitionDesign featuresDual automatic technologyEaton’s unique design includes an automatic bypass switch and an ATS within a single assembly to provide redundant automatic operation and uninterrupted power to critical loads.Optimize reliability and maximize uptimeThe automatic bypass switch and ATS can be racked out and isolated in cell for regular testing to ensure the entire bypass isolation transfer switch is maintained in proper operating condition.Facilitate scheduled maintenance The automatic bypass switch or ATS can be withdrawn for visual inspection andcompletely removed for bench testing without impacting automatic operation.Enhance worker safetyThe upper and lower doors can be operated independently, maintaining electrical isolation of the energized compartment.T esting… it’s as easy as 1-2-3 A three-step operator interface helps simplify testing procedures of the automatic bypass switch or ATS when racked out to the isolated position.Safe and serviceableEngineered for safety, athree-door compartmentalized construction coupled with an MIS allow personnel to perform maintenance on the bypass isolation transfer switch while energized.To mitigate shock hazard, the MIS can be placed in the maintenance position prior to opening the door, electrically isolating elements of the control compartment from system and control voltage.Once isolated, the control compartment door can beopened and adjoining electrical panel slid forward, allowing a technician to safely inspect, troubleshoot and replace electrical components.Upon completion, the door is closed and MIS returned to the normal operation position.Multiple operation modes Local operation is possible in the following modes:•Automatic •Non-automatic •Manual AIn Automatic mode, the transfer switch is self-acting, and atransfer is automatically initiated by the intelligent controller logic.In Non-Automatic mode, a transfer is initiated by theoperator using a door-mounted selector switch or an optional tethered remote control.In Manual mode, a transfer is initiated by the operator using controls mounted directly on the automatic bypass switch or ATS.Alternatively, a transfer can be initiated remotely via an HMi remote annunciator controller or network communication.Automatic bypass switch With the upper door open, operators can draw out the automatic bypass switch for inspection or maintenance.With the upper door closed, operators can rack out, isolate and test the automatic bypass switch in cell.Automatic transfer switch With the lower door open,operators can draw out the ATS for inspection or maintenance. With the lower door closed, operators can rack out, isolate and test the ATS in cell.Control compartment door and adjoining electrical panel slide forward.MIS provides ability to electrically isolate control compartment elements prior to start of maintenance.Safe, easy and spacious access to wiring and components.Electrical load remains connected to power during maintenance procedures.Featuring simplified testing procedures for the ATS and automatic bypass switchT ethered remote control for non-automatic operationA Manual operation (unloaded) provided for all product configurations;manual operation (under load) available for select catalog configurations.2EATON Bypass isolation automatic transfer switches (ATS)Product selectionCatalog numbering systemTechnical specificationsA Check with your local Eaton sales representative for NEMA 12 and NEMA 4X enclosure specifications. NEMA 3R stainless steel available upon request.B Dimensions in inches (mm) and weight in lb (kg). Data is approximate, subject to change, and representative of a typical product configuration.Please reference product outline drawing(s) for latest information. Custom-engineered enclosure options available upon request.A Standard mechanical lugs are UL listed, solderless screw-type Cu/Al. Number of conductors and size range shown is per pole and representative of typical product configuration.B Two-hole compression lug or bus connect provisions available upon request. Please contact your local Eaton sales representative for more details.C Only applies to wye system configuration with solid neutral. For four-pole (switched neutral) configurations, the number and size of conductors supported will mimic the Normal,Emergency and Load terminal information shown.ote: N Some catalog number combinations may not be available. For additional information, please contact your local Eaton sales representative.3EATON Bypass isolation automatic transfer switches (ATS)UL 1008 listed withstand closing current ratingsATC-900—intelligent controlEaton’s ATC-900 controller brings ease of use, adaptability, supervisory and programming capabilities to mission-criticalapplications. The 4.3-inch color TFT display provides simple arrow keys for quick screen navigation and easy viewing of event logs as well as recorded time-stamped events. Field configuration of programmable I/O allows user adaptability to special requirements.1Time duration is 0.13 sec. maximum.4EATON Bypass isolation automatic transfer switches (ATS)Eaton is a registered trademark.All other trademarks are property of their respective owners.Eaton5050 Mainway Burlington, Ontario L7L 5Z1 CanadaEatonCanada.ca© 2020 EatonAll Rights Reserved Printed in CanadaPublication No. PA140014EN October 2021HMi remote annunciator controllerEvolving arc flash regulations and requirements for personal protective equipment are driving more and more end users toward the use of remote monitoring and control devices. Eaton’s HMi remote annunciator controller offers a simple and cost-effective means of managing up to eight ATSs via serial or ethernet communication.In many cases, standard products can be custom-order engineered to meet unique application needs. For additional information, please contact your local Eaton sales representative.Custom-order engineeringRemote annunciator controllerT /bypassATSFollow us on social media to get the latest product and support information.。