GGM8000 Site Gateway / CCGW Router Configuration Instructions and general info.

Randy Wendel-updated OCTOBER 2020

PING THE ZONE CONTROLLER: (optional test of site/device connectivity)

A simple connectivity test to see if you can ping the zone controller.
Connect laptop to a maintenance switch or directly into Port 1 LAN jack of the site router. Boot BART.
You should be able to ping the Zone controller IP: 10.x.233.101 (X=zone)

PHYSICAL ITEMS NEEDED:

-BART stick
-StarTech USB serial adaptor (Prolific chipset!), Serial cable, null modem db9, female db9 barrel
gender changer, LAN cable

GOAL OF THIS DOCUMENT:

Walks you through the steps to program a site router:
-Acquire 4 necessary files from the MNDOT file library (one of them is SPECIFIC to the site/device)
-Assign an IP address of the device (via serial console port) using a terminal prog (Putty, etc)
-Setup and run 3com TFTP server to transfer the 4 files (uses BART)

OBTAINING FILES FROM MNDOT LIBRARY:

You will need access to Armer network to obtain the 4 necessary files!!!
These files are:
boot.ppc (router operating system)
staticRP.cfg (tells the router about all audio routes)
site specific.cfg (to be re-named boot.cfg after it has been downloaded)
sys (file with no extension [ sys.nothing ], but required according to John Anderson)
Dave Theis says this file is NOT needed (October 2018).

ACCESS THE MNDOT LIBRARY AND DOWNLOAD DEVICE FILES:

-double click on This PC on your BART desktop.
-from the top menu’s, click Map network drive. Choose a drive letter and folder, i.e “Z”.
-type: \\10.111.111.111\library in the folder adress line.

-when the credentials window appears, enter your assigned MNDOT login name and password:
Example: [email protected] Password (your MNDOT password).

If you are accessing the library from an NM client or somewhere else that you already entered your
MNDOT login info, you will not be asked to enter your credentials again, but you will still need to specify
the library folder location.

BROWSE FOLDERS FOR DEVICE FILES:

Below are the filenames and folder locations. (NOTE the folder names include the VERSION numbers
which may be newer than the examples below). Copy these files to a folder. The _MyStuff folder in
BART is a good suggestion. Create a sub-folder within and save there, etc.

boot.ppc and sys (sys file has no suffix)

library:\_common-public\software\2020.1 Router OS cd_18.2.2.03\KS

staticRP.cfg and site-specific.cfg note below

library:\_common-public\Router - Switch Configs\ARMER_v2020.1_2020-9-24\configurations\routers

NOTE: The site-specific.cfg filename will utilize the following filename convention (or similar):
zone-type-site-thing _ loopback ip address
for example: a site rf gateway router 1 for ISR site 36 in zone 3 (MCF DOC Red Wing) is named:
z03rf036r1_10.103.36.252.cfg. A CCGW will be Z03nmd36c01_10.103.36.85.cfg, etc.
Once you have saved this file, rename it to: boot.cfg. (the router boots from this specific location file)
TRANSFER FILES TO DEVICE:
To transfer files, connect a serial cable with null modem, gender changer and LAN cable to the device.
Connect a Null modem and serial cable to the console port of the router.
Open a terminal program (PuTTY). For connection type in PuTTY screen, select SERIAL, then click
OPEN to open the terminal screen.
Hit enter until you are prompted for a login name.
the NetLogin name is: root
the password is left blank for a fresh router.
If the router is already configured, the password is: Motorola1 (or possibly Motorola1rola1)

Once you are in the router you will see a prompt. This prompt will be either [enterprise#] (for a fresh
router, or [z03rf036r1#] (or something similar for a router that has been already configured). The screen
may display AUTHENTICATION IN PROGRESS which should timeout after a minute. At some point it
should revert to trying LOCAL authentication. Try re-logging in again if needed.

At the prompt type: sh -ip net

This will display the IP addresses configured in the unit.
For a fresh router, there will be no IP addresses at all.
For a router that has been configured you will see the site-specific IP for LAN port 1 and port V1.

ASSIGN THE IP TO THE UNIT (LAN port):

Connect a LAN cable from your computer to router LAN port 1.
(Newer laptops will auto-sense the connection and will auto-crossover as needed).
In order to transfer files into the router your laptop must be on the same subnet as Port-1 of the router.
Change your laptop IP to be something on the same subnet of the router, or if the router is fresh, assign
an IP to LAN Port-1: 20.0.0.2 (according to the device’s manual).
Or, simply assign the actual Ethernet port-1 IP address of the device (i.e. 10.2.5.85 for example)
If you use the actual assigned IP address of the device, replace the below 20.x.x.x accordingly.
Note: If you make a typo when entering command line info, using the BACKSPACE button to correct will
actually be considered an unrecognized character. If you make a typo, retype the entire line again.
The command to do this is: setd !1 -ip net = 20.0.0.2 255.255.255.0 (or 10.2.5.85 255.255.255.0) etc.
(NOTE: include a space on both side of the = sign!!!)
Then set your laptop IP to 20.0.0.1 with a subnet mask of 255.255.255.0
(do this only for a fresh router. If the router is already configured set your computer's IP to one
in the same subnet of the router)

LAUNCH FTP SERVER:

All you likely need to configure in the TFTP server is specify the local directory/folder where you placed
the 4 configuration files (i.e. _MyStuff). Almost all of the other settings should remain at default.
Some TFTP servers require you to choose a connection from a list of your computers available
connections. If this is the case, choose the connection that is plugged into the router.
Once you have the TFTP server configured the way you want, stop the service and then re-start it.
(do not close the program, just press the STOP button and then the GO/START button)
This will ensure that the TFTP server is listening to the correct port, and sending files from the correct
directory.
Now, go back to your terminal program (PuTTY) and tell the router to pull the files over.
The command to do this is as follows: (AGAIN, if you make a typo, start the line over again)

(next page)
Fresh site gateway router/ccgw:

copy 20.0.0.1:boot.cfg a:/primary/boot.cfg

the boot.cfg file will copy over. then type:
copy 20.0.0.1:staticRP.cfg a:/primary/staticRP.cfg
the staticRP.cfg file will copy over. then type:
copy 20.0.0.1:sys a:/primary/sys
the sys file will copy over. then type:
copy 20.0.0.1:boot.ppc a:/primary/boot.ppc
the boot.ppc file will copy over. This file is around 6 Mb so it will take about 30 seconds

Pre configured router:

copy [your computer's IP address]:boot.cfg a:/primary/boot.cfg

Here is a little tidbit: In the GGM 800 manual, a file called ACL.cfg is referenced as a file you should load
into the router. !DO NOT LOAD THIS FILE!. It is an access control list file that will prevent any remote
access to the router. It does not affect call routing or system performance, it just locks out almost all
remote access. Only use the 4 files mentioned above.

After you have all 4 files copied over, at the prompt type: rb
This is the reboot command and the router will load up on the new config.
You will see startup information in PUTTY via your serial connection.

IMPORTANT LAST STEP !!!

You can log into the router again (root with no password), and when you do you should see the prompt of
whatever site you are at. i.e. z03rf036r1# (instead of enterprise or whatever site the router was previously
config’d for). At this point the router is ready for normal use. However, a few passwords need to be set.
Type the command SPW and press enter key. You will see 3 selection choices. Press 1 to change the
network manager password. If prompted for the old password, simply hit ENTER. When prompted for
the new password, type Motorola1.
Next, setup the Radius secret share. Type this command EXACTLY:
setd –ac secret = “Motorola1rola1” <enter>. Note there is a space before and after the equal = sign.
You should then get the command prompt.
Connect the ethernet and T1 cables up to the router (connect device to Armer network). Test to see
if Radius is working correctly by telneting into the router (from an Armer network connection) using your
ARMER login credentials.

Other Notes (S2500 only):

If device is the older S2500 gateway router (white housing), the boot and sys files needed may not be
located in the most current-version MNDOT library folders. You will need to go back to earlier version
folders since the S2500 models were replaced with GGM8000 models. Also, if you are configuring a
replacement S2500, you WILL need all LAN / T1 cards installed or you will be unable to configure it. The
top cover removes via 2 screws in the rear and it will come off. Cards are installed onto main board via
small header connectors and 2 screws to hold them in place.

MNDOT ROC: 651-234-7950

MNDOT John Anderson: 651-234-7951
MNDOT Dave Wilson: 651-283-9951