UNM2000 V2R11 - Product Description
UNM2000 V2R11 - Product Description
UNM2000 V2R11 - Product Description
Network Convergence
Management System V2R11
Product Description
Version: B
Code: MN000004542
May 2020
Thank you for choosing our products.
Version
Version Description
Related Documentation
Document Main Content Phase to Use
Introduces the product positioning,
Network
Product Description features, basic functions, network and
planning
application, and technical specification.
I
Document Main Content Phase to Use
PON Network Traffic and Quality
Introduces the installation flow and Network
Analysis System Installation
methods of the product. deployment
Guide
PON Network Traffic and Quality Introduces the operation methods, main
Network
Analysis System Operation GUIs and indicators of the management
maintenance
Guide functions.
Intended Readers
Terminology Conventions
Terminology Convention
FiberHome UNM2000 Network Convergence Management
UNM2000
System
Symbol Conventions
Cascading
→ Connects multi-level menu options.
menu
Bidirectional
↔ The service signal is bidirectional.
service
Unidirectional
→ The service signal is unidirectional.
service
II
Contents
Preface...................................................................................................................I
1 Overview ........................................................................................................1
3 System Architecture........................................................................................7
7 Technical Specifications................................................................................59
7.3 Standards.......................................................................................62
Product Positioning
Product Features
Version: B 1
UNM2000 Network Convergence Management System V2R11 Product Description
The UNM2000 is located at the NML and EML in the TMN architecture and
manages the devices in the access network, transport network and IP network, as
shown in Figure 1-1.
Table 1-1 lists the devices that can be managed by the UNM2000 V2R11.
2 Version: B
1 Overview
Version: B 3
UNM2000 Network Convergence Management System V2R11 Product Description
u The UNM2000 improves the disaster tolerance by the cluster disaster tolerance
centralized deployment and the cluster disaster tolerance distributed
deployment, so as to provide users with a stable and reliable network
management system.
u The UNM2000 flexibly controls the functions and management capability using
the License function, so as to meet various requirements of subscribers. The
license will not be influenced by any changes of the network card.
Flexible Scalability
u The loose coupling between functional modules enables users to upgrade and
maintain modules independently.
u The UNM2000 provides completely new user experience through the CLI and
Web login modes.
u The UNM2000 keeps the consistent GUI style for each device using
modularized design.
u The UNM2000 can run in the Windows, SUSE Linux, CentOS Linux or Solaris
operating system. The client and server performance of the UNM2000 is
irrelevant to the operating system.
4 Version: B
1 Overview
u The UNM2000 supports the MySQL, Oracle and SQLServer databases to meet
different requirements for users.
u The functions of the unified southbound and northbound interfaces can cover
all devices in the network managed by the UNM2000.
Version: B 5
2 Version Introduction
u Exports backup configuration data and collected performance data via SFTP
(not supported by the AN6000 series devices).
u Collects and exports data on ONU health, DBA service bandwidth and ONU
WAN connection services.
u Updates the states of topology links for ONU services in real time.
6 Version: B
3 System Architecture
This chapter introduces the software architecture and external ports of the
UNM2000.
Software Architecture
External Interface
Version: B 7
UNM2000 Network Convergence Management System V2R11 Product Description
The external interface is the channel for communication and data interaction
between the UNM2000 and the external system. The UNM2000 provides the
northbound interface and southbound interface to manage devices and help
network operators implement quick integration of the OSS and the UNM2000,
improving customer service quality.
8 Version: B
3 System Architecture
Northbound Interface
The UNM2000 supports the TL1, CORBA, WebService, Socket and SNMP
northbound interfaces.
Southbound Interface
The UNM2000 is connected with the devices through the southbound interface so
that the UNM2000 can manage the devices.
The connection between the UNM2000 and devices uses the SNMP, FTP / SFTP /
TFTP and Telnet / SSH protocols.
Version: B 9
4 System Configuration Requirements
10 Version: B
4 System Configuration Requirements
The hardware configuration requirements of the UNM2000 server vary with the
network scale. For detailed requirements, see Table 4-1.
CPU Hard
CPU
Network Scale Clock Memory Disk Hard Disk Format Network Card
Quantity
Rate Space
Version: B 11
UNM2000 Network Convergence Management System V2R11 Product Description
CPU Hard
CPU
Network Scale Clock Memory Disk Hard Disk Format Network Card
Quantity
Rate Space
12 Version: B
4 System Configuration Requirements
Table 4-2 shows the hardware configuration requirements of the UNM2000 client.
Hard
CPU Clock CPU Graphics
Network Scale Memory Disk Hard Disk Format
Rate Quantity Card
Space
Version: B 13
UNM2000 Network Convergence Management System V2R11 Product Description
Solaris 11 (64-bit)
u MySQL 5.7.18
Note: The MySQL 5.7.18 database only supports the SUSE
Linux Enterprise 11 system.
Database u MySQL 5.7.30
u MySQL 8.0.22
Note: The MySQL 8.0.22 database only supports the CentOS
Linux release 8.2.2004 system.
Oracle 11g
Note: The Oracle database only supports the SUSE Linux Enterprise
12 system.
14 Version: B
4 System Configuration Requirements
Version: B 15
5 Network and Application
The UNM2000 can provide unified network management solutions for the transport
network, access network and IP network. It supports four different deployment
modes for you to choose flexibly according to your network scale and deployment
requirements.
Network Example
16 Version: B
5 Network and Application
The centralized deployment mode adopts the network scheme of multiple client
ends - single server. In this mode, only one UNM2000 server supports the access
and operation of multiple client ends. This mode provides easy deployment scheme
and the cost is relatively low, which is applicable for medium and small-scale
network. Figure 5-1 shows the network diagram.
Version: B 17
UNM2000 Network Convergence Management System V2R11 Product Description
In the distributed deployment mode, multiple servers bear the functions of the
UNM2000 server. The UNM2000 EMS services can be deployed onto different
servers, among which the services that cause much pressure, such as data
collection, alarms, performance, events, object access and service configuration,
supports multi-instance configuration to implement load balancing, enlarge the
management capacity and improve the performance. Figure 5-2 shows the network
in this deployment mode.
18 Version: B
5 Network and Application
The cluster disaster tolerance centralized deployment mode includes one active
server and one standby server. When the active sever is faulty, the system will be
switched to the standby server to keep on the network monitoring, so as to
guarantee the uninterruptible system operation.
According to the deployment location of the active and standby servers, the cluster
disaster tolerance centralized deployment falls into local deployment and remote
deployment.
u Local deployment: The active and standby servers are deployed in the same
location, which are connected to the disk array using optical fiber connection.
Figure 5-3 shows the network diagram.
u Remote deployment: The active and standby servers are deployed in different
locations (equipment rooms or cities), which are connected to their respective
disk array. Figure 5-4 shows the network diagram.
Version: B 19
UNM2000 Network Convergence Management System V2R11 Product Description
20 Version: B
5 Network and Application
In the cluster disaster tolerance distributed deployment mode, the active and
standby stations form the cluster disaster tolerance system. When the active station
is faulty, the system will be switched to the standby station to keep on the network
monitoring, so as to guarantee the uninterruptible system operation. The distributed
deployment is also implemented within the station, so that the servers within the
station are load balanced and the management capacity is enhanced. The server
quantity in the active station is the same as that in the standby station. The servers
in the active and standby stations back up each other.
Version: B 21
UNM2000 Network Convergence Management System V2R11 Product Description
According to the deployment location of the active and standby servers, the cluster
disaster tolerance distributed deployment falls into local deployment and remote
deployment.
u Local deployment: The active and standby servers are deployed in the same
location, which are connected to the disk array using optical fiber connection.
Figure 5-5 shows the network diagram.
u Remote deployment: The active and standby servers are deployed in different
locations (equipment rooms or cities), which are connected to their respective
disk array. Figure 5-6 shows the network diagram.
22 Version: B
5 Network and Application
The UNM2000 server communicates with the managed equipment via the in-band
network mode or out-of-band network mode.
In-band Network
The in-band network mode means to transmit the management data and the service
data of the equipment in one channel.
u Advantage: the network is flexible without any additional equipment, so that the
cost is relatively low.
Version: B 23
UNM2000 Network Convergence Management System V2R11 Product Description
Out-of-band Network
The out-of-band network mode means transmitting the management data and
service data of the equipment in different channels. The management data channel
are the service data channel are mutually independent.
24 Version: B
6 Basic Function of the UNM2000
Configuration Management
Topology Management
Alarm Management
Event Management
Performance Management
Security Management
Resource Management
Version: B 25
UNM2000 Network Convergence Management System V2R11 Product Description
The UNM2000 provides the configuration management function for devices in the
entire network. You can perform various configurations on devices using the
UNM2000.
u The broadband access device carries multiple services such as data, voice,
IPTV and CATV simultaneously. The UNM2000 provides a universal
configuration GUI for full service configuration. You can configure multiple
services collectively using the UNM2000, which will greatly improve the
configuration efficiency.
u For system objects, the UNM2000 provides shortcuts for service configurations,
and integrates previous individual Grid configuration GUIs into a main GUI for
configuration operations. That is, all configuration commands for system
objects are integrated into a service configuration management GUI where you
can configure services directly.
u The UNM2000 provides the Web configuration access to call a third-party Web
network management system to manage the S2208G-PAF switches.
u The UNM2000 provides the global template and global configuration functions.
If multiple NEs have the same or similar configuration, you can bind a global
template to these NEs or deliver the global configuration to these NEs. In this
way, configuration efficiency is improved.
26 Version: B
6 Basic Function of the UNM2000
u The UNM2000 can manage association of ONUs with double MAC addresses.
u The UNM2000 can display the hand-in-hand topology in real time and provide
the protection information of associated ONUs.
The UNM2000 provides the SNMP parameter template management function for
the SNMP v1, v2C and v3 versions. You can create, modify or delete templates and
bind NEs with templates.
Version: B 27
UNM2000 Network Convergence Management System V2R11 Product Description
Pre-configuration
This function unties the service configuration from the status of connection between
a device and the UNM2000, and improves the configuration efficiency.
The UNM2000 supports managing network access status of devices. You can query
the network access status of a device, and set and deliver the resource
management system interconnection status of the device or selected card to enable
network access.
Signaling Tracing
The UNM2000 supports tracing the signaling of a specified object and parsing real-
time / historical data packets. You can set the content displayed in data packets and
save the collected data packets as a file.
28 Version: B
6 Basic Function of the UNM2000
Configuration Synchronization
u Migrates the ONUs between the PON ports of the same OLT / different OLTs.
u Migrates all / some ONUs from multiple PON ports in different slots to another
PON port.
The configurations that can be migrated include LAN port service configuration,
voice port service configuration, bandwidth template binding information, VEIP data
service configuration, WAN connection service, WIFI service configuration, GPON
service bandwidth, QINQ domain template binding information, ONU management
VLAN, traffic policies bound to ONU ports and ONU attribute configuration.
Checking Configurations
The UNM2000 provides configuration data check. During service configuration, the
UNM2000 will automatically verify the validity of configuration data. Once detecting
a configuration conflict or invalidity, the UNM2000 will prompt users to modify the
data until they are valid.
This function improves the configuration accuracy, saves the troubleshooting time
caused by service configuration errors at a later stage, and enhances the
configuration efficiency.
Version: B 29
UNM2000 Network Convergence Management System V2R11 Product Description
Configuration Backup
The UNM2000 provides configuration backup. You can set different export tasks to
export configuration files, NE software, card software or MAC addresses of PON
ports.
Exported configuration files will be saved to file folders named by export time,
convenient for you to find and view desired files. You can also import the
configuration file backed up on the local computer to the UNM2000.
Upgrade
The UNM2000 supports system software upgrade, ONU batch upgrade, service
card batch upgrade and whole package upgrade by setting upgrade tasks.
Data Synchronization
Note:
The UNM2000 provides multiple topology management views, which enables you to
manage devices and the network in multiple dimensions conveniently.
u Main topology view: The main topology view of the UNM2000 is composed of
the object tree pane and the physical topology view.
30 Version: B
6 Basic Function of the UNM2000
4 You can set different background images for logical domains in the main
topology.
u Sub-topology view: Graphically displays the topology between OLT and ONU.
Version: B 31
UNM2000 Network Convergence Management System V2R11 Product Description
When the network scale is too large and the current view cannot cover all the
network details, you can use Bird-eye view to have an overall view of the
entire network. The purplish red frame in the Bird-eye view pane shows the
displayed area in the current view. You can drag the frame using the mouse to
adjust the displayed area.
32 Version: B
6 Basic Function of the UNM2000
u Hot region view: The UNM2000 automatically generates a topology view of the
hot region according to user-defined settings. In this way, you can manage and
monitor the important devices by groups.
u Topology filtering: The main topology can be filtered and displayed according to
your filtering settings.
4 You can set multiple logical domains, NEs and links as the filtering criteria.
The filtering result should match all the criteria. The UNM2000 performs
fuzzy match according to the logical domain, NE and connection name
entered.
4 The modified topology filtering settings take effect for the current user and
maintain valid when the user logs in next time. If a user sets the filtering
criteria on multiple clients simultaneously, only the latest filtering settings
will take effect when he or she accesses the main topology next time.
Version: B 33
UNM2000 Network Convergence Management System V2R11 Product Description
The UNM2000 uses different colors and icons to represent logical domains and NE
alarms / statuses, as shown in and .
34 Version: B
6 Basic Function of the UNM2000
u The ground color of a topology node icon indicates the polling status (normal,
unknown, communication interrupted, etc.) and alarm level of the NE. The
displayed ground color of an icon represents the highest level of all alarms on
the NE. describes the alarm colors.
Green Normal
Light grey Unknown
u The icon at the top right corner of a monitored object indicates the latest special
alarm according to the definition. For the definition of special alarms, you can
view it through Legend on the toolbar of the topology view.
u A logical domain icon displays the color of the highest-level alarm and the icon
of the latest special alarm on the NE nodes in the logical domain. The
UNM2000 supports manually dragging or sorting NEs in a logical domain,
which is convenient for finding desired NEs.
Version: B 35
UNM2000 Network Convergence Management System V2R11 Product Description
If the fiber (trunk fiber or branch fiber) between the PON port and ONU is broken,
the UNM2000 will display the PON_LINK_LOSS or LINK_LOSS alarm, and the link
in the sub-topology view will turn red.
36 Version: B
6 Basic Function of the UNM2000
The alarm management is used to perform real-time monitoring on the failures and
abnormalities generated during device operation, and provide detailed information
and analysis of the alarms, so as to help isolate and handle failures quickly.
Alarm Classification
The UNM2000 classifies the alarms according to the alarm levels and alarm
statuses.
The UNM2000 sets the alarm levels according to the severity of the alarms.
Generally there are four alarm levels: the critical alarm, the major alarm, the minor
alarm, and the warning alarm.
u Critical alarm: Refers to the alarm which causes the service interruption and
requires immediate troubleshooting.
u Major alarm: Refers to the alarm which affects services and requires immediate
troubleshooting.
u Minor alarm: Refers to the alarm which does not affect services but requires
troubleshooting to avoid deterioration.
u Warning alarm: Refers to the alarm which does not affect the existing services
but may influence services later; you can decide whether to handle it as
desired.
The UNM2000 classifies the alarms into the current alarms and the alarm history
according to the alarm statuses.
u Current alarm: The alarm data saved in the current alarm database of the
UNM2000.
Version: B 37
UNM2000 Network Convergence Management System V2R11 Product Description
u Alarm history: The current alarms that have been handled will be alarm history
after a preset period.
The alarm history will be saved into the alarm history database from the current
alarm database.
Alarm display is an important measure for informing you about the network
operation conditions in a timely manner. The UNM2000 provides multiple forms of
alarm display.
u Alarm view: You can view the current alarms and historical alarms of the
selected device in the UNM2000 window.
4 View the alarm details to obtain the alarm name, location information and
additional information. View the additional information to know about the
performance value that exceeds the threshold and triggers the alarm.
u Alarm panel prompt: The alarm panel in the home page of the system can
display the total alarm number of each level in the entire network. The
UNM2000 can display the total number of the alarms that comply with the
profile conditions in the alarm panel according to the pre-set profile.
u Alarm audio-video prompt: When an alarm occurs in the device, the UNM2000
will generate an audio prompt, and intelligently control the audio prompt play
time of various alarms. Meanwhile, the corresponding alarm indicator will be
illuminated in the color corresponding to the alarm level. When alarms of
several levels coexist, the alarm indicator LED will be illuminated in the color
corresponding to the alarm at the highest level among them.
u Alarm sequence: You can set the alarm sequence according to your concern.
38 Version: B
6 Basic Function of the UNM2000
u Alarm information exporting and saving: You can export and save the desired
alarm information in the format of TXT, Excel, CSV, XML, PDF or HTML, so as
to learn the historical operation conditions of the network.
The UNM2000 ensures the consistency between the data it saves and the data on
the device by means of automatic update in the occasion of connection, automatic
polling, manual polling and Trap active reporting.
u Automatic polling: The manager module of the UNM2000 will automatically poll
about the managed device at regular intervals. The device will report the latest
data to the UNM2000 after receiving the polling information, and the UNM2000
will compare the received new data with the old data. If the new data is the
same with the old one, the UNM2000 will not process the new data; if different,
it will process the different part of the data.
u Manual polling: After a device is selected, the UNM2000 will poll about the
selected device and process the newly received data following the automatic
polling principle.
u Trap report: If a new alarm is generated in the equipment prior to the next
UNM2000 poll cycle, the equipment will report Trap to the UNM2000 in a timely
manner. The Trap contains the information of this change, and the UNM2000
will respond according to the information contained in the Trap. If a new alarm
is generated, the alarm panel of the UNM2000 will update automatically and the
alarm list will display the new alarm automatically, so that you can understand
the alarm information of the network in a timely manner.
Version: B 39
UNM2000 Network Convergence Management System V2R11 Product Description
Locating Alarms
The UNM2000 supports the alarm isolation function, so that you can isolate the
alarm to the port level using the UNM2000.
Alarm Shield
u Alarm confirmation: the measure to identify whether the alarm has been
processed by the administrator. The confirmed status indicates that the alarm
has already been handled by the administrator; while the unconfirmed alarm
indicates that the alarm has not been handled yet. The UNM2000 provides
manual confirmation and automatic confirmation of alarms. The UNM2000
provides the function of confirming and clearing alarms with one click. It
enables you to delete an alarm simultaneously when confirming it, improving
the maintenance efficiency.
u Alarm saving: You can save the historical alarms into files or delete them
directly. The saved alarm data will be deleted from the UNM2000 to free up
space, so as to guarantee the stability and high efficiency of the UNM2000. The
UNM2000 supports data saving at regular intervals, data saving according to
count of records and data saving according to number of days.
Alarm Clearing
Alarm clearing will change the status of the alarm to alarm clearing. The alarm can
be automatically or manually cleared.
40 Version: B
6 Basic Function of the UNM2000
u Manual clearing: If the UNM2000 does not receive the clearing alarm due to a
failure occurring in the network, you can clear the alarm manually.
Alarm Forwarding
You can set the alarm forwarding time for the alarm item. If the reported alarm
disappears within the set time period, the alarm will not be forwarded. However, if
the alarm persists at the end of the set time period, the alarm will be automatically
sent to the preset mobile phone or mail box of the maintenance staff, so that the
maintenance staffs can handle the network alarms in a timely manner.
Alarm Customization
u You can modify the alarm levels and highlight your concerned alarms. The
UNM2000 supports modification of alarm levels in different scopes in the entire
network, including levels of the global alarms, object alarms and alarms
concerning card / port types.
u You can set an alarm for your concerned parameter which is not defined
currently in the UNM2000 and set value range for generating the alarm. When
the device parameter reaches the set range, the UNM2000 will report the
alarm.
u The UNM2000 supports redefinition of alarm names. You can modify the pre-
defined alarm names to your desired ones according to the maintenance
requirements.
You can set the maintenance status of the managed object through the default
project or the customized project. The managed objects include NEs, cards and
ports. You can also configure the maintenance status of the selected NE by the
shortcut menu of NE in the main topology, which is more convenient. After setting
the NE to the maintenance status, the maintenance status icon appears for this NE
in the main topology. The maintenance status alarm does not influence the color of
the NE.
Version: B 41
UNM2000 Network Convergence Management System V2R11 Product Description
You can set multiple current alarm or alarm history query templates. The UNM2000
can open multiple alarm query windows concurrently so that you can monitor alarms
of different alarm templates.
The UNM2000 supports creating, modifying and deleting alarm flashing rules. If an
alarm is regarded as a flashing alarm, only the frequency of the subsequent flashing
alarms that meet the criteria will be reported. The UNM2000 only displays the first
flashing alarm with the flashing icon. By clicking the flashing alarm, you can view the
details of all the flashing alarms.
The UNM2000 supports creating, modifying and deleting frequency analysis rules.
After an alarm frequency analysis rule is set and the occurrence times of an alarm
over a specified time period exceed the preset number, the rule is triggered and the
UNM2000 will handle the alarm according to the preset policy.
42 Version: B
6 Basic Function of the UNM2000
Events are the notifications generated in the normal system operation and prompt
users actively. The UNM2000 classifies the events into four levels (critical, major,
minor and warning) according to the severity.
You can view the events in the entire network or certain events according to
specified conditions, and save the query conditions to a profile.
You can set the automatic report of the events that meet the specified conditions,
including reporting the latest events on the Event Report tab. You can also set the
automatic scrolling of the event list so that you can view the latest events in a timely
manner.
Version: B 43
UNM2000 Network Convergence Management System V2R11 Product Description
Signaling Tracing
Tracing the signaling is used to trace the signaling frame of the communication
between the current IAD and the voice communication card, so as to find the
communication faults in a timely manner. This function is only supported by the
FTTH-type and FTTB-type ONUs that support voice service.
Performance Classification
The UNM2000 can display the following three types of performance data:
u Real-time performance: The current performance data of the device are saved
at the device side and read by the UNM2000.
44 Version: B
6 Basic Function of the UNM2000
u Performance saving: You can save the historical performance data into files or
delete them directly. The saved performance data will be deleted from the
UNM2000 to free up space to guarantee the stability and high efficiency of the
UNM2000. The UNM2000 supports data saving at regular intervals and data
saving according to number of days.
Performance Comparison
The UNM2000 provides the function of performance comparison. The values of the
same performance parameter concerning the same port on the same device
collected in different cycles are put together. You can use this function to compare
the instant performance data of the selected device, so as to have a visible
knowledge of the change in performance data, understand the network operation
conditions and change trend, prevent network faults, and make appropriate
planning for the network operation.
u When creating a performance query template, you can copy from an existing
performance query template to create a new one.
The UNM2000 supports analyzing device traffic, optical power and device health by
charts.
Version: B 45
UNM2000 Network Convergence Management System V2R11 Product Description
The UNM2000 supports displaying the device PON traffic top ranking and device
health top ranking in charts.
46 Version: B
6 Basic Function of the UNM2000
User Management
When planning the UNM2000 users, you can properly assign operation authority to
users and restrict them to use the UNM2000 in appropriate scenarios.
u User management: The username and its password uniquely determine the
login, operation and management authority. After initial installation of the
UNM2000, it provides only one default user: admin. The admin user has all the
operation authority and management authority, and other users are directly or
indirectly created by the admin user.
Version: B 47
UNM2000 Network Convergence Management System V2R11 Product Description
u User group: Indicates a set of users. After a user is added into a group, this
user has all the authority bound with the group. The total authority of the user
includes the user's authority and the authority of the user group to which the
user belongs.
u User group management: By creating a user group, you can manage a batch of
users with the same authority. This function helps you manage users in a batch
manner and thus reduce the management cost. The UNM2000 provides five
default user groups: Administrators group, Security Admin Group, inspector
group, operator group and maintainer group.
When you create a user account, you need to set the user details, associated user
group, management domain, operation authority and access control list (ACL).
When a user enters incorrect passwords several times, this user will be locked, and
can be unlocked through the following ways:
u When the admin user is locked, it will be automatically unlocked after the preset
unlocking time expires.
u When a user other than the admin is locked, it will be automatically unlocked
after the preset unlocking time expires. It can also be manually unlocked by the
admin user.
48 Version: B
6 Basic Function of the UNM2000
The UNM2000 supports authorization and domain division management, which only
allows the user to deliver the operations within its domain authority scope to the NE.
Only the users belonging to the Security Admin Group can perform authorization
and domain division for other users.
u Domain division: Divides the objects (devices, services or data) in the network
into different domains. By assigning the domain authority to a user or user
group, the UNM2000 enables the user to perform operations on the objects
within its domain. Meanwhile, it supports directly assigning a device for a
specified user or user group. With domain division, the UNM2000 enables
different maintainers to manage network objects in different domains.
u Authorization division: With domain division, you can authorize a user or user
group by assigning a specific operation authority for it. With the authorization
division based on the domain division, you can enable the administrators with
different responsibilities (positions / operation and maintenance departments) in
the same area to have different operation authority on the managed objects
within the area.
The authorization and domain division function of the UNM2000 implements unified
management based on devices and authority assignment based on functions of the
devices.
The UNM2000 supports the domain-based management via the object tree as
follows:
u For a domain administrator user, the systems and cards not under his
management will not be displayed in the object tree tab.
u While displaying the alarm indicator LEDs, the system will filter the nodes that
are not under the management of the user and mark them with special icons.
Generally the filtering is performed on modules or objects of higher levels. As
for cards, the filtering is only performed on the EC2 card or the cards with
remote modules.
u The system filters the nodes that need not be displayed when generating the
object trees, including the object tree in the main GUI and the object trees in the
other operation GUIs.
Version: B 49
UNM2000 Network Convergence Management System V2R11 Product Description
u Object menu: Only users with full authority on the higher-level objects can add /
delete the lower-level objects or reset the card types; and only users with
authority on the module and its higher-level objects can check the physical
configuration.
u Main menu: The users with restricted authority on the domain cannot perform
the operations such as forcibly saving, importing and exporting. Also, they
cannot perform user management, domain management and command
authority management (which can only be executed by the advanced
administrators).
u The system filters the main menu and the object menu options (including
checking physical configuration, adding / deleting / importing / exporting logical
domains, and saving forcibly) according to the domain authority.
4 Basic operations on the objects at each level: Only users with authority on
all the lower-level objects of the selected object can add / delete the lower-
level objects.
u Only the users with authority on the system can set the performance collection
scheme.
Access Control
u To guarantee the security of the network, the UNM2000 allows the user to log in
only with the designated IP address and within the designated period of time.
Even if the ID and password of a certain user are stolen, the malicious user
cannot log in the UNM2000 server. In this way, the security of the UNM2000 is
enhanced.
u During network operation and maintenance, the network administrator can log
into the system as an advanced administrator and monitor the entire network. If
the operation of a user at a lower level is abnormal, the administrator can force
the user to log out (when the user logs out, the UNM2000 can save its topology
automatically), so as to guarantee the security of the system operation.
50 Version: B
6 Basic Function of the UNM2000
u When using the UNM2000 to maintain the network, you can manually lock the
UNM2000 client end if you are away from the keyboard for a certain period of
time, so as to protect the account being used by an illegal user. You can also
set to lock the client end automatically, so that the client end will be locked
automatically if no operation is performed on the UNM2000 for a specified
period of time. This function guarantees the security of the UNM2000 and the
network.
u The UNM2000 can set the maximum times that one account logs into the same
UNM2000, so as to guarantee the network security.
User Security
For guaranteeing the security of the UNM2000 accounts, you can use the
UNM2000 to set the maximum / minimum length of password, the maximum /
minimum period of password validity, whether the password can be set similar to
historical one, the minimum number of letters / digits contained by a password. You
can also enable the unlogged-in user policy, and temporarily close or delete the
accounts that have not logged in the UNM2000 for a specified duration.
Version: B 51
UNM2000 Network Convergence Management System V2R11 Product Description
Log Management
The logs record the user operation information and the important events occurring in
the system. By querying, gathering statistics of and saving logs regularly, the
administrator can detect illegal login and operations, and analyze the failures. By
browsing and gathering statistics of logs, the administrator can query the operation
information of the EMS and save the logs.
u Log type: The UNM2000 logs include operation logs, system logs, security logs
and northbound interface command logs.
u Log query / statistics: You can query logs by setting various query conditions,
such as user information, operation result, risk level, start time range, operation
name and operation objects to obtain the operation information of users in the
UNM2000 in real time.
u Log saving: The UNM2000 can delete the log data from the database and save
them as files into the specified file folder to avoid that too many resources are
occupied by the log data and improve the running performance of the EMS.
The UNM2000 supports overflow saving and manual saving.
u Authority of viewing logs: The advanced administrator and other system users
have different authority to view logs. The users other than the advanced
administrator can only view their own logs.
52 Version: B
6 Basic Function of the UNM2000
The UNM2000 provides the resource statistics and information import functions.
The UNM2000 provides physical configuration detection. You can detect the
incremental or full physical configurations of access NEs and synchronize the
configurations of all NEs or a single NE.
Batch Operation
u The UNM2000 supports modifying logical domains, NEs, card ports and ONU
names in a batch manner.
u The UNM2000 supports deleting NEs in a batch manner. You can select
multiple NEs and delete them in a batch manner.
Marking an NE
Version: B 53
UNM2000 Network Convergence Management System V2R11 Product Description
Resource Statistics
u NE Resource Statistics
u Card Resource Statistics
u Port Resource Statistics
u ONU Resource Statistics
Physical Resource u ONU Port Resource Statistics
Statistics u MSAN Port Resource Statistics
u Area Statistics
u Equivalent NE Statistics
u Switch Port Resource Statistics
u Custom Statistics
u ONU User Statistics
u Local VLAN Statistics
u NE MGC Service Statistics
u Device Type Statistics
u PON Device Capability Statistics
u ONU WAN Service Statistics
Other Type Statistics
u ONU Out of Service Time Statistics
u Management VLAN Statistics
u LLDP Info Statistics
u ONU Local Manager Configuration Statistics
u Optical Power Statistics
u GPON Service Bandwidth Statistics
54 Version: B
6 Basic Function of the UNM2000
The UNM2000 integrates the automatic inspection, PON traffic analysis, resource
analysis and fault diagnosis and location functions.
Automatic Inspection
Version: B 55
UNM2000 Network Convergence Management System V2R11 Product Description
The PON traffic analysis function features visualized data analysis, intelligent
warning and alarm management and precise capacity analysis. It helps you
comprehensively understand the service traffic and bandwidth usage of the PON
network, gather statistics of and analyze traffic growth trend and resource utilization
efficiency of the PON network, and effectively predict the necessity to expand the
capacity of network resources or balance and optimize resource allocation so as to
prevent network congestion and guarantee the transfer quality of various services.
u Provides the topology of the entire network, where threshold-crossing NEs are
highlighted and the corresponding information is provided. In this way, network
operators can directly view the traffic status of the entire network.
u Supports analyzing the traffic of OLT uplink ports, OLT PON ports, ONU PON
ports and links.
56 Version: B
6 Basic Function of the UNM2000
u Supports displaying traffic trends of OLT uplink ports, OLT PON ports and ONU
PON ports in graphs.
u Supports ranking Top N OLT uplink ports, OLT PON ports and ONU PON ports
by traffic.
u Supports collecting statistics of and analyzing the traffic load of OLT uplink
ports and PON ports, providing basic data for the planning of uplink ports and
user resources.
u Supports second-level traffic monitoring to help clients monitor the traffic of key
areas precisely.
Resource Analysis
The UNM2000 supports collecting statistics of physical resource online ratio and
network resource information by area.
Version: B 57
UNM2000 Network Convergence Management System V2R11 Product Description
The UNM2000 supports intelligent fault location. You can quickly locate a fault,
improving the fault isolation efficiency.
u Detection template: You can detect network access failures, IPTV program
interruption faults, WIFI service faults and voice service faults using system
default templates or self-defined templates.
u Diagnosis report: You can view the detection result and manually export an
intelligent fault location report in Excel format.
58 Version: B
7 Technical Specifications
Management Capacity
Performance Specification
Standards
Version: B 59
UNM2000 Network Convergence Management System V2R11 Product Description
Item Specification
60 Version: B
7 Technical Specifications
Item Specification
High packet loss rate of the network will cause performance degradation of the
UNM2000 and lower the success rate of the UNM2000 in service distribution.
u When the network packet loss rate is lower than 10%, the success rate of the
UNM2000 in service distribution is not lowered visibly.
u When the network packet loss rate is higher than 10% but lower than 15%, the
success rate of the UNM2000 in service distribution is visibly lowered.
u When the network packet loss rate is higher than 15%, the performance of the
UNM2000 degrades sharply, and extensive service distribution failure occurs.
u If the server manages 1000 OLTs and accesses 128 client ends, the bandwidth
of the communication between the server and each client end should be no
less than 100M.
Version: B 61
UNM2000 Network Convergence Management System V2R11 Product Description
u If the server manages more than 1000 OLTs and accesses 128 client ends, the
bandwidth of the communication between the server and each client end
should be no less than 1G.
u The bandwidth for the communication between the server and the northbound
interface for the TL1 service should be no less than 100M.
u The bandwidth for the communication between the server and the CORBA
northbound interface should be no less than 100M.
u The bandwidth for the communication between the server and the WebService
northbound interface should be no less than 100M.
u The bandwidth for the communication between the server and the superior
network management system should be no less than 100M.
7.3 Standards
This section introduces the standards and protocols followed by the UNM2000.
u The interfaces between the UNM2000 and equipment comply with RFC
standards such as SNMP and MIB-II.
u The CORBA northbound interface complies with the TMF MTNM series
standards.
u The Socket northbound interface complies with the OMC system function
specifications, OMC system general technical specifications and OMC system
northbound interface data specifications.
62 Version: B
8 External Service Ports
If the firewall is deployed in the network, users should enable the external service
ports of the UNM2000 to ensure the normal communication. The external service
ports used by the UNM2000 are listed below.
Process
Source IP Source Destination Sink Port
of the Sink Protocol Port Description
Address Port IP Address (Listening)
Port
The FTP server service port,
The IP providing the FTP file transfer
NE IP address of the service. It is used to upgrade the
Any 20 FTP TCP
address UNM2000 NE software, back up the NE
server data and upload the NE
configuration.
Version: B 63
UNM2000 Network Convergence Management System V2R11 Product Description
Process
Source IP Source Destination Sink Port
of the Sink Protocol Port Description
Address Port IP Address (Listening)
Port
It communicates with the device
via SNMP. It is the operation and
The IP maintenance port, which
address of receives the SNMP commands
the Any NE IP address 161 SNMP UDP sent from the UNM2000 server.
UNM2000 If it is disabled, the
server communication between the
UNM2000 and the SNMP device
will fail.
It communicates with the device
The IP via SNMP. The device 4.0
address of version only supports the 162
the Any NE IP address 162 SNMP UDP port heartbeat communication. If
UNM2000 it is disabled, the communication
server between the UNM2000 and the
SNMP device will fail.
Process
Sink Port
Source IP Source Destination of the
(Monitor- Protocol Port Description
Address Port IP Address Sink
ing)
Port
The IP
The IP address
address of the The FTP service command
of the UNM2000 Any 21 FTP TCP
UNM2000 port.
client
server
The IP The FTP service data port. It
The IP address
address of the is 20 in PORT mode and
of the UNM2000 Any 20 FTP TCP
UNM2000 based on the FTP
client
server configuration in PASV mode.
64 Version: B
8 External Service Ports
Table 8-2 Ports between the Server and the Client (Continued)
Process
Sink Port
Source IP Source Destination of the
(Monitor- Protocol Port Description
Address Port IP Address Sink
ing)
Port
The port used by Windows
OS remote desktop protocol
(RDP). The Windows
The IP provides the remote desktop
The IP address
address of the service via this port. It is
of the UNM2000 Any 3389 RDP TCP
UNM2000 enabled only when the
client
server remote desktop is used to
operate the Windows server.
The UNM2000 does not use
the port.
The IP
address of the The tomcat9 monitoring port
The IP address
UNM2000 The tomcat9 is used by the
of the UNM2000 Any 8080 tomcat9 TCP
client UNM2000 client for
client
publishing publishing.
server
The nginx is a high-
performance HTTP and
The IP
The IP address reverse proxy server. It is
address of the
of the UNM2000 Any 52302 nginx TCP used for communication
UNM2000
client between the client and the
server
UNM2000 network
management tool.
The IP
The IP address
address of the icegri- The port used by the
of the UNM2000 Any 52001 TCP
UNM2000 dregistry icegridregistry process
server
server
The IP
The IP address
address of the 26011 to The dynamic port of the ICE
of the UNM2000 Any iceboxd TCP
UNM2000 26299 service
client
server
Version: B 65
UNM2000 Network Convergence Management System V2R11 Product Description
66 Version: B
8 External Service Ports
Sink Port
Source IP Source Destination IP Process of
(Monitor- Protocol Port Description
Address Port Address the Sink Port
ing)
Version: B 67
UNM2000 Network Convergence Management System V2R11 Product Description
Table 8-4 Ports Between the Server and the OSS (Continued)
Sink Port
Source IP Source Destination IP Process of
(Monitor- Protocol Port Description
Address Port Address the Sink Port
ing)
The IP address
of the
OSSIP Any 161 iceboxd UDP The SNMP alarm interface.
UNM2000
server
68 Version: B
8 External Service Ports
Table 8-5 The Port Between the Active and Standby Stations of the VERITAS HA System
Version: B 69
UNM2000 Network Convergence Management System V2R11 Product Description
Table 8-6 Ports Between the PAS Database and the Process
The IP address
The IP address of the The icegridnode
of the PAS Any 60206 icegridnode TCP
PAS server process port
server
The IP address The port used by
The IP address of the 60310 to icebox_
of the PAS Any TCP the PAS internal
PAS server 60510 stlpd
server service process
The IP address
The third-party icebox_ The global FTP
of the PAS Any 10201 TCP
service IP address stlpd service
server
70 Version: B
Appendix A Abbreviations
IP Internet Protocol
International Telecommunication Union-Telecommunication
ITU-T
Standardization Sector
NE Network Element
NEL Network Element Level
NML Network Management Layer
Version: B 71
Product Documentation Customer Satisfaction Survey
Thank you for reading and using the product documentation provided by FiberHome. Please take a moment to
complete this survey. Your answers will help us to improve the documentation and better suit your needs. Your
responses will be confidential and given serious consideration. The personal information requested is used for
no other purposes than to respond to your feedback.
Name
Phone Number
Email Address
Company
To help us better understand your needs, please focus your answers on a single documentation or a complete
documentation set.
Documentation Name
Code and Version
12. Additional comments about our documentation or suggestions on how we can improve:
Thank you for your assistance. Please fax or send the completed survey to us at the contact information
included in the documentation. If you have any questions or concerns about this survey please email at
[email protected]