1. MOTOTRBOTM
Software Release 2.2 Training

2. Sections Restricted Access to System (RAS)
Radio Management Enhancements
Linked Capacity Plus (LCP) Enhancements
Man Down
Arabic Language
Digital Telephone Patch Tones

3. Restricted Access to system (RAS)

4. Introduction
Restricted Access to System (RAS) is a Motorola proprietary feature that prevents unauthorized subscribers from:
Using the repeaters in a system.
Listening to any repeater outbound (voice/data/CSBK) transmissions.
An unauthorized subscriber can either be a Motorola subscriber or a DMR compatible subscriber from another vendor.
RAS supports:
All existing ADP interfaces.
All MOTOTRBO repeater configurations (Conventional Single Site, IP Site Connect, Capacity Plus, and Linked Capacity Plus).
All MOTOTRBO subscribers (DP2000, DP/DM and DP/DM/SL4000 series).
All MOTOTRBO repeaters (DR 3000 – 8/32MB and MTR3000).
The purpose of RAS is to stop unauthorized subscribers from utilizing the repeaters in the system, so this feature does not apply to Direct Mode (including DCDM) or Talkaround Mode.

5. introduction
RAS provides two methods to prevent unauthorized subscribers from accessing the system:
RAS Key Authentication
Radio ID Range Check
NOTE: These methods are independent of each other and may be enabled / disabled separately or together. When used together they provide a robust and flexible way to control system access by subscribers.

6. Ras key authentication
The RAS key is a CPS configured text string (6-24 characters long) and may include 0-9, A-Z, a-z, hyphen’-‘, underscore’_’, dollar ‘$’ and hash ‘#’.
Each system uses only one RAS key which needs to be stored in the repeaters and subscribers.
Only 1 RAS Key can be stored in a repeater.
To simplify the configuration of multi-repeater systems (i.e. IP Site Connect, Capacity Plus and LCP), the key needs only to be configured in the Master repeater – the key is then propagated automatically to all the Peer repeaters.
Up to 16 different RAS Keys can be stored in a subscriber – for different systems.
As with enhanced privacy keys, once an RAS key is written to the subscriber / repeater it can’t be read back using the CPS or cloned from one device to another.

7. Ras key authentication
When a subscriber transmits, it uses its configured RAS key to encode the transmitted bursts to generate an RAS enabled transmission.
When a repeater receives, it uses its configured RAS key to decode the received bursts.
If the RAS keys in the subscriber and repeater match then the repeater will decode the bursts correctly and repeat RAS enabled bursts.
If the RAS keys in the subscriber and repeater do not match or the subscriber is not configured with an RAS key then the repeater will fail to decode the bursts and the bursts will not get repeated.
When a subscriber receives, it uses its configured RAS key to decode the received bursts.
If the RAS keys in the subscriber and repeater match then the subscriber will decode the bursts correctly and process them accordingly.
If the RAS keys in the subscriber and repeater do not match or the subscriber is not configured with an RAS key then the subscriber will fail to decode the bursts and the bursts will get ignored.

8. Ras key authentication
The repeater may be configured for one of three RAS Key Authentication modes as follows:
Standard: The RAS Key Authentication feature is enabled and the repeater operates as per the previous slide.
Migration: This mode is used while a radio fleet is still undergoing the process of migrating to the RAS feature. When a repeater receives in this mode, it uses its configured RAS key to decode the received bursts.
If the RAS keys in the subscriber and repeater match or the subscriber is not configured with an RAS key then the repeater will decode the bursts correctly and repeat non-RAS enabled bursts.
If the RAS keys in the subscriber and repeater do not match then the repeater will fail to decode the bursts and the bursts will not get repeated.
Disabled: The RAS Key Authentication feature is disabled.

9. Repeater cps programming
3 Modes:
Standard (enabled)
Migration
Disabled
RAS Key Authentication
New section called Restricted Access to System

10. subscriber cps programming
The RAS ID must be the same as the ID set in Repeater
New section called Restricted Access to System

11. subscriber cps programming
Select the appropriate RAS key
New field call RAS Alias (part of the channel settings)

12. Radio ID Range Check
Radio ID Range Check is an option that can be enabled or disabled per system.
There are up to 64 CPS configured Radio ID ranges per system.
Each individual range can be enabled or disabled per system.
To simplify the configuration of multi-repeater systems (i.e. IP Site Connect, Capacity Plus and LCP), the ranges need only to be configured in the Master repeater – the ranges are then propagated automatically to all the Peer repeaters.
No additional configuration is required in the subscriber.
If radio ID range checking is enabled, the repeater will repeat transmissions from subscribers whose Radios ID fall into one of the enabled Radio ID ranges and will ignore transmissions from other subscribers.
If radio ID range checking is disabled, the repeater will not validate Radio IDs.
Unauthorized users may monitor authorized transmission over the air (or use other means) to work out the allowed Radio IDs. For this reason it is recommended that Radio ID Range Check is always used in conjunction with RAS Key Authentication.

13. Repeater cps programming
Radio ID Range Check configuration
New section called Restricted Access to System

14. subscriber cps programming
Radio ID Range Check validates this field

15. Key Authentication and Range Check
Repeater blocks Radio IDs
CPS
56 bit RAS key & Selective Range Control
Min Radio ID
Max Radio ID
Allow
500
999
1000
1256
Allow repeat with valid RAS key and enabled range
1000
1005
SUID
900
903
Upgraded Radios with RAS
Radios blocked

16. Radio Management enhancements

17. Radio Management New Features
Remote RM Client, Server & Device Programmer
Templates (Enhanced)
Voice Announcements (via USB only)
Language Packs (via USB only)
Enhanced Privacy Keys
OTAP Keys
RAS Keys
Firmware (via USB only)
Multi-Radio Programming

18. Configuration - General
RM Server 1.1 can support up to 128 remote RM Device Programmers
RM Server 1.1 can also support up to 16 remote RM Clients
Device Programmer and control stations must be within RF coverage of target units (RM Server does not)
Continuous direct network connection is required between the RM Server and RM Device Programmers( VPN or Private Network)
If continuous network connection is not possible, a Remote Client Configuration with Multiple RM Servers is required
If Presence Notifier is used - Device Programmer, where the target radio has registered, will service jobs for that radio
The CPS Server can support up to 128 CPS Device Programmers. This allows the system administrator to have all radios in one CPS Server and have access to different sites with non-overlapping RF coverage.
The Device Programmer and control stations must be within RF coverage of their corresponding systems, the CPS Server does not.
The CPS Server can also support up to 16 remote RM Clients.
Continuous direct network connectivity is required between the CPS Server and CPS Device Programmers, therefore a VPN must be used or they must reside on a private network. If continuous network connectivity is not possible, a Remote Client Configuration with Multiple CPS Servers is required.
If utilizing Presence Notifier, the Device Programmer where the target radio has registered will service jobs for that radio. A Device Programmer can also be configured to only service a specified set of radios. This is accomplished by setting the radios to a group within the CPS Server, and then configuring the Device Programmer to service the group.

19. Unique Radio id
When using a centralized RM Server to communicate to multiple systems with remote Device Programmers, then all radios across these systems must contain unique radio IDs.
If this is not achievable, then:
A separate CPS Server must be used for each system or
Radios must be combined into Groups in the RM Server and each remote Device Programmer set to service a specific Group
NOTE: The requirement that within the SAME System there are no duplicate Radio IDs remains, however for duplicate Radio ID’s across different Systems, the Group assignment can be used.

20. Security Change in CPS 8.5 / rm1.1
Change in CPS V8.5
Server / Database rewritten for performance & security improvements
Radio codeplugs/templates managed in RM using CPS V8.0 will not be available in RM once upgrade to CPS V8.5
Customer Impact & Migration Path
Customers will not be able to use CPS V8.0 to activate RM EID licenses after 1/12/2012 (EID server encryption increased)
Can only register RM licenses in CPS V8.5
Customers who used CPS V8.0 to fulfill Entitlement IDs will not be able to re-download/Recover those licenses using CPS V8.0
Use Case: purchased 100 RM licenses and registered 50 using CPS V8.0:
Recover original 50 into CPS V8.5 and Register reaming 50 in CPS V8.5
Upgrade to CPS V8.5 and re-download the device licenses by going to Actions > Manage > Licenses > “Recover Licenses”
Can only register the remaining RM licenses using the same EID received earlier in CPS V8.5.

21. Remote rm client – Set up
RM Client, Server and Device Programmer MUST be on the same Private Network or VPN to connect
RM Client (open through CPS) – must point to RM Sever IP (or machine name)
Enter the IP Address (or machine name) of the RM Server machine

22. Remote rm server – set up
If RM Server is remote from RM Client and / or RM Device Programmer then RM Server must run on a Windows 7 or WinServe2008 machine (otherwise RM Server may run on a Windows XP, Vista, Windows 7 or Server2008 machine).
If a firewall is running on the RM Server machine then a PC a rule needs to be set up to open TCP ports 3416 and 8675.
Start the RM Server – go to: Start > Motorola > RM Server RM Server Configuration For Unrestricted Access Leave the “Enable Computer Authentication” Box Unchecked

23. Remote rm server – set up
RM Server Configuration
For Restricted Access
1. Check the “Enable Computer Authentication” Box
2. Enter the PC Names of the remote RM Client computers allowed to access the RM Server
3. Windows Security - enter the User Name and Password used to Log on to the Authorized RM Client PC

24. Remote rm Device programmer – set up
RM Client, Server and Device Programmer MUST be on the same Private Network or VPN to connect
Start the RM Device Programmer – go to: Start > Motorola > RM Device Programmer
Device Programmer – must point to RM Sever IP (or machine name)
Enter the IP address (or machine name) of the RM Server machine
Assigned Radio Group
Can be used if the Presence Notifier is not used
Instructs the Device Programmer to service only members of a Group
Saves time and bandwidth where multiple remote Device Programmers used

25. RM Device Programmer - Automatically process jobs (Wired Mode)
RM Device Programmer in Wired mode: Check “Automatically Process Jobs” to execute Read/Write jobs immediately Otherwise Manually clicking the Play button will be required for every new Read/Write

26. Management – new Features
Templates
Voice Announcements
Language Packs
Enhanced Privacy Keys
OTAP Keys
RAS Keys
Firmware

27. radio vs Template view Radio View Template View Radio Button
Import / New Radio
Radio ID / IP Address
Assign Templates
Edit (Voice Announce, Channels, Talkgruops, Privacy, RAS, etc)
Schedule Jobs
Template View
Actions > Manage > Template
Rename
Delete
Edit (Voice Announce, Channels, Talkgroups, Privacy, RAS, etc)
Select Language Packages
Upgrade firmware

28. Manage Voice Announcements
The Manage Voice Announcement (VA) - view and manage the available VA files in RM Server.
Actions > Manage > Voice Announcements
VA files have to be imported from RM Client to RM Server, local or remote
Custom Recorded VA files can also be imported

29. Manage Language Packs
The Manage Language Packages - view and manage Language Package files stored in the RM Server
Actions > Manage > Language Packages
Language files have to be imported from RM Client to RM Server, local or remote

30. Manage keys
The Manage Keys - view and manage the radio security licenses:
Enhanced Privacy
OTAP
RAS
Actions > Manage > Key
Key repository containing all the keys available for all the radios in the RM Server

31. Manage Firmware
The Manage Firmware feature - view the firmware packages stored in the RM Server.
Actions > Manage > Firmware
Firmware files have to be imported from RM Client to RM Server, local or remote

32. Upgrading Firmware through RM
Actions > Manage > Template > Upgrade Firmware
Radio Firmware is upgraded by upgrading the Template applied on the radio
Template can be upgraded to any applicable newer Firmware available in the RM Server
NOTE: The radio MUST be Read into the RM Server before the firmware can be upgraded via a Template Rule: Once Firmware Upgrade has been assigned to a Template, that Template can’t be selected for other radios with old firmware.

33. Multi-radio programming (win 7)
Simultaneous programming of up to 16 radios via USB
Radios MUST have Unique IP Addresses in different subnets
RM Device Programmer must run on a Windows 7 machine
Procedure:
CPS - Read, assign a Unique Radio ID and IP / subnet to each unit, and Write to each radio
CPS – Save each radio default codeplug
RM Client: Actions > Import > Radio all new codeplugs to the RM Server
RM Client: Select all new radios, then Schedule Job > Read via Wire
RM Client: Select all new radios, right click Select Template pick 1 common
RM Client: Actions > Manage > Template right click on template from #5 and
Edit Template (Voice Files, Contacts, Talkgroup, Channels, RAS Key, etc) Remember – SAVE and check Yes to All
Select Language Packs Remember: click Yes to All when asked
Upgrade Firmware Remember: click Yes to All when asked
RM Client: select all applicable radios Schedule Job > Write via Wire

34. Linked Capacity Plus (LCP) enhancements

35. System capacity LCP now supports up to a maximum of 15 sites.
Each site supports up to a maximum of 6 trunked repeaters.
Including data revert repeaters, each site supports up to a maximum of 9 repeaters.

36. Hairpinning / nat loopback
For pre R2.2 system releases, a hairpinning router is required at any site where there are multiple LCP devices and one of these devices is either a Master repeater or an RDAC application.
The R2.2 system release provides an option to eliminate the need for a hairpinning router at the Master site.
However, a hairpinning router is still required at any site (including the Master site) where there are multiple LCP devices and one of these devices is an RDAC application.

37. Hairpinning / nat loopback
To use a non-hairpinning router at the Master site:
Switch off PAT (Port Address Translation) in the Master site router.
Ensure there are no RDAC applications running at the Master site.
Ensure the Rest Channel / Site Address and all LCP devices at the Master site use different IP Addresses and UDP Port numbers (the easiest way to ensure this is to use static addressing for everything at the Master site).
Configure the Master IP field in the Master repeater with the static WAN IP address of the Master site router.
Configure the Master address fields in the Peer repeaters at the Master site with the static LAN address of the Master repeater.
The Master repeater discovers the addresses of all Peer repeaters in the LCP system during the LE (Link Establishment) which occurs at power up and stores them in an internal Peer mapping table.
These Peer addresses need to be WAN addresses in order for them to be made available across the entire LCP system.
For pre R2.2 system releases, the only way to ensure that the Master repeater obtains WAN addresses for the Peer repeaters at the Master site is for these Peer repeaters to register with the Master repeater during the LE using the Master repeater’s WAN address. This requires that the Master site router supports hairpinning in order for the WAN packets to be looped back to the Master repeater.
For the R2.2 system release, so long as the conditions shown on this slide are met then the Peer repeaters at the Master site can register with the Master repeater during the LE using the Master repeater’s LAN address (note: Peer repeaters at the other sites still need to register with the Master repeater using its WAN address). This eliminates the need for the Master site router to support hairpinning.
For the R2.2 system release, when a Peer repeater registers with the Master repeater during the LE and the return address supplied for the Peer repeater is a LAN address that falls within the same subnet as the Master repeater then the Master repeater translates this LAN address to a WAN address by following the same simple NAT procedure as the Master site router. This involves translating the Peer repeater’s IP address to the Master site router’s WAN IP address (which is configured into the Master repeater) and preserving the Peer repeater’s UDP Port number.

38. Man Down

39. Introduction
The Man Down (MD) feature is provided as part of the radio firmware and utilizes an accelerometer built onto the main radio board (i.e. It does not require the use of an Option Board).
This feature is supported by all DP4000 series ATEX subscribers.
Configuration of MD settings is via the standard MOTOTRBO CPS.
The MD feature supports both motion detection (e.g. Movement, Anti-Movement) and angle detection.
MD motion and/or angle detection can be individually enabled/disabled in the CPS.
The MD feature can be enabled/disabled in the CPS per-channel.
User can also disable the feature completely via radio Menu and programmable buttons (this is a radio wide functionality)
2 beeps for Man Down ON and 1 beep for Man Down OFF

40. Man Down alarm Types
The MD feature offers 3 types of CPS configured alarm:
MD Angle Alarm (angle detection)
If enabled, the MD Angle alarm functionality will monitor the duration the radio is tilted below a CPS configured angle value.
The duration is CPS configured and once exceeded, the radio will sound an Alert Tone for another CPS configured duration before initiating an emergency alarm as determined by the emergency system associated with the channel.
This function may be used in conjunction with the No-movement alarm (but not the Movement alarm).
MD No-movement alarm
If enabled, the MD No-movement alarm functionality will monitor the duration of time the radio remains stationary.

41. Man Down alarm Modes MD Movement alarm
If enabled, the MD Movement alarm functionality will monitor for any radio movement.
If movement is detected which exceeds a CPS configured duration, the radio will sound an Alert Tone for another CPS configured duration before initiating an emergency alarm as determined by the emergency system associated with the channel.
The Alert Tone can be disabled in CPS - useful for cases where radio is required not to sound an alert if stolen.

42. Man down reset actions
The Alert Tone is a momentary tone that will be sounded before the actual emergency is sent out to remind users that an action has to be taken to reset the Man Down. The actions needed to reset the Man Down are as follows:
MD Angle Alarm: The radio needs to be stood vertical (or at an angle above the CPS programmed angle).
MD No-Movement Alarm: The radio needs to be moved.
MD Movement Alarm: The radio needs to stop moving.

43. CPS programming
Common Settings
3 types of Alarms

44. Sensor sensitivity
The sensitivity of the movement sensor is CPS configurable as follows:
Minimum (Least sensitive)
Medium
Maximum (Most sensitive – small movements activate the Man Down)

45. Alert tone Volume
The volume of the Man Down Alert Tone is configured by the CPS as shown below.
The volume level of the Alert Tone can either be set to follow the radio volume knob (Auto) or set to a fixed level (1 to 10).

46. Alert repeat period
There is an option to set how often the Alert Tone (momentary) should be repeated (from 1 – 10 seconds).
Alternatively the Alert Tone can be disabled by the CPS in which case users will not be able to enable the tone (via the radio menu or a programmable button).

47. Disabled alert repeat period
For MD enabled channels, users have the option to disable the MD feature via the radio menu or a programmable button.
To remind users that MD is deactivated, an alert tone can be sounded repetitively by configuring the “Disabled Alert Repeat Period” setting in CPS (between 10 – 600 seconds).
Alternatively this can be disabled altogether and no reminder will be sounded.
The Disabled Alert tone has the same frequency as the Man Down OFF tone.

48. Pre-alarm and alarm settings
Pre-Alarm Duration
Duration to monitor radio’s condition (depending on Alarm Type selected) before sounding Alert Tone.
Alarm Duration
Duration to sound repeating Alert Tone (to alert user that an Emergency will be sent if the condition is not corrected).
Once the Alarm Duration has expired, an Emergency alarm will be initiated as determined by the Emergency system associated with the channel.
Alert Tone
Option to disable Alert Tone for Movement Alarm – useful for cases where radio is required not to sound an alert if stolen.
1 – 3600 sec
1 – 3600 sec
1 – 3600 sec

49. Alarm angle setting
The Alarm angle setting allows the threshold angle at which the radio generates an MD event to be configured.
There are 3 angles as follows: 30º, 45º and 60º.
The sensor sensitivity affects how long it takes for the radio to register a change in angle:
Maximum – 1 seconds
Medium – 2 seconds
Minimum – 4 seconds

50. Man Down Device Failure
If there is a failure with the MD device, the user will be alerted by a soft repeated alarm tone (provided, the radio is not in test mode).
Additionally, the failure shall be informed via an XCMP Broadcast notification.

51. Arabic language

52. introduction
DP2000 and DP/DM/SL4000 series radios support the display of Arabic language.
Additionally, DP4800 series radios ordered with the Arabic keypad option support IME capabilities for entering text in Arabic language (both Multitap and XT9 Predictive text).
The Arabic language is displayed (read) from Right to Left (RTL) and consists of 28 individual alphabets/characters.
Non-Arabic characters (including numbers, e.g. 0,1,2…9), when used together with Arabic characters, are displayed from Left to Right.
Capitalization is not required for Arabic language – pressing the ‘0’ key enters the number ‘0’.
Users have an option in the IME editor to input (Eastern) Arabic numerals – by default, users will use Hindu numerals (i.e. 0,1,2…9).

53. Screen example
Radio editor shares the same IME layout for the English language, the only difference being that the text is displayed from Right to Left:
No changes to the icon placement on the display – i.e. the icons are displayed the same as for the English language.
NOTE: If the string is too long to fit into a single line, the string will be truncated with 3 dots ('...'), and the 3 dots shall be appended at the left (this assumes the Arabic language is selected as default).

54. Models that support Arabic IME
Regional Super Tanapa
Description
PMUD2904AAHEAA
DP W ARB FKP GPS BT
PMUD2917AAHEAA
DP W ARB FKP
PMUE3675AAHEAA
DP W ARB FKP GPS BT
PMUE3676AAHEAA
DP W ARB FKP

55. Digital telephone patch Tones

56. Digital telephone patch Tones
New – adjustable in the Repeater codeplug:
Ring Tone Level (dB) - Radio User : Incoming Call Ring tone volume
Maximum -3 dB
Minimum -19 dB
Busy Tone Level (dB) – Radio User: system is currently busy
Maximum -6 dB
Minimum -22 dB
Request Tone Level (dB) – Phone User: prompt when to begin entering the Target ID via DTMF

57. THANK YOU… 57 MOTOROLA CONFIDENTIAL RESTRICTED
MOTOROLA, MOTO, MOTOROLA SOLUTIONS and the Stylized M Logo are trademarks or registered trademarks of Motorola Trademark Holdings, LLC and are used under license. All other trademarks are the property of their respective owners. © 2010 Motorola, Inc. All rights reserved. 57