Академический Документы
Профессиональный Документы
Культура Документы
Administrator Handbook
Table of contents
1.
Introduction .................................................................................................................................. 12
1.1
Copyrights ............................................................................................................................... 12
1.2
Trademarks ............................................................................................................................. 12
2.
3.
Mounting ....................................................................................................................................... 14
4.
4.1.1
Specifications..................................................................................................................... 15
4.1.2
4.2
5.
4.2.1
Specifications..................................................................................................................... 17
4.2.2
4.2.3
Wizard ..................................................................................................................................... 20
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.1.8
5.1.9
5.1.10
6.
6.1.1
Login .................................................................................................................................. 25
6.1.2
Logout ................................................................................................................................ 26
6.1.3
6.2
6.2.1
Administrator ...................................................................................................................... 27
6.2.2
6.2.3
Crew .................................................................................................................................. 27
6.2.4
7.
Navigation Pattern................................................................................................................... 31
7.1.1
7.1.2
7.1.3
7.1.4
Weblets .............................................................................................................................. 34
7.1.5
7.1.6
Tables ................................................................................................................................ 35
7.2
7.2.1
7.2.2
7.3
Home ....................................................................................................................................... 38
7.3.1
Connectivity ....................................................................................................................... 39
7.3.2
7.3.3
7.3.4
My Traffic ........................................................................................................................... 43
7.3.5
Connection......................................................................................................................... 44
7.4
My Profile ................................................................................................................................ 46
7.4.1
Account .............................................................................................................................. 47
7.4.2
7.4.3
Usage ................................................................................................................................ 49
7.4.4
Favorites ............................................................................................................................ 51
7.4.5
7.4.6
Authorizations .................................................................................................................... 54
7.5
8.
Intranet .................................................................................................................................... 55
7.5.1
7.5.2
7.5.3
FAQ ................................................................................................................................... 60
7.5.4
7.6
Newsroom ............................................................................................................................... 63
7.7
Support .................................................................................................................................... 65
7.7.1
7.7.2
7.7.3
Contact .............................................................................................................................. 68
Connectivity .................................................................................................................................. 69
8.1
Terminals (WAN)..................................................................................................................... 69
8.1.1
8.2
8.3
8.3.1
8.3.2
8.4
8.4.1
8.4.2
8.4.3
8.5
9.
8.5.1
8.5.2
8.5.3
VPN ................................................................................................................................... 82
8.5.4
Firewall .............................................................................................................................. 85
8.5.5
Overview ................................................................................................................................. 88
9.2
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.3
9.3.1
9.3.2
9.3.3
9.3.4
9.3.5
9.3.6
9.3.7
9.3.8
11.2
11.2.1
11.2.2
11.2.3
12.2
12.2.1
12.3
12.4
12.5
12.6
12.7
12.7.1
13.1.1
13.1.2
13.1.3
13.1.4
13.2
13.3
13.4
13.4.1
13.4.2
13.5
13.5.1
14.2
14.3
14.4
14.4.1
14.4.2
14.4.3
14.4.4
14.5
14.6
14.6.1
14.6.2
14.6.4
14.7
14.7.1
14.7.2
14.7.3
14.7.4
14.7.5
14.7.6
14.8
15.2
15.2.1
15.2.2
15.3
15.3.1
15.3.2
15.4
15.4.1
15.4.2
15.4.3
15.5
15.6
15.7
15.8
15.8.1
Tables
Table 1: Hardware Specifications Rack Unit ......................................................................................... 15
Table 2: Hardware Specifications Wall Unit .......................................................................................... 17
Table 3: Access Rights .......................................................................................................................... 30
Table 4: Display of Sections .................................................................................................................. 32
Table 5: Contents of the Home Page .................................................................................................... 38
Table 6: Account Information Details .................................................................................................... 47
Table 7: Usage Log Details ................................................................................................................... 50
Table 8: Vessel Details .......................................................................................................................... 66
Table 9: Broadband Terminals Supported ............................................................................................ 69
Table 10: Communication Channels ..................................................................................................... 80
Table 11: Traffic Log Details ............................................................................................................... 124
Table 12: Credit Log Details ................................................................................................................ 125
Table 13: Change Log Details ............................................................................................................. 126
Table 14: Event Log Details ................................................................................................................ 129
Table 15: Predefined Firewall Filter ..................................................................................................... 149
Table 16: System Details..................................................................................................................... 168
Table 17: System Status Details ......................................................................................................... 172
Table 18: List of Events ....................................................................................................................... 188
Table 19: Supported Controlled Devices ............................................................................................. 189
Figures
Figure 1: Power Supply Cabling ............................................................................................................ 19
Figure 2: Vizada XChange Box Login Page .......................................................................................... 25
Figure 3: Logout .................................................................................................................................... 26
Figure 4: Mobile Login Page.................................................................................................................. 26
Figure 5: Example of the User Interface ................................................................................................ 31
Figure 6: Top Navigation Bar................................................................................................................. 32
Figure 7: Left Navigation Bar ................................................................................................................. 33
Figure 8: Weblet Navigation .................................................................................................................. 34
Figure 9: Example of a Collapsible Panel ............................................................................................. 34
Figure 10: Example of a Double Square ............................................................................................... 34
Figure 11: Example of a table................................................................................................................ 35
Figure 12: Example of an Overview of Values ...................................................................................... 36
Figure 13: Example of editable Data ..................................................................................................... 37
Figure 14: Captains Home Page .......................................................................................................... 38
Figure 15: Example of Current Connection ........................................................................................... 39
Figure 16: Example of Traffic On Board ............................................................................................... 40
Figure 17: Example of Traffic Alerts ...................................................................................................... 41
Figure 18: Traffic Alerts for Crew member ............................................................................................ 42
Figure 19: Example of My Traffic .......................................................................................................... 43
Figure 20: Example of My Connection .................................................................................................. 44
Figure 21: Opening Channel ................................................................................................................. 44
Figure 22: Connection Details ............................................................................................................... 45
Figure 23: Time Window Message ........................................................................................................ 45
Figure 24: My Profile ............................................................................................................................. 46
Figure 25: Changing a Password .......................................................................................................... 48
Figure 26: Usage ................................................................................................................................... 49
Figure 27: Favorites ............................................................................................................................... 51
Figure 28: Adding a New Favorite ......................................................................................................... 51
Figure 29: Personal Address Book ........................................................................................................ 52
Figure 30: Authorizations Profile Overview ........................................................................................... 54
Figure 31: Intranet ................................................................................................................................. 55
Figure 32: Local Library ......................................................................................................................... 56
Figure 33: Managing Categories ........................................................................................................... 56
Figure 34: Rename Category ................................................................................................................ 57
Figure 35: Delete Category ................................................................................................................... 57
Figure 36: Status Bar ............................................................................................................................. 58
Figure 37: Remote Library ..................................................................................................................... 59
Figure 38: FAQ ...................................................................................................................................... 60
Figure 39: Question and Answer ........................................................................................................... 60
Figure 40: Shared Address Book .......................................................................................................... 61
Figure 41: Newsroom ............................................................................................................................ 63
Figure 42: Detailed News ...................................................................................................................... 64
Figure 43: Support ................................................................................................................................. 65
Figure 44: Box Details ........................................................................................................................... 67
Figure 45: Contact Form ........................................................................................................................ 68
Figure 46: Device Overview .................................................................................................................. 71
Figure 47: Activating the Terminal ......................................................................................................... 73
Figure 48: Default Device ...................................................................................................................... 74
Figure 49: Connectivity Test .................................................................................................................. 75
Figure 50: Device Switching .................................................................................................................. 76
Figure 51: Terminal Management ......................................................................................................... 77
Figure 52: Editing the Device ................................................................................................................ 78
Figure 53: Open VPN Settings .............................................................................................................. 82
Figure 54: Open VPN Details ................................................................................................................ 83
Figure 55: GRE VPN Details ................................................................................................................. 84
Figure 56: Applied Rules ....................................................................................................................... 85
Figure 57: Firewall ................................................................................................................................. 85
Figure 58: Terminal Firewall .................................................................................................................. 86
Figure 59: Device Access ...................................................................................................................... 87
1.
INTRODUCTION
This user manual is a complete guide to using the Vizada XChange Box.
1.1
Copyrights
All rights reserved. This publication and its contents are proprietary to Astrium Services. No part of this
publication may be reproduced in any form or by any means without the prior approval of Astrium
Services.
Astrium Services has provided every effort to ensure the correctness and completeness of the material
in this document. However Astrium Services shall not be liable for errors contained herein. The
information in this document is subject to change at any time without notice. Astrium Services makes
not warranty of any kind with regard to this material including but not limited to the implied warranties
of merchantability and fitness for a particular purpose
1.2
Trademarks
Astrium Services trademark referenced in this document is the property of the holding company of
Astrium Services.
2.
The following general safety precautions and warning must be observed when operating and servicing
the Vizada XChange Box. Failure to comply with these precautions or with specific warnings given
elsewhere in this manual violates the safety standards governing the design, manufacture and
intended use of the equipment. Astrium Services assumes no liability for the end-users failure to
comply with the present terms.
Before handling any equipment, be fully aware of the hazards of working on electrical circuitry.
Ensure that users are familiar with standard practices for preventing accidents. Please observe
the following safety guidelines when installing or handling the Vizada XChange Box:
Always disconnect all power supply connections before working on Vizada XChange Box
hardware.
Ensure there is adequate air circulation and avoid any risk of tipping over by not stacking or
balancing the box on top of other devices. Ensure the installation is firmly and securely in place.
Check out possible work area hazards, such as damp floors, ungrounded power extension cables,
and missing safety grounds.
Do not carry out any action that creates a potential hazard to people or renders the equipment
unsafe.
Do not work alone if there is the slightest risk of a potentially hazardous condition.
The chassis of the equipment is tamper proof and should never be opened under any
circumstances. Doing so will void the warranty.
Do not work on the device during periods of lightning activity. It is especially important not to
connect or disconnect cables at this time, as the equipment could act as a conductor.
3.
MOUNTING
Do not stack or balance the equipment on top of other devices. This prevents problems due to
tripping over cords and cables, and allows air to circulate. Check that the installation is fixed
securely in place.
Install the box in an open rack whenever possible. If you install it in an enclosed rack, make sure it
has adequate ventilation. Do not add too many devices as each unit generates heat. An enclosed
rack should have louvered sides and a fan to cool the air.
When mounting a chassis in an open rack, ensure that the rack frame does not block the intake or
exhaust ports. If the chassis is installed on slides, check the position of the chassis when sliding it
all the way into the rack.
In an enclosed rack which has a ventilation fan in the top part, the excess heat generated by
equipment near the bottom of the rack can be drawn upwards into the intake ports of the
equipment above. Make sure you provide adequate ventilation for the equipment at the bottom of
the rack.
4.
4.1
4.1.1 Specifications
MAIN BOARD
MAIN MEMORY
OPERATING
SYSTEM
LAN FEATURES
I/O INTERFACE
FRONT
I/O INTERFACE
REAR
DEVICES
POWER INPUT
DIMENSIONS
CERTIFICATION
CE Approval
FCC Class A
UL
WAN3
LAN1
WAN1
LAN2
WAN2
Back-Panel:
Power Supply
Fans
ON / OFF
OUT
IN1
IN2
IN3
4.2
4.2.1 Specifications
Supports Intel Core 2 Duo / Pentium Dual-Core /
Celeron processors in LGA775 package
Supported FSB: 800MHz / 1066MHz / 1333MHz
Intel GM45 and ICH9M chipset
MAIN BOARD
MAIN MEMORY
OPERATING
SYSTEM
4 GB DDR2-SDRAM
Linux
4x GbE LAN interfaces onboard
LAN FEATURES
I/O INTERFACE
DEVICES
POWER INPUT
HUMIDITY
OPERATING
TEMPERATURE
DIMENSIONS
0C ~ +45C
142mm (W) x 248mm (D) x 185mm (H)
CERTIFICATION
CE Approval
Sockets
Phone Sockets
WAN1
LAN1
OUT
IN1
LAN2
IN2
WAN2
IN3
WAN3
33
ON / OFF
Power Supply
The power supply is not designed to be used on board a vessel. Its designed on shore laboratory
tests only.
5.
Connect all hardware devices to the proper slots in the Vizada XChange Box. For further information
about the correct procedure for installing the hardware, refer to the Hardware Installation Quick
Guide.
5.1
Wizard
When starting the Vizada XChange Box for the first time, an initialization wizard takes the installer
through the first steps for configuring the system. This chapter describes these steps in more detail.
The wizard can be restarted by an authorized installer at any time to reconfigure the Vizada
XChange Box. To start the wizard, go to Box Settings > System > Start Wizard.
5.1.1 Before Starting
Select the action which should be performed:
1. Restore from a backup file
2. Process the wizard
In case of a box swap or fleet wide deployment of the Vizada XChange Box with similar configuration
the Restore form a backup file option can be selected.
When backup files are already stored locally, a table provides all available files. In addition a backup
file can be uploaded from the computer used by the installer.
For a new installation, select option 2 Process the wizard and follow the next steps.
5.1.2 General Configuration (1 of 9)
Select the General Information setting about the Vizada XChange Box and click Next.
Select the model controlled by the device (Supported Devices listed in Appendix B)
Change the device name and description if you wish
Change the IP parameters if necessary
It is recommended that for most usage scenarios you keep the predefined IP parameters.
Only IT specialists familiar with IP addressing should change the predefined IP parameters when
necessary.
5.1.4 WAN 2 Configuration (3 of 9)
If there is no secondary broadband terminal in place, select No and click Next.
If secondary (optional) autonomous broadband terminals are used on board, select the number of the
terminals connected to WAN port 2 on the Vizada XChange Box. For each secondary terminal a list of
details appear. Collapsible panels separate each terminal. panel.
5.1.4.1
If you select the DHCP service, the Vizada XChange Box will automatically retrieve all necessary IP
addressing details from the terminal.
If you select static mode, the box must be provided manually with a static WAN IP address and all IP
addressing details, such as the gateway IP, subnet, and primary and secondary DNS addresses.
5.1.4.2
If more than one autonomous broadband terminal are in place, connect all terminals to WAN port 2 of
the Vizada XChange Box, using an Ethernet switch (DHCP disabled).
In the current version, up to 3 different autonomous broadband terminals can be connected at the
same time.
When all these requisite details have been correctly set, click on Next to continue.
If just one LAN port is used, select No for the second LAN configuration.
Only IT specialists familiar with IP addressing should change the predefined IP parameters where
necessary.
Using Static Mode disables the DHCP service for the specific network and all connected network
devices must be provided with a static IP address or another DHCP server must be enabled to provide
IP addresses automatically.
The local Vizada XChange Box IP address must be a static address. It is pre-set to 10.0.1.1/24.
Only IT specialists familiar with IP addressing should change the predefined IP parameters where
necessary.
10.10.10.X
Network mask
255.255.255.0
Default gateway
10.10.10.1
Primary DNS
Secondary DNS
:
:
10.10.10.1
blank
Set the cost matrix to $0.00 if a flat-fee for data usage is available for an autonomous broadband
terminal such as a VSAT or if there is no need to track fees for crew members, for example.
After filling out the cost matrix, click Next.
5.1.8 Rating Schemes (7 of 9)
A rating scheme is displayed. The number of devices depends on the broadband terminals selected in
steps 2 and 3 of the initialization wizard.
For each broadband terminal the minimum charge and stepping for
Voice (sec)
VoIP (sec)
Data (KB)
must be configured separately per accounting mode (corporate usage or local allowance)
It is recommended that you select the phone under the captains responsibility
to ring on external
If an analogue phone is provided for private usage by the crew (or if the port is not used) it is
recommended that you set the authentication mode to PIN code restricted to avoid generating
unwanted costs for voice call on Corporate.
If any of the configuration settings are incorrect, click on Back to return to the specific configuration
page and change the settings accordingly.
If the configuration setup is correct, click Save to continue with initializing the box.
The Vizada XChange Box will restart after the initialization wizard has been completed. After
rebooting, the Vizada XChange Box will be ready for use.
6.
To access Vizada XChange Box web interface, you need to connect a computer to the local network
(LAN1 or LAN2).
To login and use the Vizada XChange Box web interface you need to allow in your browser to accept
cookies. Administrators connected to the Vizada XChange Box must have Adobe Flash Player version
8.0 or higher installed and running on their computer.
6.1
The login page can be accessed using any web browser supporting Java script by entering the URL:
http://xchange.box.
6.1.1 Login
To login onto the Vizada XChange Box, use the username and 8-digit passcode provided by the
master on board or any other responsible person.
6.1.2 Logout
To logout from the Vizada XChange Box, click the Logout link on top middle of any page.
Figure 3: Logout
A detailed user guide for the mobile optimized web interface is provided separately.
6.2
User Profiles
There are three different predefined access level profiles that provide different access rights for usage,
management and configuration. For each access level, there is one account preconfigured. Details on
access rights details for each preconfigured account are listed in Section 5.2.4.
The administrator is not allowed to launch a data session or voice call, so there is no My Profile
page created for them.
6.2.3 Crew
Crew members are only allowed to use the Vizada XChange Box and have no access rights to the
configuration. They are only permitted to launch data sessions, make voice calls and access the box
intranet. (depending on their local prepaid allowance)
Admin
Access
INSTALLER
BOX
INITIALIZATION
ADMINISTRATOR
CAPTAIN
CREW
Admin
PERSONAL
HOMEPAGE
BOX SETTINGS
OVERVIEW
Access
Access
Access
DEVICES
Admin
Admin
USERS
Admin
Admin
Admin
GROUPS
Admin
Admin
Admin
COST MATRIX
Admin
Access
Access
RATING SCHEMES
Admin
Access
Access
OVERVIEW
SETTINGS
Admin
Admin
Access
OVERVIEW
TRAFFIC LOGS
CREDIT LOGS
CHANGE LOGS
EVENT LOGS
SYSTEM LOGS
CONNECTIONS
ACCOUNTS
OVERVIEW
RATING TABLES
MONITORS
LOGS
INSTALLER
ADMINISTRATOR
CAPTAIN
CONNECTION
OVERVIEW
CALLS SETTINGS
LANS
Admin
Admin
Access
WANS
FIREWALL
Admin
Admin
Access
REMOTE CONTROL
Admin
Admin
Access
PORT
FORWARDING
Admin
Admin
Access
WEB CACHE
Admin
Admin
Access
Admin
Admin
Access
Access
CREW
TELEPHONY
NETWORK
OVERVIEW
SYSTEM
OVERVIEW
TIME
MANAGEMENT
Admin
BACKUP &
RESTORE
Admin
UPDATE
Admin
Admin
Access
SYNCHRONIZATION
Admin
Admin
Access
POWER CONTROL
Admin
Admin
Admin
MY PROFILE
ACCOUNT
Admin
Admin
BOOKMARKS
Admin
Admin
PRIVATE ADDRESS
BOOK
Admin
Admin
USAGE LOG
INTRANET
LOCAL LIBRARY
Admin
Admin
Access
Access
REMOTE LIBRARY
FAQS
Admin
Admin
Admin
LATEST NEWS
ALL NEWS
ADDRESS BOOK
NEWSROOM
INSTALLER
ADMINISTRATOR
CAPTAIN
VESSEL DETAILS
BOX DETAILS
CONTACT
CREW
SUPPORT
ACCESSING
REMOTELY
7.
7.1
Navigation Pattern
ADMINISTRATOR
CAPTAIN
CREW
HOME
BOX
SETTINGS
MY PROFILE
INTRANET
NEWSROOM
SUPPORT
7.1.4 Weblets
With the Vizada XChange Box you can navigate inside the same page at a 4 level using horizontal
th
weblets:
You can click on each panel and toggle between the expanded and collapsed status. To clarify this,
there is a double arrow that points to the right (collapsed state) or downwards (expanded state).
A double square indicates that this panel cannot be collapsed and stays open all the time.
7.1.6 Tables
To avoid displaying a very large amount of lines on one single page when describing a long table, the
system uses flexible tables.
The displayed amount of information can be changed by the user.
7.1.6.1
To sort the information displayed, click once on the title of a column to sort the list in ascending order
and twice for a descending order.
7.1.6.2
The number of lines to be shown can simply be changed by clicking on the amount on the bottom line
of each table.
Click 10 to display 10 lines per page or 100 to display 100 lines per page. In case more lines are
available, they will be displayed on a further page.
7.2
An example of the general pattern for editing with the Vizada XChange Box web interface is given
below: it involves changing the user details for a crew member. This pattern is generally applicable for
editing and configuring values.
By clicking on Save the data that has been changed will be stored in the Vizada XChange Box
system and the page is refreshed. It remains in editing mode.
7.3
Home
When the user has logged in successfully the system automatically redirects them to the Home
screen.
In the content listed below, the blocks of objects are displayed on the Home page. The content will
vary according to the user profile.
ADMINISTRATOR
CAPTAIN
CREW
CONNECTIVITY
OVERALL TRAFFIC
MY CONNECTION
EVENTS & ALERTS
MY TRAFFIC
7.3.1 Connectivity
Connectivity shows the currently available (i.e. Ready' status) broadband terminal. The information
covers:
Clicking the Change link redirects the administrator or captain straight to the connection management
page to provide switching functionality for the manual broadband terminal.
The small icon next to Pharostar indicates that this device is the default device used by the
Vizada XChange system. This function is only available in combination with Global Maritime
Broadband Bundles from Astrium Services.
Clicking the More link redirects the administrator or captain straight to the Traffic Log page, providing
a detailed account of changes in traffic over time.
The Overall Traffic block only displays for the administrator and captain.
Tip!! Clicking on the communication type all, data, voip or voice the displayed information will be
filtered to the selected type.
Administrator/Captain:
The Events & Alerts block displays any alert transmitted by an active traffic monitor if for instance the
users prepaid allowance falls below the minimum threshold, or an event message in case a device is
no longer ready for connection
Alert categories displayed cover:
Allowance alerts
Large session alerts
Event alerts
If an alert is issued, the type (Monitor, Connection) and the event description will be displayed below
the alert category:
Clicking on the More link redirects the administrator or captain straight to the Event Log page,
providing more details about the events.
To acknowledge and to hide an event message from the home page, simply click the X next to the
alert.
7.3.3.2
Crew Member:
For crew member an alert is issued if the local prepaid allowance falls below the minimum threshold. A
message is displayed informing the crew member:
7.3.4 My Traffic
The My Traffic block shows the users personal traffic consumption for the current day and current
month separately for each connected broadband terminal and type of service:
As the administrator is not allowed to launch a data session or voice call, this block is not
displayed.
Tip!! Clicking on the communication type all, data, VoIP or voice the displayed information will be
7.3.5 Connection
The Connection block enables the captain and crew member to launch/disconnect a data session.
7.3.5.1
Displayed information:
7.3.5.2
Session Launch:
To launch a data session, select the communication channel and press the green Connect button.
Depending on the individual setup, you may only be able to select one communication channel.
When the data session is established, the users personalized favorites are displayed automatically in
a separate tab in the browser.
During a data session, you can still surf on the local intranet, but cannot close the Vizada XChange
Box portal. If you try to, a warning message pops up and asks you to first close the data session.
During an active data session, the Connection block gives users information about traffic
consumption and credit levels:
7.3.5.3
Disconnect:
To disconnect and to close the data session, just press the red Disconnect button.
7.3.5.4
When the user tries to log-in outside his allowed time window, or when he has already reached the set
maximum communication duration for that day, the Connection block displays a warning message
and it is not possible for the user to connect to the internet.
7.4
My Profile
The My Profile section is displayed for both the captain and crew users.
My Profile provides individual account management and personalization capabilities to access:
7.4.1 Account
The Account section gives an overview of the users account details.
You can edit the name, email address and mobile number fields. Just type the new values into the
white text fields and save the changes. An overview of all the information is shown in this table:
EDITABLE
READ
ONLY
STATUS
ACCOUNT TYPE
FIRST NAME
LAST NAME
E-MAIL ADDRESS
MOBILE NUMBER
USER GROUP
PIN CODE
CURRENT CREDIT
The non-editable fields (except of the PIN password) can only be changed by the administrator or
captain in the Accounts management section of the Vizada XChange Box.
7.4.3 Usage
The Usage page provides each user with their personal usage and credit consumption log for all
broadband terminals and types of communication for up to 30 days.
DESCRIPTION
START DATE
TYPE
TYPE CLASS
TERMINAL
Used terminal
PAYMENT MODE
DURATION
UNIT
TOTAL COST
DESTINATION
By default, all available usage data can be displayed by entering the usage log.
Using the selection criteria given at the top you can display specific usage details. The selection
criteria include:
Type
o All
o Voice
o Data
o VoIP
Period
o Current Month
o Last 7 days
o Last 14 days
o Last 30 days
Terminal (if more than one is available on board)
o All Terminals
o A specific terminal
To filter specific usage details, select the options from the different selection criteria and click Submit.
The page will be refreshed, and only the selected usage details will display on the basis of the
selection criteria.
Tip!! To sort the display of usage details, click once on the name of any column to sort the list in an
ascending order and twice for a descending order.
7.4.4 Favorites
The Favorites section can be used to access your personal favorite websites. Your personal
favorites appear in a separate browser tab at connection start. This is especially useful when you
share the same PC with several other users.
Click Add
Type in a title for this bookmark
Input the websites URL
Click Save
Or click Back to cancel
7.4.4.2
Sort Favorites:
To sort the bookmarks into a preferred sequence, click on the up or down arrows in the first column.
7.4.4.3
Editing Favorites:
To edit or delete a favorite, click on the favorites line. The page is refreshed and you are offered Edit
or Delete options.
Before you delete a favorite, the systems ask you via a popup if you really want to delete the favorite.
7.4.5 Address Book
Each user is provided with a personal address book. Entries in the personal address book cannot be
shared and are accessible by individual users.
7.4.5.1
7.4.5.2
Click New
Fill out all possible contact details
Select the contact category
Click Save, or Back to cancel
7.4.5.3
7.4.5.4
To search for a contact, type the name you want in the text field at the top of the weblet page and click
Search.
All matching contacts will be displayed on a new page. Click on Back to Address Book to return to the
main page of the address book.
7.4.6 Authorizations
The Authorizations section provides each user all information about the set online usage
authorizations.
Depending on the users group settings, the user is informed about his online usage authorizations in
all available details.
The Maximal mobile data session duration is an automatic set threshold displaying the time when a
user is disconnected automatically.
7.5
Intranet
The Intranet rubric is displayed for all users on board and gives access to:
Local Library
Remote Library
FAQ
Address Book (vessel wide)
7.5.1.2
Managing Categories:
The administrator or captain is granted to create new categories, and edit or delete existing categories
displayed in the local library.
To manage categories, click on the appropriate icon beside the categorys name.
7.5.1.3
The administrator and captain is granted to upload new files, and edit or delete shared files in the local
library.
During the upload, the Vizada XChange Box displays a status bar showing the file name and size.
After the file is successfully uploaded, click Back to return to the category display.
7.5.2.1
Only shore managers accessing the Vizada XChange Manager can change shared content of the
remote library, FAQs or Newsroom.
7.5.3 FAQ
The FAQ (Frequently Asked Questions) enables self-support by providing answers to the most
common questions from users. The FAQ section can be managed remotely and is not only linked to
Vizada XChange.
The FAQ section is divided into categories, with a set of questions and answers for each category.
By clicking on a question, the panel opens and the corresponding answer is displayed below.
The FAQ section can be updated from shore, but cannot be edited by a local user.
7.5.4.1
Click New
Insert all possible contact details
Click Save, or Cancel
7.5.4.2
7.5.4.3
To search for a contact, type the contact name in the search field above and click Submit.
All matching contacts will be displayed on a new page. Click on Back to return to the main page of the
address book.
7.6
Newsroom
The Newsroom section provides news sent from shore side to the Vizada XChange Box.
To read the whole article click on Read more. A popup window appears and the content of the whole
article will display. To return to the overview page, click X.
To access to complete news database, click on All News. The page is refreshed and provides an
overview of all news stored on the Vizada XChange Box.
7.7
Support
The Support rubric is displayed for Captain and Administrator connected to the Vizada XChange Box.
Support gives access to:
Vessel Details
Box Details
Contact
Box ID:
Unique Vizada XChange serial number generated by Astrium Services
Software: Actual installed firmware version
Hardware: Unique box hardware serial number
Last Upgrade: Date of last firmware upgrade
7.7.3 Contact
The contact form is embedded in the Vizada XChange Box interface and can be accessed by the
Captain and Administrator.
If there is a need for support from Customer Care, this contact form must be filled out correctly and
completely.
To provide all needed information for the support team, the data displayed in gray are automatically
pre-set by the box system and the email contact data.
Fields marked with a * are mandatory and must all be filled out before the message is sent.
If the form is ready to be sent, click Send. The default email client then opens, and an email is
generated and sent automatically.
To send an email via your default email client (e.g. SkyFile Mail), it must be set up correctly.
XChange Administrator Handbook
8.
CONNECTIVITY
8.1
Terminals (WAN)
Please connect broadband terminals only onto the WAN (Wide Area Network) RJ-45 sockets of the
Vizada XChange Box.
WAN port 1 is pre-set to connect and control a FleetBroadband terminal. (Thrane&Thrane Sailor
250/500 recommended)
WAN port 2 is pre-set to connect to (optional) autonomous broadband terminals such as VSAT
or Iridium OpenPort. (not all features available for autonomous devices)
SUPPORTED
WAN2
CONTROLLED
WAN1
(Recommended)
(Recommended)
JRC JUE-250
JRC JUE-500
IRIDIUM OPENPORT
IRIDIUM PILOT
THURAYA IP
VSAT
UMTS / 3G
WIMAX
OTHERS
Do not connect devices such as computers or network routers between the broadband terminals
You will find a dedicated setup procedure for Furuno Felcom and JRC JUE FleetBroadband
terminals in Appendix C.
8.1.1 Broadband Terminal Prerequisites
Ensure that the satellite terminal(s) listed below are configured as indicated:
FleetBroadband:
8.2
Devices Overview
To access the connections overview, go to Box Settings > Devices > Overview.
The overview page provides information about all broadband terminal connections selected during the
initialization wizard process and the manual terminal switching feature.
The Overview provides information about the status of the broadband terminal, indicates the default
device, the duration of activation and a usage overview for the currently activated session.
Status:
Under Communication Channels (click to expand), there is status information about each setup
channel. Power and connection status are displayed separately for each communication channel.
NB: The number of communication channels displayed varies between the broadband terminal and
the individual setup. For more details, refer to the following chapters.
8.3
The Vizada XChange Box makes it possible to switch manually from one to another terminal: the
captain or administrator can activate or deactivate one of the configured broadband terminals. All data
and VoIP communication are carried out the activated device.
While switching off the device, all traffic to the device will be blocked and, for Controlled terminal
WAN1, all PDP context will be terminated.at a time. No simultaneous data sessions over two terminals
are possible. All data traffic is transmitted via the same terminal.
Confirm in the pop-up window that this terminal should be activated. The page is then refreshed and
the terminal status changes to Activated.
If another terminal was previously activated, it will be automatically deactivated after confirmation and
the active data and voice session will be disconnected without sending a warning message to the user
who is connected.
8.4
The Vizada XChange Box allows semi-automatic device switching from the backup to the default
terminal. The semi-automatic device switch can be configured by the administrator and needs no
additional manual action.
The manual device switch for captain and administrator remains unchanged.
In case the default device goes offline, the onboard staff has to switch on the backup device to
continue data communications.
The Vizada XChange Box periodically checks the availability and stability of the default device
automatically. When the default connection is ready and stabilized again, the connection will be
switched automatically back to the default device.
Please note, the semi-automatic device switching is a premium feature and may not appear in your
Vizada XChange Box system.
The Feature Status counts all proceed connectivity test pings and the number of unsuccessful pings.
If 5 pings in series are unsuccessful, the system indicates the connectivity as offline and raises an
alarm on the captains dashboard.
Here, the general switching feature settings can be checked. The switching can be either enabled or
disabled. If this feature is set on disabled, the automatic device switching will not be available.
The session cut delay (in sec.) is pre-set to 30 seconds. When the default device is online and
stabilized again, the system will wait 30 seconds before cutting active sessions during the device
switch.
Only your Service Provider can change the activation status for the semi-automatic device
switching.
The automatic device switching is performed only on change of default device status. If a device
switching is performed manually while the default device is online, the system will not switch back to
the default device. The captain or administrator have to switch back to the default device himself.
8.5
Device Management
To change the details on connected terminals and manage communication channels and firewall
filters, go to Box Settings > Devices > Settings.
Each connected terminal is separated by a weblet. To switch views from one terminal to another, click
on the appropriate weblet.
The name and description are free-text fields and can be edited via the web interface. The Port and
Tunneling Ability cannot be edited. To change the Port connection and Tunneling settings, use the
initialization wizard again.
8.5.1.1
When you wish to access the Vizada XChange Box, a terminal or the local network remotely without
contacting staff on board, you can enable automatic start of remote access for each terminal
separately.
Simply tick a check box to enable Remote Control and/or Port Forwarding to be automatically
available when a terminal is enabled.
When an auto start option is selected on the controlled WAN1 terminal, the Vizada XChange Box
opens a separate public.dynamic IP session automatically. When using a FleetBroadband 150
terminal, each user group allowed to make data communication, needs to have the same Remote
Access communication channel available.
8.5.1.2
Tunneling Ability:
The tunneling ability of each device provides the information, if one single or multiple IP sessions can
be done in parallel:
DESCRIPTION
CONTROLLED
WAN1
SUPPORTED
WAN2
COMMON CHANNEL
Opens a
background IP
connection
CREW CHANNEL
Opens a
background IP
connection
M2M CHANNEL
Machine to
Machine channel
Opens a
connection on
service start using
a public IP
SYNC CHANNEL
Opens a Universal
Card prepaid data
session
VOIP CHANNEL
Using the communication channel management facility, users can raise or lower the number of
available communication channels per terminal and set separate IP addressing parameter.
Communication Channels are linked to user groups. User groups are only allowed to launch data
sessions using one of the linked communication channels and the stored IP addressing options in the
channel. One communication channel can be linked to several user groups at the same time.
The Universal Card channel can only be used by one user at a time. To enable several users to
launch a Universal Card data channel at the same time, the Universal Card channel is duplicated.
Each Universal Card data channel launches a dedicated data session.
8.5.2.1
The new created communication channel is not associated to any user group. An association must
be done on user group level.
8.5.2.2
To edit a communication channel, click on the name of the channel. Click Edit to change the channel
parameters or de-activate the channel. Click Delete to delete a channel you have created.
NB: You can only delete communication channels you have created yourself. The predefined
channels continue to exist but can be disabled if they are not linked to a user group.
8.5.3 VPN
The embedded VPN client supports connection to shore based Open VPN and GRE VPN servers.
The VPN client can be enabled and setup for any communication channel and broadband terminal
individually.
This individualism provides full flexible configuration capabilities. It is either possible to link the whole
vessel data communication to the on shore VPN server, or for instance just one user group like
machines or the corporate traffic.
The VPN channel can be defined as an one-way (Vizada XChange > Shore) or two-way (Vizada
XChange <> Shore) communication.
The two-way option provides remote access to the on board network clients linked to the VPN
channel.
8.5.3.1
8.5.3.3
Once your VPN channel is created, you need to assign it one of the user group to be able to use it.
8.5.4 Firewall
To each terminal connected, the administrator can apply a different set of firewall filtering rules. For
more details about managing firewall rules, see Chapter 12.
st
Firewall filtering settings at the terminal level represent the 1 stage of the Vizada XChange Boxs
integrated Firewall.
Using this stage one, you can set a first level of pre-filtering to allow traffic that should usually go
through the terminal. This will block any type of traffic and ports not covered by a special firewall filter.
By default, there is no special firewall filtering and any kind of traffic is allowed through. It is
recommended that you change the default setup and to define the specific types of traffic to be
allowed.
The drawing below indicates the 2-stage architecture of the Vizada XChange firewall:
8.5.4.1
To define the setting of a firewall filter for a given terminal, proceed as follows:
9.
ACCOUNT MANAGEMENT
The integrated Account Management provides management capabilities for a single user or user
group. It enables the captain and administrator to manage user credit (local prepaid), group firewalling,
and the terminal user group association.
9.1
Overview
The Accounts overview page provides a summary overview of user and group accounts.
The table displays all the user groups and the number of active accounts per group created in the
Vizada XChange Box, and gives information about users currently online, along with the number of
suspended user accounts and the activation status of the groups.
The collapsible panels below (click on the panel to expand) give more detailed information about:
9.2
To access the user group management feature, go to Box Settings > Accounts > Groups.
With group management, you can create, manage and delete user groups. It is mandatory to work with
user groups in the Vizada XChange Box. Every single user must be linked to a specific user group, as
user management is based on managing groups . By reducing the management effort to a minimum,
the system becomes more user-friendly and at the same time ensures there are no uncontrolled
users.
The overview of groups provides general information about all user groups that have been defined
including:
Group name
Group description
Group type
Payment mode
Data connectivity associated with the Group
Master:
The master type provides read and partial write access to the box system. Users linked to a master
group can view Box Settings, manage users and user groups, and carry out manual terminal
switching.
User:
The user type provides read-only access to the box portal. The Box Settings and Support page is
hidden and cannot be accessed. The user type is the default setting for crew member groups. Users
linked to a user group can see the box portal and are allowed to launch data or voice sessions
(depending on the associated terminal connectivity).
Machine:
The machine type is pre-set for on board network components and systems which communicate
through the satellite link with host systems on shore. As these on board systems cannot authenticate
themselves, all the systems linked to the machine group do not need to authenticate before
communicating through the associated connectivity.
Admin:
The Admin type provides full read & write access to the box system. The Administrator can make
changes to Box Settings but is not allowed to launch data or voice sessions.
Corporate usage
Local allowance
Universal Card usage
Corporate Usage:
The corporate usage mode is predefined for corporate post-paid communication. Typically machines
and the captain are allowed to make corporate postpaid communications.
Local Allowance:
Linking a user group with the local allowance mode enables on-board user credit management without
the need to use classic prepaid cards such as the Universal Card service.
Users linked to a local prepaid group need to have positive credit to be able to launch data or voice
sessions.
The page is refreshed and the group details are displayed. This page enables you to review or change
the group name or description. However, it is no longer possible to change the group type and
payment mode .
When all general group settings are correct click Back to reach the group specific overview.
9.2.3.1
If you wish to enable a user group to make VoIP calls, click on the Connectivity panel to expand it,
click on the VoIP weblet and associate VoIP channel per the device to the group. By default, there is
no VoIP channel linked to a newly-created user group. If VoIP is not allowed or is not available, do not
change anything in this panel.
To associate a VoIP channel to a group, click Edit. The page refreshes and the available VoIP
channels will be displayed. Click the channel on the right-hand table to mark it and move it to the lefthand table using the left double arrow.
9.2.3.2
To allow a user group to launch data sessions, click on the Connectivity panel to expand it and
associate each communication channel per device to the group. By default, no data channel is linked
to a newly-created user group. If data communication is not allowed or is not available, do not change
anything in this panel.
To associate a data channel to the group, click the channel on the right-hand table to mark it and move
it to the left-hand table using the left double arrow.
9.2.3.3
Firewall:
For each user group, you can apply a set of firewall filtering rules. For more details about firewall rule
management, see chapter 12.
nd
XChange Box.
In stage two, a detailed filter can be set to enable the type of traffic allowed for the Group member.
Traffic types and ports not covered by a given firewall filter will be blocked.
In the default set-up, there is no firewall filtering and the Group can use any kind of traffic. It is highly
recommended that you change the default settings and define only those specific traffic types that are
allowed for this user group.
If user group firewall settings are different from terminal firewall settings, the terminal firewall will
always prevail.
9.2.3.4
9.2.3.5
You can apply daily-based access limits to data and voice communications individually for each user
group. The system will allow communication only either within the set time windows (based on the
onboard set time) or/and until the set maximum duration has been reached. If a user tries to
communicate outside of the set time windows or the maximum duration is already reached, the system
will decline and inform him accordingly. For all members of a user group the same settings will take
effect independently when the user account was created.
1. Disabled
a. No access limitations take effect
2. Maximum Daily Duration
a. A max amount of hours per day can be spent for communication
3. Daily Time Windows
a. In up to three (3) time windows communication is allowed
To set a daily access limit for a group, click the Daily Access Limits collapsible panel to expand and
click Edit
On the new page select the mode to apply to the user group.
Using the bar, the maximal duration can be selected in steps of 15 minutes. The duration range goes
from zero (0) to 24 hours.
To set the duration click and keep the mouse button pressed on the quad and move it from left to right
and vice versa.
Click Save to store and apply the setting to the entire user group.
The maximum Daily Duration should be setup between zero (0) and 24 hours. If the bar shows zero
(0), the user will not be able to make any communication. If the bar shows 24 hours, the user will be
able to spend 24 hours per day for communication.
Up to three (3) different time windows can be setup. To add a new time window click on Add a time
window and move the starting and ending quads to the desired times. To set the time window click
and keep the mouse button pressed on the quads and move them from left to right and vice versa.
To add a second or third time window proceed in the same way.
To remove a time window, click the small black x sign and confirm the deletion in the popup window.
Click Save to store and apply the setting to the entire user group.
Click Edit to change the details such as the group name or description. The group type and payment
mode cannot be changed.
You can also change the VoIP and data connectivity settings. See Chapter 8.2.3 for more details
about setting VoIP and data connectivity.
NB: Changes to user groups will take effect immediately and changes to the name or description will
switch all log entries to the new entry.
Click on the group name to mark and click the Delete button below the group list.
The users linked to the group will automatically be deleted. To avoid deleting users, empty the
group before deleting it.
9.3
User Management
To enter the user management feature go to Box Settings > Accounts > Users.
User management enables you to create, manage and delete users. Working with user accounts is
mandatory in the Vizada XChange Box. You cannot launch data or voice sessions or benefit from the
Vizada XChange Box features without a user account.
The user overview provides general information about all defined users such as:
User identifier
Last name
First name
PIN code (password)
Linked user group
Current available local allowance
As the user overview may have to display a very large number of users, you can preselect which users
are displayed.
To preselect which users will be displayed, open the Search Criteria panel and select the usage
mode or group name from the list that you want to be displayed and click on Search. The page is
refreshed and only the user accounts in question will be displayed.
In the bottom line of the list the number of shown lines per page can be set from 10 to 100. If more
lines than selected are available will be listed in a second page.
It is also possible to sort the overview list in descending or ascending order for any column. To sort the
list, just click on the title box of the column.
9.3.1.1
The maximum mobile data session duration indicates the automatic disconnection time for users
using a smartphone or tablet via the mobile web interface or Android XChange application.
When a smartphone users online data session reaches the set threshold, per default 2 hours, the
Vizada XChange Box disconnects the data session to avoid unwanted traffic consumption.
To change the default value, simply click and keep the mouse button pressed on the quad and move it
from left to right and vice versa.
The page refreshes and displays all new created user accounts including passcode and credit amount
in a table.
Below the overview table the user account voucher per user account is displayed.
When pressing Print the overview table and each user account voucher will be printed on a separate
page.
The batch-wise created user accounts are anonymous user accounts. The username derives from
the selected user group plus a consecutively number. It is not possible to influence the user names.
9.3.4
After clicking on Save, the page is automatically refreshed and an account voucher appears providing
all account details, like username and password, and login, internet access and voice call description.
Note the user credentials or click Print. Click Edit to change the user details or to change the
password.
The user status can be changed from Active to Deactivated. This feature is handy for vessels with
many changes in crew members. There is no need to delete and recreate user accounts each time a
crew member leaves the vessel.
If a crew member leaves the vessel, their user account can be temporarily deactivated and easily
reactivated when the return to the vessel.
Top-Up:
To top-up the credit, enter the top-up amount and click Apply. The page is refreshed and the current
credit will be updated immediately.
Reset:
To reset the credit, enter the value for which the credit should be reset and click Apply. The page is
refreshed and the current credit will be updated immediately.
Remove:
To deduct an amount from the users credit, enter the amount to be deducted and click Apply. The
page is refreshed and the current credit will be updated immediately.
Reset the remaining credit to zero before deleting a user account. The deleted user account
When the user account is successfully deleted, below status message will be displayed:
The cost matrix displays several lines per device connected to the terminal.
For each terminal connected, the prices for:
are displayed for the appropriate accounting mode (i.e. corporate usage or local allowance).
Click Edit
o The current costs are displayed in a popup
Set the price for each connected terminal and payment mode separately
Click Save, or Cancel
If a flat-fee is available for a communication type or terminal, and communication costs should not
be charged to crew members, set the cost matrix to 0.00.
Only Astrium Services and the Service Provider are allowed to edit the cost matrix.
The rating schemes are provided per connected broadband device separated in collapsible panels
each. The minimum charge and stepping can be setup per communication type (Voice, VoIP, Data)
separately per payment mode.
Minimal Charge:
The minimum charge is the minimum amount of data or time charged to the user.
For instance when the real data consumption of a users online session is below 100 KB at the end,
the minimum charge will be deducted from his local allowance credit.
Stepping:
Stepping is the frequency of charging the user during his online or phone session.
For instance, the charged duration of a 48 sec voice call will be 60 sec (4x15sec).
Only Astrium Services and the Service Provider are allowed to edit the rating schemes.
11. MONITORING
The Vizada XChange Box has a local monitoring and alarm feature. Monitoring is used to maintain the
overall overview of all traffic consumption on board, especially for single data or voice sessions, to
avoid surprises due to an unexpectedly level of traffic consumption.
In the current version of the Vizada XChange Box, alerts for local allowance levels and large session
alerts will be displayed automatically to the captains and administrators home screen if a certain
threshold is reached (depending on the settings that have been made and cost matrix applied).
All alerts are displayed in the Events & Alerts block on the home screen showing the type of monitor
and the user name that triggered an alert.
11.1 Overview
To open the monitoring overview, go to Box Settings > Monitors > Overview.
The monitor overview is divided into the two types of monitoring allowance alerts and large session
users. This page provides an overview of the latest alerts sent out.
The credit information on allowance alerts is displayed in three different colors so as to display the
alert level clearly:
Red for very low credit level
Yellow for low credit level
Blue for high credit level
To focus on a specific aspect of alerts, you can select a specific user group and/or specific time frame.
Click on Search to display a given user group and/or time frame.
Very Low
Low
High
High:
The high level alarm is caused when a users credit rises above the threshold.
Click Edit
o Current thresholds are displayed in editable fields
Set the credit thresholds for each allowance alert level
Set the large session thresholds for voice and data separately for each usage mode
Click Save, or Back to cancel
12. LOGS
The Vizada XChange Box has an embedded log feature. This provides the captain and administrator
with near real-time information about traffic, local credit consumption, changes, system and event logs.
The log function is divided into the following log types:
By default, a summary of traffic consumption is displayed by viewing the logs section of the box.
You can display a specific period, mode or device by selecting criteria from the boxes at the top of the
page. These cover:
Period
o Current month
o Last 7 days
o Last 14 days
o Last 30 days
Mode
o None (admins group)
o Corporate usage
o Local prepaid
o Universal Card usage
Device (if more than one is available on board)
o All terminals
o A specific terminal
To filter a specific set of traffic details, select the options from the selection criteria and click Submit.
The page will be refreshed and only the selected traffic details will be displayed.
For a full, first-click overview, the most recent logs are displayed (up to 5 lines each).
Period
o Current month
o Last 7 days
o Last 14 days
o Last 30 days
o From To by date
User
o All
o A specific user
Group
o All
o A specific group
Modes
o All
o Corporate usage
o Local prepaid
Traffic Types
o Data
o Voice
o VoIP
Base Technology
o All terminals
o A specific terminal
To filter the chosen log details, select the options from the various selection criteria and click Submit.
The page will be refreshed and the selected log details will be display.
DESCRIPTION
DATE
USER
GROUP
TYPE
TYPE CLASS
DEVICE NAME
Terminal used
MODE
DURATION
UNIT
BILLED UNIT
TOTAL COST
DESTINATION
Tip!! To sort the usage details displayed, click once on the title of a column to sort the list in
ascending order and twice for a descending order.
DESCRIPTION
DATE
USER
GROUP
ACTION
BY
PREVIOUS CREDIT
NEW CREDIT
Tip!! To sort the usage details displayed, click once on the title of a column to sort the list in an
ascending order and twice for a descending order.
DESCRIPTION
DATE
CHANGE ON
CHANGE ITEM
ACTION
BY
COMMENT
In support cases the system reporting offers the availability to download either a diagnostic report or all
system log files.
The system reports can only be analyzed by Astrium Services technical departments and should
only be downloaded and forwarded to Astrium technical support on request.
The event log refreshes automatically every 10 seconds. You can also update the log manually by
clicking the Refresh button of your browser or press F5.
All events are displayed in this log. Event messages that are black with status Open are not
acknowledged by the administrator or captain and are displayed on their dashboards in the Events &
Alerts block.
DESCRIPTION
DATE
EVENT ON
EVENT TYPE
Type of event
DESCRIPTION
STATUS
Acknowledge status
SUBJECT TYPE
SUBJECT NAME
EVENT CODE
Messages in the event log can be used for trouble shooting and to inform about the status. A
detailed list of available event log messages is provided in appendix A at the end of this document.
Acknowledged events convert in grey and are not displayed on the dashboard anymore.
13. TELEPHONY
In the Vizada XChange Box there is a fully functional telephone (PBX) service that supports up to 3
analog phones and up to 20 IP phones.
This telephone service provides up to 4 different types of voice communication:
13.1 Phones
To use the Vizada XChange Box telephone service, connect the box to the primary FleetBroadband
terminal (via OUT port) using an RJ-11 cable.
13.1.1 Analog Phones
Any analog phone with an RJ-11 connection port is supported by the Vizada XChange Box. Up to 3
different analog phones can be used in parallel. To connect an analog phone, make sure you first use
the right RJ-11 cable.
IP Phones can be connected using an RJ-45 cable either to a LAN port on the box directly or to a LAN
port of a network switch.
The local extension number differs depending on which SIP account is used by the IP phone. The
default setting for SIPphone1 is extension 311, and for SIPphone2 extension 312, and so on.
The local extension number differs depending on which SIP account is used. The default setting for
SIPphone1 is extension 311, and for SIPphone2 it is extension 312 and so on.
Analog phones set to the Open Access authentication mode do not need to be authenticated before
voice calls are launched. This authentication mode is recommended for business communication.
The default setting in the Vizada XChange Box is for the bridge phone to only ring for external calls. It
is therefore recommended that you use the bridge phone for business communication.
Analog phones set to PIN code restricted authentication mode need to be authenticated before voice
calls are launched. This authentication mode is recommended for crew communication. Use the user
account PIN code to authenticate the line.
As mentioned above, this page only gives information. You cannot edit or change the telephone
settings here.
The telephone settings for analog and IP phones are predefined and cannot be changed. Using the
initialization wizard, the installer can only set the authentication mode for each analog phone.
13.4.2 IP Phones
The IP Phones weblet gives setup information for each preconfigured IP phone account. This covers:
13.5
Number
Short number (for on board calls)
Type
Status of ring on external calls
Authentication mode
VoIP Settings
In the VoIP Settings tab, the installer is able to change the XChange VoIP call parameters.
Changeable parameters are:
Parallel Calls
Delay Buffer
Compression Level
The VoIP parameter should only be changed by experienced administrators knowing the effects of
changing these parameter.
Parallel Calls:
The number of parallel calls can be changed from 1 to 10. The number of parallel calls should only be
set to more than 3, when the selected FleetBroadband terminal is not used for web surfing or any
other type of data communication, except SkyFile Mail.
Delay Buffer:
The delay buffer can be changed from 100 to 1000 ms. This value indicates the amount of
milliseconds buffered by the XChange VoIP before outgoing voice is send.
To set the value to 100 ms will reduce the delay time of speaking and hearing, but will increase the risk
of lost words within the conversation.
To set the value to 1000 ms will reduce the risk of lost words of a conversation, but will increase the
delay time of speaking and hearing.
The delay buffer parameter has no effect to the FleetBroadband background IP delay. During a
VoIP call, the delay time is a result of the set delay buffer and the current existing delay (jitter) of the
FleetBroadband.
Astrium does not recommend to change this setting to a different value than default.
Compression Level:
Per default, the compression level selection is set on Auto. To disable the automatic compression
level and set a compression level manually, unselect Auto and set the desired compression level
manually.
The compression level can be changed from 2 to 10. Setting the compression level to 10 will
increase the amount of voice fragments sent per data packet. It slightly reduces the
bandwidth consumption but may decrease the audio quality (more information is missing
in case of data loss).
Setting the compression level to 2 will decrease the amount of voice fragments sent per
data packet. It increases the bandwidth consumption but may limit the degradation of
the audio quality in case of data loss (less information is missing in case of data loss).
Astrium does not recommend to change this setting to a different value than default.
Click Save to store the changes, click restore to set the XChange VoIP parameter to default again,
or Back to decline unsaved changes and to go back to previous screen.
14. NETWORK
The Vizada XChange Box acts as a network router that manages all connected broadband terminals
and the on-board local network. The key features of this embedded network are the splitting of the
physical network, firewall filter management and remote access.
If there is no need, do not connect devices such as computers or network routers directly to the
broadband terminal. These computers will not form part of the managed network of the Vizada
XChange Box and cannot use its features!
The network overview page gives information about the local network port connections and network
feature status.
Port Connections:
Each different local network (LAN1 and LAN2) is displayed separately. If there are network devices
connected to a LAN port, the green button signals their status as Connected.
If a LAN port is not being used or is disabled, the status is shown in gray button as Disconnected.
To change the status of a network port, use the initialization wizard.
Network Features:
The network features section provides information about the status of each separate network feature.
To deactivate a network feature, see the specific section in Box Settings > Network.
The LANs section gives more detailed information for each physical LAN:
Only IT specialists familiar with IP addressing should change the IP parameters, and only if
absolutely necessary.
Changes in LAN settings are taken into account only after a reboot.
LAN Details:
It is possible to change the IP address mode from Static to None and to change the Vizada
XChange Boxs local IP address.
Tip!!: Click the Add again icon if you want to associate more than one network client.
Tip 2!!: To ease the IP-MAC address association, click on an active network in Network Overview
and Add static lease. This avoids to type IP- and MAC addresses of all network clients.
Disabled
o No online access restrictions setup
Black listing
White listing
To setup an online access policy, expand the collapsible panel (click to expand) and click Edit
Black Listing:
In the black listing mode it is possible to restrict (black list) specific network clients from online data
access.
Tip!!: Do the IP- MAC address assignment before you setup a black listing role.
White Listing:
In the white listing mode it is possible to generally restrict online data access for all network clients
and allow (white list) online data access for specific network clients only.
Tip!!: Do the IP- MAC address assignment before you setup a white listing role.
It provides the given IP address, the clients MAC address and hostname (when IP-MAC addresses
assigned).
To easily assign an IP- to a MAC address on a network client, just click on the desired network client in
the given table and click Add static lease
A small pop-up appears providing already used IP address and MAC address.
You can change the IP address to any IP address within the given IP range.
The WANs section gives more detailed information for each physical WAN:
In the current version of the Box, you cannot change the WAN settings in the web interface. If you
need to make changes, go through the initialization wizard process again.
The embedded firewall is created to support the administrator with optimum filter management
resources.
The firewall filters that are managed here are allocated to user groups and to broadband terminals
connected to the system.
Please refer to chapter 7.4.4 for firewall filter allocation to terminals and to chapter 8.2.3 for allocating
a firewall filter to user groups.
DESCRIPTION
BLOCK ALL
DATA MANAGER
OPEN
SKYFILE ACCESS
SKYFILE MAIL
WEB
Easy Mode:
The easy mode enables a filter rule to be created based on predefined services.
Expert Mode:
The expert mode enables a detailed filter rule to be created based on protocols, IP addresses and
ports.
Available Parameters:
Action:
There are two possible actions in the Action dropdown list: Accept or Deny. These specify
whether the rule will white-list (accept) or black-list (deny) the service that has been selected in
the Vizada XChange Box.
Direction:
There are three directions available in the Direction dropdown list: In, Out and Both. These specify
whether the rule will accept the service for incoming In or outgoing Out communication only.
To enable a service for bidirectional communication, keep the preset Both option.
IP Protocol / Services:
Protocol and Service define which protocol (TCP, UDP, etc.) or services (FTP, DNS, etc.) will be
affected by the rule.
Protocol enables the creation of traffic profiles based on network layer 3 protocols (ICMP) or layer 4
protocols (UDP, TCP). Go to the following link for more details: http://en.wikipedia.org/wiki/OSI_model.
List of preconfigured Protocols:
ICMP: Network control protocol. Mostly used by Ping and Trace-route to check network paths
and connectivity
TCP: Connection-oriented reliable transport protocol. Concerns most internet-based
applications (Web browsing, email, file transfer, etc.)
UDP: Connectionless best effort transport protocol. Mostly used for streaming applications
and server name resolution
The preconfigured protocols are displayed in the Expert Mode and in Filter Rules overviews.
List of preconfigured Services:
DNS:
FTP (control):
FTP (data):
HTTP:
HTTPS:
ICMP:
IMAP:
IMAP SSL:
POP3:
SMTP:
SkyFile Mail:
Rules Sequences:
When more than one rule is configured, it is important to make sure that the sequence of rules is in the
right order. The Vizada XChange Box firewall will treat incoming and outgoing traffic sequentially,
based on the order in which the rules are displayed from top to bottom.
The first rule in the list is treated first (followed by the second rule, and so on). The second rule is then
treated, and so on. Rules in the wrong order are likely to produce unexpected behavior.
In order to change the sequence, use the up/down arrows on the left to move the rules.
To avoid unwanted firewall behavior, you can only delete a firewall filter when there is no user
group or terminal associated with this filter.
To access the Vizada XChange Box, a terminal or the local network remotely, the terminal used must
be connected to the internet using a public IP address. For more details see Appendix E or the
Remote Access Manual.
To trust clients to access a terminal on WAN side or the Vizada XChange Box web interface, follow the
instructions:
Tip!! If more than one IP shall be entrusted, click on the Add again icon to add more.
By default Astrium Services customer care IP addresses are trusted and cannot be removed.
Tip!! It is possible to open the remote control for any access IP address by clicking on the Trust All
button, Astrium Services does not recommends this setting during installation and after installation
check only.
To remove a trusted client, select the line of the client that you want to remove in the trusted clients
table and click the Delete Trusted Client button.
Tip!! The system marks irrelevant remote control rules red, when local network settings or device
settings change.
When the service is initialized, a data connection using a public IP will be launched [FleetBroadband].
set
incoming
port
pointing
to
the
desired
terminal
like
for
instance:
https://<public_ip_address>:PORT
Tip!! While using a WAN2 device, the public IP address cannot be retrieved by the Vizada
XChange Box.
Tip!! Astrium VSAT user can benefit from offered SSL VPN applications to access the Vizada
XChange Box remotely while using a private IP address on VSAT.
Before the Vizada XChange can be accessed remotely via an autonomous device connected to
WAN2, ensure Port Forwarding is setup correctly in this device pointing to port 443 and 22.
Tip!! If more than one IP shall be entrusted, click on the Add again icon to add more.
By default Astrium Services customer care IP addresses are trusted and cannot be removed.
It is possible to open the remote access for any access IP address by clicking on the Trust All button,
but Astrium Services does not recommend this setting.
When the service is initialized, a data connection using a public IP will be launched [FleetBroadband].
While using a WAN2 device, the public IP address cannot be retrieved by the Vizada XChange
Box.
To view the Web Cache page go to Box Settings > Network > Web Cache.
The web cache page provides information about the activation status and the state of the web cache
service.
To activate the service, select Enable in the dropdown menu and click Save to save the setting. To
deactivate, repeat the same procedure but this time select Disable.
15. SYSTEM
The System section of the Vizada XChange Box provides general and system management
capabilities such as backup & restore for the box settings, firmware update, setting up synchronization,
and power control.
15.1 Overview
To display the system overview go to Box Settings > System > Overview.
The system overview gives general information about the system, the vessel, synchronization details
and the commercial package.
DESCRIPTION
Serial number
Status
SYSTEM DETAILS
(BOX RELATED)
Firmware version
Hardware Identifier
GPS coordinates
LOCAL TIME
INFORMATION
Local Time
Set Timezone
Vessel name
GENERAL INFORMATION
Call sign
(VESSEL RELATED)
IMO
Vessel type
Status
SYNCHRONIZATION
DETAILS
COMMERCIAL OFFER
To view the General Information , Synchronization Details or the Commercial Offer click the
panel to expand it.
Select the preferred time zone in the popup-window and click Save.
The system synchronizes with a shore based time server automatically. Additionally it is possible to
synchronize local system time settings at any time by clicking the Synchronize Time button.
The Vizada XChange Box acts as a local NTP time server offering local network devices to
synchronize their time settings via Vizada XChange.
TYPE
DESCRIPTION
WARNING THRESHOLDS
CPU Load
GPS Location
Not applicable
Memory Used
75% used
75% used
75% used
75% used
85% used
Database Size
200MB
The system monitoring log is a historical log providing system status information of the last 3 months.
The system starts creating the backup file and it will take just a few seconds. After the backup
procedure, the system gives information on the status of the backup.
The latest backup file will be displayed at the end of the backup file list. Each backup file is
automatically named with the backup date and time. The Type column indicates if the backup file was
generated manually or automatically.
Days
Weeks
Months
To setup the automatic system backup go to Box Settings > System > Backup & Restore and proceed
as follows:
To restore by using a local stored file, click Browse and select the latest backup file from the storage
folder.
The name of the imported file must be different from those already stored in the box
To restore the system using a backup file stored on the box, click the latest backup file in the list to
mark it and then click the Restore button when it appears.
All changes carried out on the system configuration or data (e.g. logs) since the last backup and
restore will be lost.
To reset the system go to Box Settings > System > Backup & Restore and click Factory Reset.
The system will reload the factory defaults and restart. This procedure may take several minutes.
While going to factory defaults, the system will revert to the original firmware version. It may be
Please proceed with the factory reset of the Vizada XChange Box on Astrium Servicess request
only!!!
15.5 Updates
The Update feature enables the administrator to update the Vizada XChange Box firmware either
using a local update file or online.
By clicking Check now the Vizada XChange Box will connect to the Vizada XChange Shore Portal to
check for new updates.
If there is a new update, the status table displays the new version and the Status column displays an
update button.
To update the firmware online click on the Download button. The box will connect to the Vizada
XChange Shore Portal and download the update file. After successful download, click on Update
button to start the procedure.
To update the firmware using a local update file, click Browse and select the update file from the
storage location.
Updating the system will take around 30 minutes and more. The system will restart automatically.
DO NOT REBOOT THE XCHANGE BOX DURING THIS OPERATION!
XChange Administrator Handbook
15.6 Synchronization
The Synchronization feature enables the synchronization of ship-to-shore and shore-to-ship
bidirectional data and files.
News
Frequently Asked Questions (FAQ)
Files pushed to the Remote Library
Traffic Logs
Credit Logs
Administrative Settings
In the current version, Astrium Services will only be able to synchronize data and information between
the Vizada XChange Box and the Vizada XChange Shore Portal.
click Edit
select Enable or Disable from the dropdown status menu
click Save to save the settings or Back to cancel
If automatic synchronization is enabled, the Vizada XChange Box will synchronize at intervals defined
in the Vizada XChange Shore Portal. The configuration cannot be changed on the Vizada XChange
Box.
If automatic synchronization is disabled, the box will only synchronize by clicking the Synchronize
now button. A data connection will be established with the Vizada XChange Shore Portal.
To restart or shut down the Vizada XChange Box go to Box Settings > System > Power Control and
click the appropriate button.
If the Vizada XChange Box is shut down or restarted, the embedded features will not be operable.
All data and voice sessions will be closed without warning any users and network clients still
connected will lose their network access.
The reboot sequence may take several minutes. Delete your browser cache while waiting.
When the reboot finishes, below information will be displayed in the browser window:
Please contact your service provider or Astrium Customer Care for login details.
After successful login, the maintenance page is displayed:
Technical Information:
The technical information provide all needed box related details like :
Software ID
Hardware ID
Current Date and Time
Actual installed Firmware version
Diagnostic:
In Diagnostic the download of a diagnostic report and log files is provided.
Troubleshooting Tools:
+33 (0)5 61 28 89 99
Fax:
+33 (0)5 61 28 89 98
Fax :
Email:
asbc.customercare@astrium.eads.net
17. APPENDIX A
17.1 List of events
Please see the list of currently available events:
TYPE
LEVEL
DESCRIPTION
CONNECTION
WARNING
CONNECTION
INFORMATION
Device ready
CONNECTION
INFORMATION
Device switching
CONNECTION
ERROR
Connection failed
CONNECTION
INFORMATION
CONNECTION
INFORMATION
Connection timeout
BACKUP
ERROR
Backup failed
BACKUP
ERROR
Restore failed
BACKUP
INFORMATION
Backup completed
10
BACKUP
INFORMATION
11
BACKUP
INFORMATION
Restoring in process
12
BACKUP
INFORMATION
Restore failed
13
BACKUP
INFORMATION
Restoring completed
14
SYNCHRONIZATION
INFORMATION
Synchronization completed
15
SYNCHRONIZATION
INFORMATION
16
SYNCHRONIZATION
INFORMATION
17
SYNCHRONIZATION
ERROR
Synchronization failed
18
SYNCHRONIZATION
INFORMATION
Box is active
19
SYNCHRONIZATION
WARNING
Box is unauthorized
20
UPDATE
INFORMATION
21
UPDATE
INFORMATION
22
UPDATE
ERROR
23
UPDATE
INFORMATION
24
UPDATE
INFORMATION
25
MONITOR
INFORMATION
Allowance alert
26
MONITOR
WARNING
Large session
27
CONNECTION
INFORMATION
TYPE
LEVEL
DESCRIPTION
28
CONNECTION
INFORMATION
29
CONNECTION
WARNING
30
SYSTEM
WARNING
31
SYSTEM
WARNING
32
SYSTEM
WARNING
33
CONNECTION
INFORMATION
34
CONNECTION
INFORMATION
35
TIME_SYNCHRO
ERROR
36
TIME_SYNCHRO
WARNING
37
TIME_SYNCHRO
INFORMATION
38
SYSTEM
WARNING
39
UPDATE
INFORMATION
40
UPDATE
WARNING
41
UPDATE
WARNING
18. APPENDIX B
18.1 List of supported controlled Devices on WAN1
Please see the list of currently supported controlled devices:
MANUFACTURER
DEVICE MODEL
JRC
JRC
Furuno
Furuno
19. APPENDIX C
19.1 Furuno Felcom configuration guide
This document presents the required configuration of the Fleet Broadband Furuno FELCOM 250 or
500 to work properly with the XChange Box.
An initial configuration of the Furuno Felcom terminal is needed to be compatible with the Vizada
XChange Box terminal management. It is not possible to automatize the below configuration and
therefore it needs to be done manually or via uploading a preconfigured backup file.
Once the configuration is done, The XChange Box can manage the data communication including
remote access, XChange VoIP calls and outgoing and incoming voice analogue calls.
Here, you will find related descriptions about manual configuration to be set up or carefully checked
and the way to import the backup file containing this configuration provided by Astrium Services.
19.1.1 Prerequisites
The Furuno terminal is already installed and ready to be configured through a web browser.
It is advised to use one of the following web browsers like Firefox Mozilla, Internet Explorer or Opera.
The left-hand navigation menu is not well displayed using Chrome web browser.
Once connected to the Furuno terminal, please type the default IP address (192.168.1.1) in the URL
bar of your web browser. You should reach this main page.
20. APPENDIX D
20.1 VPN guide to be placed here
21. APPENDIX E