astriumservices xchange administrator handbook_3

192
   Astrium Services  Page 1/192 Vizada XChange Administrator Handbook Date: January 2014 Ref: Version 2.3.2

Upload: lohidas-paila

Post on 03-Nov-2015

33 views

Category:

Documents


5 download

DESCRIPTION

user access control

TRANSCRIPT

4.1  
4.1.1  Specifications..................................................................................................................... 15  
4.1.2  
4.2.1  
4.2.3  
5.  
5.1.3  
5.1.4  WAN 2 Configuration (3 of 9) ............................................................................................ 21 
5.1.5  
5.1.7  Cost Matrix Configuration (6 of 9) ...................................................................................... 23  
5.1.8  
5.1.9  
5.1.10  Configuration Summary (9 of 9) .................................................................................... 24 
6.  Access & Login ............................................................................................................................ 25 
6.2  
7.1  
Navigation Pattern................................................................................................................... 31  
7.1.4  Weblets .............................................................................................................................. 34  
7.2.1  Information Overview ......................................................................................................... 36  
7.3  Home ....................................................................................................................................... 38  
7.4.3  
8.3.2  
8.4.2  
8.5  
9.2.1  Group Types ...................................................................................................................... 91 
9.2.5  
9.3  User Management................................................................................................................. 101  
9.3.4  Creating a Machine Account ........................................................................................... 107 
9.3.5  Editing a User Account .................................................................................................... 109 
9.3.6  Resetting User Passwords .............................................................................................. 110 
9.3.7  Local Credit Management ............................................................................................... 110 
9.3.8  Deleting a User Account .................................................................................................. 111  
10.  Rating Tables .............................................................................................................................. 112 
10.1  Cost Matrix ....................................................................................................................... 112  
10.2  Rating Schemes .............................................................................................................. 115  
11.2.3  
12.3  Traffic Logs ...................................................................................................................... 123  
12.4  Credit Logs ...................................................................................................................... 125  
13.  Telephony ................................................................................................................................... 130 
13.1  Phones ............................................................................................................................. 130  
13.1.3  
13.1.4  Connecting a Smart- or Softphone .............................................................................. 131 
13.2  
13.3  Telephone Setup ............................................................................................................. 133  
13.4  Connected Phones .......................................................................................................... 134 
14.4.1  
14.4.3  
14.6.2  Creating a Firewall Filter .............................................................................................. 150  
Rules Sequences: ........................................................................................................................ 153  
14.6.4  
14.7  Remote Management ...................................................................................................... 155 
14.7.2  
14.7.4  
14.7.5  Manual Remote Access Initialization ........................................................................... 164  
14.7.6  Terminating Remote Access ....................................................................................... 165  
14.8  Web Cache ...................................................................................................................... 166  
15.2.2  Time Synchronization .................................................................................................. 169 
15.3  System Monitoring ........................................................................................................... 171  
15.4  
16.  
17.  
 
 
19.  
19.1  Furuno Felcom configuration guide to be filled here ....................................................... 190  
20.  Appendix D ................................................................................................................................. 191 
21.  
 
 
Tables
 
 
Figures
 
 
 Astrium Services   Page 10/192
 
 
 Astrium Services   Page 11/192
 
 
1. INTRODUCTION
This user manual is a complete guide to using the Vizada XChange Box.
1.1 Copyrights
 All rights reserved. This publication and its contents are proprietary to Astrium Services. No part of this
publication may be reproduced in any form or by any means without the prior approval of Astrium
Services.
 Astrium Services has provided every effort to ensure the correctness and completeness of the material
in this document. However Astrium Services shall not be liable for errors contained herein. The
information in this document is subject to change at any time without notice. Astrium Services makes
not warranty of any kind with regard to this material including but not limited to the implied warranties
of merchantability and fitness for a particular purpose
1.2 Trademarks
 Astrium Services trademark referenced in this document is the property of the holding company of
 Astrium Services.
2. SAFETY & SECURITY
The following general safety precautions and warning must be observed when operating and servicing
the Vizada XChange Box. Failure to comply with these precautions or with specific warnings given
elsewhere in this manual violates the safety standards governing the design, manufacture and
intended use of the equipment. Astrium Services assumes no liability for the end-user’s failure to
comply with the present terms.
Before handling any equipment, be fully aware of the hazards of working on electrical circuitry.
Ensure that users are familiar with standard practices for preventing accidents. Please observe
the following safety guidelines when installing or handling the Vizada XChange Box:
  Always disconnect all power supply connections before working on Vizada XChange Box hardware.
  Ensure there is adequate air circulation and avoid any risk of tipping over by not  stacking or balancing the box on top of other devices. Ensure the installation is firmly and securely in place.
  Check out possible work area hazards, such as damp floors, ungrounded power extension cables, and missing safety grounds.
  Do not carry out any action that creates a potential hazard to people or renders the equipment unsafe.
  Do not work alone if there is the slightest risk of a potentially hazardous condition.
The chassis of the equipment is tamper proof and should never be opened under any
circumstances. Doing so will void the warranty.
 
 
3. MOUNTING
The following instructions optimize the configuration of the equipment.
  Do not stack or balance the equipment on top of other devices. This prevents problems due to tripping over cords and cables, and allows air to circulate. Check that the installation is fixed securely in place. 
  Install the box in an open rack whenever possible. If you install it in an enclosed rack, make sure it has adequate ventilation. Do not add too many devices as each unit generates heat. An enclosed rack should have louvered sides and a fan to cool the air.
  When mounting a chassis in an open rack, ensure that the rack frame does not block the intake or exhaust ports. If the chassis is installed on slides, check the position of the chassis when sliding it all the way into the rack. 
 
 
4. HARDWARE & OPERATING SYSTEM
4.1.1 Specifications
MAIN BOARD
Supports Intel® Core™ 2 Duo / Pentium® Dual-Core / Celeron® processors in LGA775 package Supported FSB: 800MHz / 1066MHz / 1333MHz Intel® G41 and ICH7R chipset
MAIN MEMORY 4 GB DDR2-SDRAM
OPERATING SYSTEM
LAN chipset: Intel® Supported link speeds 10 / 100 / 1000 Mbit/s
I/O INTERFACE FRONT
HDD access / Power / GPIO status LEDs 2x USB 2.0 ports 2x RJ45 type LAN ports 3x RJ45 type WAN ports
I/O INTERFACE REAR
DEVICES 1x on-board CompactFlash 1x internal 2.5” HDD drive 
POWER INPUT 200W ATX power supply
DIMENSIONS 426mm x 450mm x 44mm
CERTIFICATION CE Approval FCC Class A UL
Table 1: Hardware Specifications Rack Unit
 
 
4.1.2 Port Overview Rack Unit
Front Panel:
4.2 Wall mount Unit
4.2.1 Specifications
MAIN BOARD
Supports Intel® Core™ 2 Duo / Pentium® Dual-Core / Celeron® processors in LGA775 package Supported FSB: 800MHz / 1066MHz / 1333MHz Intel® GM45 and ICH9M chipset
MAIN MEMORY 4 GB DDR2-SDRAM
OPERATING SYSTEM
LAN chipset: Intel® Supported link speeds 10 / 100 / 1000 Mbit/s
I/O INTERFACE
HDD access / Power / GPIO status LEDs 6x USB 2.0 ports 2x RJ45 type LAN ports 2x RJ45 type WAN ports
4x RJ11 type telephony ports
1x power switch
POWER INPUT 150W DC ATX power supply
HUMIDITY 10% - 90% non-condensing
CERTIFICATION CE Approval
 
 
4.2.2 Port Overview Wall Unit
RJ-45
Sockets
LAN1
LAN2
WAN2
4.2.3 Power Supply Wall Mount Unit
The picture below displays, how the delivered power supply should be cabled and connected.
Figure 1: Power Supply Cabling
 The power supply is not designed to be used on board a vessel. It’s designed on shore laboratory
tests only.
5. INITIALIZATION & DEFAULT SETUP
Connect all hardware devices to the proper slots in the Vizada XChange Box. For further information about the cor rect procedure for installing the hardware, refer to the ‘Hardware Installation Quick Guide’. 
5.1 Wizard
When starting the Vizada XChange Box for the first time, an initialization wizard takes the installer through the first steps for configuring the system. This chapter describes these steps in more detail.
 The wizard can be restarted by an authorized installer at any time to reconfigure the Vizada
XChange Box. To start the wizard, go to Box Settings > System > Start Wizard. 
5.1.1 Before Starting
1. Restore from a backup file 2. Process the wizard
In case of a box swap or fleet wide deployment of the Vizada XChange Box with similar configuration
the ‘Restore form a backup file’ option can be selected.
When backup files are already stored locally, a table provides all available files. In addition a backup
file can be uploaded from the computer used by the installer.
For a new installation, select option 2 ‘Process the wizard’ and follow the next steps. 
5.1.2 General Configuration (1 of 9)
Select the ‘General Information’ setting about the Vizada XChange Box and click ‘Next’. 
  Language (English only)
 
 
XChange – Administrator Handbook  Astrium Services   Page 21/192
5.1.3 WAN 1 Configuration (2 of 9)
For the FleetBroadband terminal connected to WAN port 1 of the Vizada XChange Box, select ‘Yes’
and select one of the predefined terminal models controlled by the box.
  Select the model controlled by the device (Supported Devices listed in Appendix B)
  Change the device name and description if you wish   Change the IP parameters if necessary
It is recommended that for most usage scenarios you keep the predefined IP parameters.
 Only IT specialists familiar with IP addressing should change the predefined IP parameters when
necessary.
5.1.4 WAN 2 Configuration (3 of 9)
If there is no secondary broadband terminal in place, select ‘No’ and click ‘Next’. 
If secondary (optional) autonomous broadband terminals are used on board, select the number of the
terminals connected to WAN port 2 on the Vizada XChange Box. For each secondary terminal a list of
details appear. Collapsible panels separate each terminal. panel.
5.1.4.1 One Autonomous Terminal:
  Select the autonomous device model   Change device name and description if you wish
  Select the WAN IP addressing mode
If you select the DHCP service, the Vizada XChange Box will automatically retrieve all necessary IP
addressing details from the terminal.
If you select static mode, the box must be provided manually with a static WAN IP address and all IP
 
 
5.1.4.2 More Autonomous Terminals:
If more than one autonomous broadband terminal are in place, connect all terminals to WAN port 2 of
the Vizada XChange Box, using an Ethernet switch (DHCP disabled).
 In the current version, up to 3 different autonomous broadband terminals can be connected at the
same time.
  Select each autonomous broadband terminal   Change the device name and description if you wish
  The WAN IP addressing mode can only be ‘Static’    Set the IP address of the Vizada XChange Box for each terminal   Set the gateway IP addresses   Set primary and secondary DNS server addresses
When all these requisite details have been correctly set, click on ‘Next’ to continue.
 Each terminal must be in a separate IP address range.
5.1.5 WAN 3 Configuration (4 of 9)
If an MPDS terminal is in place and connected to WAN port 3, go through the setup procedure for
configuring step 3. If the WAN port 3 is not used, select ‘No’ and click ‘Next’.
5.1.6 LAN Configuration (5 of 9)
Up to two local networks can be configured in static IP addressing mode or in DHCP dynamical IP
addressing mode.
Select one IP mode for each local network (LAN1 and LAN2), and click ‘Next’. 
Using ‘DHCP Server Mode’  enables the DHCP service for the specific network, and all connected network devices are provided with appropriate IP addresses by the box. LAN 1:
  The local Vizada XChange Box IP address is pre-set to 10.0.1.1/24   The pre-set IP range is set to 10.0.1.2 – 10.0.1.254
LAN 2:   The local Vizada XChange Box IP address is pre-set to 10.0.2.1/24   The pre-set IP range is set to 10.0.2.2 – 10.0.2.254
If just one LAN port is used, select ‘No’ for the second LAN configuration. 
 Only IT specialists familiar with IP addressing should change the predefined IP parameters where
necessary.
XChange – Administrator Handbook  Astrium Services   Page 23/192
Using ‘Static Mode’  disables the DHCP service for the specific network and all connected network devices must be provided with a static IP address or another DHCP server must be enabled to provide IP addresses automatically. The local Vizada XChange Box IP address must be a static address. It is pre-set to 10.0.1.1/24.
 Only IT specialists familiar with IP addressing should change the predefined IP parameters where
necessary.
 Example: LAN1 set in ‘Static Mode’ with IP address 10.10.10.1/24 
Connected networks devices must be provided with the following IP parameters:
IP address : 10.10.10.X (with X between 2 and 254)
Network mask : 255.255.255.0
Secondary DNS : blank  
5.1.7 Cost Matrix Configuration (6 of 9)
 A cost matrix is displayed. The number of devices depends on the broadband terminals selected in
steps 2 and 3 of the initialization wizard.
For each broadband terminal prices for
  Voice ($/min)   Data ($/KB)
  VoIP ($/min)
must be configured separately per accounting mode (corporate usage or local allowance).
Set the cost matrix to $0.00 if a flat-fee for data usage is available for an autonomous broadband
terminal such as a VSAT or if there is no need to track fees for crew members, for example.
 After filling out the cost matrix, click ‘Next’. 
5.1.8 Rating Schemes (7 of 9)
 A rating scheme is displayed. The number of devices depends on the broadband terminals selected in
steps 2 and 3 of the initialization wizard.
For each broadband terminal the minimum charge and stepping for
  Voice (sec)
  VoIP (sec)   Data (KB)
 
 
5.1.9 Configuring Analogue Phone Ports (8 of 9)
Declare the authentication mode to each analogue phone connected and click ‘Next’:
  ‘Open access’ = ‘no authentication required’    ‘PIN code restricted’ = ‘authentication required’ 
To change the default configuration, click ‘Edit’. 
  Change the phone names if wished   Select which phone shall ring on incoming calls   Click ‘Save’ to store the configuration or ‘Cancel’ to decline  
 It is recommended that you select the phone under the captain´s responsibility to ring on external
calls exclusively for business communications.
  If an analogue phone is provided for private usage by the crew (or if the port is not used) it is
recommended that you set the authentication mode to ‘PIN code restricted’ to avoid g enerating
unwanted costs for voice call on ‘Corporate’. 
 The authentication mode can be changed later on by the administrator.
5.1.10 Configuration Summary (9 of 9)
Check the configuration summary. Make sure all devices and additional equipment are connected to
the Vizada XChange Box and are that they are all switched on.
If any of the configuration settings are incorrect, click on ‘Back’ to return to the specific configuration
page and change the settings accordingly.
If the configuration setup is correct, c lick ‘Save’ to continue with initializing the box.
  The Vizada XChange Box will restart after the initialization wizard has been completed. After
 
 
6. ACCESS & LOGIN
To access Vizada XChange Box web interface, you need to connect a computer to the local network
(LAN1 or LAN2).
To login and use the Vizada XChange Box web interface you need to allow in your browser to accept
cookies. Administrators connected to the Vizada XChange Box must have Adobe Flash Player version
8.0 or higher installed and running on their computer.
6.1 URL & Login
The login page can be accessed using any web browser supporting Java script by entering the URL:
http://xchange.box. 
6.1.1 Login
To login onto the Vizada XChange Box, use the username and 8-digit passcode provided by the
master on board or any other responsible person.
6.1.2 Logout
To logout from the Vizada XChange Box, click the ‘Logout’ link on top middle of any page. 
Figure 3: Logout
6.1.3 Access to mobile optimized Web Interface
The mobile optimized version of the Vizada XChange Box web interface can be accessed using any
web browser by entering the URL: http://m.xchange.box or  http://mobile.xchange.box. 
Figure 4: Mobile Login Page
 A detailed user guide for the mobile optimized web interface is provided separately.
6.2 User Profiles
There are three different predefined access level profiles that provide different access rights for usage, management and configuration. For each access level, there is one account preconfigured. Details on access rights details for each preconfigured account are listed in Section 5.2.4.
It is highly recommended to change the default password at installation.
6.2.1 Administrator
Only the local administrator is allowed to change the configuration of the Vizada XChange Box.
The administrator is not allowed to launch a data session or voice call, so there is no ‘My Profile’
page created for them.
The captain is allowed to manage the Vizada XChange Box.
Generally he has read access to the Vizada XChange Box configuration, is allowed to manage local
users and user groups and is able to launch data sessions and voice calls.
6.2.3 Crew
 
 
6.2.4 Access Rights
The following table displays access rights for all user profiles.
Meaning of the code words:
  ‘Admin’  = Full read and write access   ‘Access’  = Read and execute access
  ‘√’ = Read-only access 
 Admin
MONITORS
OVERVIEW √  √  √ 
INSTALLER ADMINISTRATOR CAPTAIN CREW
PORT FORWARDING
SYSTEM
OVERVIEW √  √  √ 
MY PROFILE
REMOTE LIBRARY √  √  √  √ 
 
INSTALLER ADMINISTRATOR CAPTAIN CREW
7. USER PORTAL & WEB INTERFACE
7.1 Navigation Pattern
7.1.1 L-Shape Navigation
The Vizada XChange Box uses the ‘L shaped navigation’ design - the most frequently used navigation
pattern for “classic” web usage. This involves a combination of horizontal and vertical navigation.
Horizontal navigation is used for key main pages such as ‘My Profile’ or the local Intranet. Vertical
navigation is used to navigate down specific functionalities inside the main pages or sections.
Figure 5: Example of the User Interface
 
 
7.1.2 Top Navigation Bar
The top navigation bar includes the main sections of the Vizada XChange Box. The table below shows
how sections are displayed with respect to each user’s profile: 
ADMINISTRATOR CAPTAIN CREW
Table 4: Display of Sections
The top navigation bar is black with a white font to display the names of each section. When the
mouse pointer rolls over the section, the tab turns red.
When you click on a section or on one of its inside pages, the section tab stays red.
Figure 6: Top Navigation Bar
 
 
7.1.3 Left Navigation Bar
The left navigation bar lists the sub-sections (2 nd level of navigation) and the pages inside them (3 rd
level).
 
 
7.1.4 Weblets
With the Vizada XChange Box you can navigate inside the same page at a 4 th level using horizontal
‘weblets’: 
  Before they are selected, a weblet is colored gray
  When you select a weblet, it turns white with the name in red
7.1.5 Collapsible Panels
To avoid displaying a very large amount of information on a single page when describing a long table
or a process, the system uses collapsible panels.
These panels can be opened or closed independently of each other as shown below:
Figure 9: Example of a Collapsible Panel
You can click on each panel and toggle between the expanded and collapsed status. To clarify this,
there is a double arrow that points to the right (collapsed state) or downwards (expanded state).
 A double square indicates that this panel cannot be collapsed and stays open all the time.
Figure 10: Example of a Double Square
 
 
7.1.6 Tables
To avoid displaying a very large amount of lines on one single page when describing a long table, the
system uses flexible tables.
The displayed amount of information can be changed by the user.
Figure 11: Example of a table
7.1.6.1 Sorting displayed information:
To sort the information displayed, click once on the title of a column to sort the list in ascending order
and twice for a descending order.
7.1.6.2 Changing number of shown lines:
The number of lines to be shown can simply be changed by clicking on the amount on the bottom line
of each table.
Click ‘10’ to display 10 lines per page or ‘100’ to display 100 lines per page. In case more lines are
available, they will be displayed on a further page.
 
 
7.2 General Editing Pattern
 An example of the general pattern for editing with the Vizada XChange Box web interface is given
below: it involves changing the user details for a crew member. This pattern is generally applicable for
editing and configuring values.
First, the system provides an overview of the existing data:
Figure 12: Example of an Overview of Values
 
 
7.2.2 Editing Data Values
By clicking on ‘Edit’ the page in question is refreshed and the data on display are converted into
editable fields.
Figure 13: Example of editable Data
By clicking on ‘Save’ the  data that has been changed will be stored in the Vizada XChange Box
system and the page is refreshed. It remains in editing mode.
 You cannot edit fields with a gray underlay.
 
 
7.3 Home
When the user has logged in successfully the system automatically redirects them to the ‘Home’
screen.
Figure 14: Captain´s Home Page
In the content listed below, the blocks of objects are displayed on the ‘Home’ page. The content will
vary according to the user profile.
ADMINISTRATOR CAPTAIN CREW
 
 
7.3.1 Connectivity
covers:
  Broadband terminal name
  Terminal status per communication type o  Data o  VoIP o  Voice
Figure 15: Example of Current Connection
Clicking the ‘Change’ link redirects the administrator or captain straight to the connection management
page to provide switching functionality for the manual broadband terminal.
 The small icon next to ‘Pharostar’ indicates that this device is the default device used by the
Vizada XChange system. This function is only available in combination with Global Maritime
Broadband Bundles from Astrium Services.
 
 
7.3.2 Overall Traffic
The ‘Overall Traffic’ block shows the overall traffic consumption for the current day and the current
month separately for each connected broadband terminal:
  Name of broadband terminal
  Data traffic consumption in amount and volume   Voice traffic consumption in minutes and amount   VoIP traffic consumption in minutes and amount
Figure 16: Example of Traffic On Board
Clicking the ‘More’ link redirects the administrator or captain straight to the ‘Traffic Log’ page, providing
a detailed account of changes in traffic over time.
 The ‘Overall Traffic’ block only displays for the administrator and captain. 
 Tip!! Clicking on the communication type all, data, voip or voice the displayed information will be
filtered to the selected type.
 
 
7.3.3 Events & Alerts
7.3.3.1 Administrator/Captain:
The ‘Events & Alerts’ block displays any alert transmitted by an active traffic monitor if for instance the
user´s prepaid allowance falls below the minimum threshold, or an event message in case a device is
no longer ready for connection
 Alert categories displayed cover:
  Event alerts
If an alert is issued, the type (Monitor, Connecti on…) and the event description will be displayed below
the alert category:
Figure 17: Example of Traffic Alerts
Clicking on the ‘More’ link redirects the administrator or captain straight to the ‘Event Log ’ page,
providing more details about the events.
To acknowledge and to hide an event message from the home page, simply click the ‘X’ next to the
alert.
7.3.3.2 Crew Member:
For crew member an alert is issued if the local prepaid allowance falls below the minimum threshold. A
message is displayed informing the crew member:
Figure 18: Traffic Alerts for Crew member
 
 
7.3.4 My Traffic
The ‘My Traffic’ block shows the user’s personal traffic consumption for the current day and current
month separately for each connected broadband terminal and type of service:
  Name of broadband terminal
  Data traffic consumption in amount and volume   Voice traffic consumption in amount and volume   VoIP traffic consumption in amount and volume
Figure 19: Example of My Traffic
  As the administrator is not allowed to launch a data session or voice call, this block is not
displayed.
 Tip!! Clicking on the communication type all, data, VoIP or voice the displayed information will be
filtered to the selected type.
 
 
7.3.5 Connection
The ‘Connection’ block enables the captain and crew member to launch/disconnect a data session. 
Figure 20: Example of My Connection
7.3.5.1 Displayed information:
Before launching a new data session, the ‘Connection’ block displays:
  Connection (available data device)   Cost (cost per MB)   Available channel
o  The number of available channel depends on the available device and the user profile.
7.3.5.2 Session Launch:
To launch a data session, select the communication channel and press the green ‘Connect’ button.
Depending on the individual setup, you may only be able to select one communication channel.
 A status bar will inform you about the connection status:
Figure 21: Opening Channel
When the data session is established, the user’s personalized favorites are displayed automatically in
a separate tab in the browser.
During a data session, you can still surf on the local intranet, but cannot close the Vizada XChange
 
 
XChange – Administrator Handbook  Astrium Services   Page 45/192
During an active data session, the ‘Connection’ block gives users information about traffic
consumption and credit levels:
Figure 22: Connection Details
7.3.5.3 Disconnect:
To disconnect and to close the data session, just press the red ‘Disconnect’ button.
7.3.5.4 Daily Access Limits:
When the user tries to log-in outside his allowed time window, or when he has already reached the set
maximum communication duration for that day, the ‘Connection’ block displays a warning message
and it is not possible for the user to connect to the internet.
Figure 23: Time Window Message
 
 
7.4 My Profile
The ‘My Profile’ section is displayed for both the captain and crew users.
My Profile provides individual account management and personalization capabilities to access:
  User Account details o  Password management
  Usage log
Figure 24: My Profile
7.4.1 Account
The ‘Account’ section gives an overview of the user’s account details. 
You can edit the name, email address and mobile number fields. Just type the new values into the
white text fields and save the changes. An overview of all the information is shown in this table:
EDITABLE READ ONLY
Table 6: Account Information Details
The non-editable fields (except of the PIN password) can only be changed by the administrator or
 
 
7.4.2 Changing a Password
To change the password click the ‘Password’ weblet and proceed as follows: 
  Type in the last 4-digits of the current PIN-code   Type in a new set of 4 digits (only the last 4 digits can be changed)   Confirm the new set of digits
  Click ‘Save’ 
 
 
7.4.3 Usage
The ‘Usage’ page provides each user with their personal usage and credit c onsumption log for all
broadband terminals and types of communication for up to 30 days.
Figure 26: Usage
DESCRIPTION
TYPE Data, voice or VoIP
TYPE CLASS Class of session e.g. ‘Standard IP’
TERMINAL Used terminal
DURATION Duration of the session
UNIT Units consumed e.g. kB, min
TOTAL COST Credit consumption of the session
DESTINATION Displays the can number dialed (For voice calls only) 
Table 7: Usage Log Details
By default, all available usage data can be displayed by entering the usage log.
Using the selection criteria given at the top you can display specific usage details. The selection
criteria include:
  Type o  All o  Voice o  Data o  VoIP
  Period o  Current Month o  Last 7 days o  Last 14 days o  Last 30 days
  Terminal (if more than one is available on board) o  All Terminals o  A specific terminal
To filter specific usage details, select the options f rom the different selection criteria and click ‘Submit’.
The page will be refreshed, and only the selected usage details will display on the basis of the
selection criteria.
Tip!! To sort the display of usage details, click once on the name of any column to sort the list in an
ascending order and twice for a descending order.
 
 
7.4.4 Favorites
The ‘Favorites’ section can be used to access your ‘personal’ favorite websites. Your personal
favorites appear in a separate browser tab at connection start. This is especially useful when you
share the same PC with several other users.
Figure 27: Favorites
To go straight to a bookmarked website, simply click on the ‘Favorite Title’. 
7.4.4.1 Adding new favorites:
To add new favorites, proceed as follows:
  Click ‘Add’    Type in a title for this bookmark   Input the website´s URL   Click ‘Save’    Or click ‘Back’ to cancel 
Figure 28: Adding a New Favorite
 
 
7.4.4.2 Sort Favorites:
To sort the bookmarks into a preferred sequence, click on the up or down arrows in the first column.
7.4.4.3 Editing Favorites:
To edit or delete a favorite, click on the favorite´s line. The page is refreshed and you are offered ‘Edit’
or ‘Delete’ options. 
Before you delete a favorite, the systems ask you via a popup if you really want to delete the favorite.
7.4.5 Address Book
Each user is provided with a personal address book. Entries in the personal address book cannot be
shared and are accessible by individual users.
Figure 29: Personal Address Book
 
 
7.4.5.1 Provided contact details:
  Phone   Mobile   Email   Department   Phone 2
  Fax   Street
To add a new contact, proceed as follows:
  Click ‘New’    Fill out all possible contact details   Select the contact category   Click ‘Save’, or ‘Back’ to cancel  
7.4.5.3 Editing existing contacts:
To edit a contact, proceed as following steps accordingly:
 
 
7.4.5.4 Searching for a contact:
To search for a contact, type the name you want in the text field at the top of the weblet page and click
‘Search’. 
 All matching contacts will be displayed on a new page. Click on ‘Back to Address Book’ to return to the
main page of the address book.
7.4.6 Authorizations
The ‘Authorizations’ section provides each user all information about the set online usage
authorizations.
Figure 30: Authorizations Profile Overview
Depending on the user´s group settings, the user is informed about his online usage authorizations in
all available details.
The ‘Maximal mobile data session duration’ is an automatic set thresho ld displaying the time when a
user is disconnected automatically.
7.5 Intranet
The ‘Intranet’ rubric is displayed for all users on board and gives access to:
  Local Library   Remote Library   FAQ
  Address Book (vessel wide)
7.5.1 Local Library
The libraries can be accessed by all users and offer a local store-and-share feature.
The administrator or captain is empowered to manage categories and upload or delete documents and
files that shall be shared by the entire vessel.
Figure 32: Local Library
7.5.1.1 Opening shared files:
Shared files can easily be opened by clicking on the title.
Depending on the file format and the computer’s default settings, either the web browser opens a new
window to display the content of the file, the default application will open the file or asks if the file
should be downloaded.
7.5.1.2 Managing Categories:
The administrator or captain is granted to create new categories, and edit or delete existing categories
displayed in the local library.
To manage categories, click on the appropriate icon beside the category´s name.
Figure 33: Managing Categories
  Click the ‘Pen’ icon    Rename the category in the popup
  Click ‘Save’ or ‘Cancel’ 
Figure 34: Rename Category
  Click the ‘Delete’ icon    Click either on ‘Delete’ or ‘Cancel’  
Figure 35: Delete Category
Files stored in a category will be deleted.
To add a new category, proceed as follows:
 
 
7.5.1.3 Managing shared files:
The administrator and captain is granted to upload new files, and edit or delete shared files in the local
library.
Uploading new files:
  Click ‘New File’    Select the category under which the new file is to be saved
  Click ‘Browse’ and navigate to the folder where the new file is stored on your computer   Click ‘Open’ to start the upload  
During the upload, the Vizada XChange Box displays a status bar showing the file name and size.
Figure 36: Status Bar
 After the file is successfully uploaded, click ‘Back’ to return to the category display. 
 The maximum file size is 700 MB.
7.5.1.4 Editing and deleting shared files:
To edit or delete a shared file, click on the line of the file:
  Click ‘Edit’ to change the name    Click ‘Delete’ to delete the file
Click ‘Back’ to return to the category display. 
 
 
7.5.2 Remote Library
The remote library can be accessed by all users. It offers a local share feature that is updated and
managed from the shore.
Figure 37: Remote Library
7.5.2.1 Opening shared files:
Shared files can easily be opened by clicking on the title.
Depending on the file format and the computer’s default settings, either the web browser opens a new
window to display the content of the file, the default application will open the file or asks if the file
should be downloaded.
 Only shore managers accessing the Vizada XChange Manager can change shared content of the
remote library, FAQs or Newsroom.
 
 
7.5.3 FAQ
The FAQ (Frequently Asked Questions) enables self-support by providing answers to the most
common questions from users. The FAQ section can be managed remotely and is not only linked to
Vizada XChange.
Figure 38: FAQ
The FAQ section is divided into categories, with a set of questions and answers for each category.
By clicking on a question, the panel opens and the corresponding answer is displayed below.
Figure 39: Question and Answer
 
 
7.5.4 Address Book
The entries in the shared address book can be shared and edited for every user.
Figure 40: Shared Address Book
Default contact details cover:
  Phone   Mobile   Email   Department
  Country   Website
7.5.4.1 Adding new contact:
To add a new contact, proceed as follows:
  Click ‘New’    Insert all possible contact details   Click ‘Save’, or ‘Cancel’ 
7.5.4.2 Editing an existing contact:
To edit a contact, proceed as follows:
  Expand the ‘Show more information’ collapsible panel    Click ‘Consult’    Click ‘Edit’ or ‘Delete’    Change one or more entries or add information   Click ‘Save’ 
7.5.4.3 Searching for a contact:
To search for a contact, type the contact name in the search field above and click ‘Submit’. 
 All matching contacts will be displayed on a new page. Click on ‘Back‘ to return to the main page of the
address book.
7.6 Newsroom
The Newsroom section provides news sent from shore side to the Vizada XChange Box.
Figure 41: Newsroom
 
 
XChange – Administrator Handbook  Astrium Services   Page 64/192
To read the whole article click on ‘Read more’. A popup window appears and the content of the whole
article will display. To return to the overview page, click ‘X’. 
Figure 42: Detailed News
To access to complete news database, click on ‘All News’. The page is refreshed and provides an
 
 
7.7 Support
The ‘Support’ rubric is displayed for Captain and Administrator connected to the Vizada XChange Box.
Support gives access to:
Figure 43: Support
7.7.1 Vessel Details
The ‘Vessel Details’ page provides general information about the vessel on which the Vizada XChange
Box is installed, and about the shipping company. This covers:
VESSEL INFORMATION
Vessel Name
Call Sign
7.7.2 Box Details
The ‘Box Details’ displays general information about the Vizada XChange Box system in use:  
  Box ID: Unique Vizada XChange serial number generated by Astrium Services   Software: Actual installed firmware version
  Hardware: Unique box hardware serial number   Last Upgrade: Date of last firmware upgrade
Figure 44: Box Details
7.7.3 Contact
The contact form is embedded in the Vizada XChange Box interface and can be accessed by the
Captain and Administrator.
If there is a need for support from Customer Care, this contact form must be filled out correctly and
completely.
To provide all needed information for the support team, the data displayed in gray are automatically
pre-set by the box system and the email contact data.
Fields marked with a * are mandatory and must all be filled out before the message is sent.
Figure 45: Contact Form
If the form is ready to be sent, click ‘Send’. The default email client then opens, and an email is
generated and sent automatically.
 
 
8. CONNECTIVITY
8.1 Terminals (WAN)
Please connect broadband terminals only onto the WAN (Wide Area Network) RJ-45 sockets of the
Vizada XChange Box.
  WAN port 1 is pre-set to connect and control a FleetBroadband terminal. (Thrane&Thrane Sailor 250/500 recommended)
  WAN port 2 is pre-set to connect to (optional) autonomous broadband terminals such as VSAT or Iridium OpenPort. (not all features available for autonomous devices)
SUPPORTED WAN2
CONTROLLED WAN1
 
 
XChange – Administrator Handbook  Astrium Services   Page 70/192
 Do not connect devices such as computers or network routers between the broadband terminals
and the Vizada XChange Box.
  You will find a dedicated setup procedure for Furuno Felcom and JRC JUE FleetBroadband
terminals in Appendix C.
8.1.1 Broadband Terminal Prerequisites
Ensure that the satellite terminal(s) listed below are configured as indicated:
FleetBroadband: 
  The LAN port connected to the Vizada XChange Box is enabled
  Router mode is enabled   Profile automatic activation is disabled   PPPoE is enabled   The analogue voice port is set to 5.4Hz only
  The Thrane & Thrane handset set in static IP mode using for instance 192.168.0.20 (IP range 192.168.0.1 to 192.168.0.13 are reserved for the box)
Autonomous broadband terminal:
  The LAN port connected to the Vizada XChange Box is enabled
 
 
8.2 Devices Overview
To access the connections overview, go to Box Settings > Devices > Overview. 
The overview page provides information about all broadband terminal connections selected during the
initialization wizard process and the manual terminal switching feature.
Figure 46: Device Overview
The Overview provides information about the status of the broadband terminal, indicates the default
 
 
Status:
  ‘Activated’  Terminal is activated for data and voice communications   ‘Deactivated’  Terminal is deactivated. No data or voice communications are
possible   ‘Ready’  Terminal is ready for data and voice communication
(independent from activation status)   ‘Not Ready’  Terminal is not ready for data or voice communications
(switched off or no satellite connection possible)
Under ‘Communication Channels’ (click to expand), there is status information about each setup
channel. Power and connection status are displayed separately for each communication channel.
 
 
8.3 Manual Device Switching
The Vizada XChange Box makes it possible to switch manually from one to another terminal: the captain or administrator can activate or deactivate one of the configured broadband terminals. All data and VoIP communication are carried out the activated device.
While switching off the device, all traffic to the device will be blocked and, for Controlled terminal
WAN1, all PDP context will be terminated.at a time. No simultaneous data sessions over two terminals
are possible. All data traffic is transmitted via the same terminal.
8.3.1 Activating a terminal:
To activate a terminal, go to Box Settings > Devices > Overview  and click once on the ‘On/Off’ button
next to the name of the terminal. This button indicates whether the terminal is currently activated (On)
or deactivated (Off).
Figure 47: Activating the Terminal
Confirm in the pop-up window that this terminal should be activated. The page is then refreshed and
the terminal status changes to ‘Activated’. 
If another terminal was previously activated, it will be automatically deactivated after confirmation and
the active data and voice session will be disconnected without sending a warning message to the user
who is connected.
To deactivate a terminal, follow the process described above.
 All active data and voip sessions will be disconnected immediately, and for WAN1 Controlled device,
all activate IP sessions will be terminates.
 
 
8.4 Semi-Automatic Device Switching (VSAT Fallback)
The Vizada XChange Box allows semi-automatic device switching from the backup to the default
terminal. The semi-automatic device switch can be configured by the administrator and needs no
additional manual action.
The manual device switch for captain and administrator remains unchanged.
In case the default device goes offline, the onboard staff has to switch on the backup device to
continue data communications.
The Vizada XChange Box periodically checks the availability and stability of the default device
automatically. When the default connection is ready and stabilized again, the connection will be
switched automatically back to the default device.
 Please note, the semi-automatic device switching is a premium feature and may not appear in your
Vizada XChange Box system.
8.4.1 Determine a Default Device
To configure a device as the default go to Box Settings > Devices > Settings.
Select the device and click ‘Edit’ 
Figure 48: Default Device
 
 
8.4.2 Connectivity Test:
When a device is determined as the default, the ‘Connectivity Test’ panel appears in the device
overview.
For the default device the Vizada XChange Box tests the online connectivity periodically by pinging a
defined onshore server. If the default device is online, this test will be performed in 30 second steps. If
the set threshold of failed pings is reached, the Vizada XChange Box defines the connection as offline
and raises an alert on the captains dashboard.
During offline status, the test will be performed in 10 second steps. When the set threshold of
successful pings is reached, the Vizada XChange Box recognizes the connection as online and
stabilized again.
Figure 49: Connectivity Test
The test settings can be changed by the administrator by clicking on ‘Edit’. 
The ‘Feature Status’ counts all proceed connectivity test pings and the number of unsuccessful pings.
If 5 pings in series are unsuccessful, the system indicates the connectivity as offline and raises an
alarm on the captains dashboard.
 
 
8.4.3 Automatic Device Switching
To see the automatic device switching settings, go to Box Settings > Devices > Automatic Link
Switching .
Figure 50: Device Switching
Here, the general switching feature settings can be checked. The switching can be either enabled or
disabled. If this feature is set on disabled, the automatic device switching will not be available.
The session cut delay (in sec.) is pre-set to 30 seconds. When the default device is online and
stabilized again, the system will wait 30 seconds before cutting active sessions during the device
switch.
  Only your Service Provider can change the activation status for the semi-automatic device
switching.
 The automatic device switching is performed only on change of default device status. If a device
switching is performed manually while the default device is online, the system will not switch back to
 
 
8.5 Device Management
To change the details on connected terminals and manage communication channels and firewall
filters, go to Box Settings > Devices > Settings. 
Figure 51: Terminal Management
Each connected terminal is separated by a weblet. To switch views from one terminal to another, click
on the appropriate weblet.
8.5.1 Device Details
By clicking on ‘Edit’, you can change the details of the connected terminal.
Figure 52: Editing the Device
The name and description are free-text fields and can be edited via the web interface. The Port and
Tunneling Ability cannot be edited. To change the Port connection and Tunneling settings, use the
initialization wizard again.
8.5.1.1 Auto start Remote Control & Port Forwarding
When you wish to access the Vizada XChange Box, a terminal or the local network remotely without
contacting staff on board, you can enable automatic start of remote access for each terminal
separately.
Simply tick a check box to enable ‘Remote Control’ and/or ‘Port Forwarding’ to be automatically
available when a terminal is enabled.
 When an auto start option is selected on the controlled WAN1 terminal, the Vizada XChange Box
opens a separate ‘public.dynamic’ IP session automatically. When using a FleetBroadband 150
terminal, each user group allowed to make data communication, needs to have the same ‘Remote
 Access’ communication channel available.
 
 
8.5.1.2 Tunneling Ability:
The tunneling ability of each device provides the information, if one single or multiple IP sessions can
be done in parallel:
 
 
8.5.2 Communication Channels
With communication channels the Vizada XChange manages the multiple ‘PDP Contexts’ available
over Inmarsat FleetBroadband.
To manage the communication channels for a connected terminal, click the ‘Communication Channels’
collapsed panel. The following list of communication channels are predefined and activated by default
(i.e. they are terminal dependent):
DESCRIPTION CONTROLLED WAN1
√  √ 
office synchronization
session √ 
Table 10: Communication Channels
Using the communication channel management facility, users can raise or lower the number of
available communication channels per terminal and set separate IP addressing parameter.
Communication Channels are linked to user groups. User groups are only allowed to launch data
sessions using one of the linked communication channels and the stored IP addressing options in the
channel. One communication channel can be linked to several user groups at the same time.
 The Universal Card channel can only be used by one user at a time. To enable several users to
launch a Universal Card data channel at the same time, the Universal Card channel is duplicated.
 
 
8.5.2.1 Creating a New Communication Channel:
To create a new communication channel, proceed as follows:
  Go to the terminal in question   Expand the ‘Communication Channels’ panel    Click ‘New’    Define a channel name (no space or special character)
  Define a description which will appear on user home pages   Select the type of connection   Select the disconnection mode
o  Auto disconnect: disconnects after defined time-out o  No disconnection: remains ‘always online’ 
  Set a disconnection time-out in seconds. (for auto-disconnect mode)   Select an accounting mode
o  ‘Universal Card’ for Universal Card user only  o  ‘Local Accounting’ local on-box accounting
  Select one of the predefined Vizada APNs
  Set a service name. Otherwise the SIM card default service will be used o  Set ‘public.dynamic’ as the service name to receive a public IP address on the data
session   Select the type of IP connection   Select a VPN type
 The new created communication channel is not associated to any user group. An association must
be done on user group level.
8.5.2.2 Editing/Deleting Communication Channel:
To edit a communication channel, click on the name of the channel. Click ‘Edit’ to change the channel
parameters or de-activate the channel. Click ‘Delete’ to delete a channel you have created. 
  NB: You can only delete communication channels you have created yourself. The predefined
 
 
8.5.3 VPN
The embedded VPN client supports connection to shore based ‘Open VPN’ and ‘GRE VPN’ servers.
The VPN client can be enabled and setup for any communication channel and broadband terminal
individually.
This individualism provides full flexible configuration capabilities. It is either possible to link the whole
vessel data communication to the on shore VPN server, or for instance just one user group like
machines or the corporate traffic.
The VPN channel can be defined as an one-way (Vizada XChange > Shore) or two-way (Vizada
XChange <> Shore) communication.
The two-way option provides remote access to the on board network clients linked to the VPN
channel.
To create a VPN channel, proceed as follows:
 
 
Follow the step-by-step instruction below.
 A more detailed VPN setup guide is provided in Appendix D.
8.5.3.2 Setup Open VPN connection:
  Set the VPN type to ‘Open VPN’   Set the direction ‘One-Way’ or ‘Both-Way’    Set the endpoint IP address of the shore based VPN server   Select a data compression mode
  Set the keep alive period   Select one cryptographic cipher
Upload the certificate file o  The certificate file must be created by the VPN server in advance
  Select the protocol   Set the endpoint port   Click ‘Save’ 
Figure 54: Open VPN Details
 
 
8.5.3.3 Setup GRE VPN connection:
  Set the VPN type to ‘GRE’   Set the direction ‘One-Way’ or ‘Both-Way’    Set the endpoint IP address of the shore based VPN server
  Enter the shared secret Key.   Enter the local IP address
  Enter the local IP Mask   Click ‘Save’ 
Figure 55: GRE VPN Details
 
 
8.5.4 Firewall
To each terminal connected, the administrator can apply a different set of firewall filtering rules. For
more details about managing firewall rules, see Chapter 12.
Figure 56: Applied Rules
Firewall filtering settings at the terminal level represent the 1 st   stage of the Vizada XChange Box’s
integrated Firewall.
Using this stage one, you can set a first level of pre-filtering to allow traffic that should usually go
through the terminal. This will block any type of traffic and ports not covered by a special firewall filter.
By default, there is no special firewall filtering and any kind of traffic is allowed through. It is
recommended that you change the default setup and to define the specific types of traffic to be
allowed.
The drawing below indicates the 2-stage architecture of the Vizada XChange firewall:
Figure 57: Firewall
8.5.4.1 Setting up Firewall Rules:
To define the setting of a firewall filter for a given terminal, proceed as follows:
  Go to the terminal in question   Expand the ‘Firewall’ panel    Click ‘Edit’    Click the ‘Open’ filter to mark it   Remove the filter by clicking on the right arrow button   Mark all filters from the available list of rules
  To apply these filters, click on the left arrow button   To change the filter loading sequence, click on the red up/down arrows to move a filter up or
down   Click ‘Save Modifications’ to save the settings
Figure 58: Terminal Firewall
8.5.5 Device Access
The broadband device dashboard access can be opened or closed individually per device. Opening the dashboard access allows the administrator to access the FleetBroadband terminal dashboard via any local network computer connected to the Vizada XChange local network.
Figure 59: Device Access
To enable the device access simply expand the ‘Device Access’ collapsible panel and click ‘Open Device Access’. 
 The administrator only is allowed to access the device dashboard.
8.5.5.1 Accessing Device Dashboard:
Controlled WAN1 Device:
The FleetBroadband device dashboard can be accessed by click on ‘Access device administration page’. Then a new browser  tab opens displaying the device dashboard.
 Autonomous WAN 2 Device:
 
 
9. ACCOUNT MANAGEMENT
The integrated Account Management provides management capabilities for a single user or user
group. It enables the captain and administrator to manage user credit (local prepaid), group firewalling,
and the terminal user group association.
9.1 Overview
The Accounts overview page provides a summary overview of user and group accounts.
Figure 60: Overview of Accounts
The table displays all the user groups and the number of active accounts per group created in the
Vizada XChange Box, and gives information about users currently online, along with the number of
 
 
XChange – Administrator Handbook  Astrium Services   Page 89/192
The collapsible panels below (click on the panel to expand) give more detailed information about:
 Currently active users o  Username o  Group o  Session initialization date and time o  Traffic type o  Device used o  Payment mode o  Duration o  UP / Down traffic consumption o  Destination (for voice and VoIP calls)
 Instant User Creation o  Tool to create several user accounts at once
 
 
9.2 Managing User Groups
To access the user group management feature, go to Box Settings > Accounts > Groups.
With group management, you can create, manage and delete user groups. It is mandatory to work with
user groups in the Vizada XChange Box. Every single user must be linked to a specific user group, as
user management is based on managing groups . By reducing the management effort to a minimum,
the system becomes more user-friendly and at the same time ensures there are no ‘uncontrolled’
users.
Figure 61: Overview of Groups
The overview of groups provides general information about all user groups that have been defined
including:
 
 
9.2.1 Group Types
The type defines the kind of access, communication rights and authentication modes that will be
provided for single users linked to a group. In the Vizada XChange Box, predefined group types are as
follows:
Master:
The master type provides read and partial write access to the box system. Users linked to a master
group can view Box Settings, manage users and user groups, and carry out manual terminal
switching.
User:
The user type provides read-only access to the box portal. The Box Settings and Support   page is
hidden and cannot be accessed. The user type is the default setting for crew member groups. Users
linked to a user group can see the box portal and are allowed to launch data or voice sessions
(depending on the associated terminal connectivity).
Machine:
The machine type is pre-set for on board network components and systems which communicate
through the satellite link with host systems on shore. As these on board systems cannot authenticate
themselves, all the systems linked to the machine group do not need to authenticate before
communicating through the associated connectivity.
Admin:
The Admin type provides full read & write access to the box system. The Administrator can make
 
 
9.2.2 Payment Modes
Three payment modes are provided with the Vizada XChange Box:
  Corporate usage   Local allowance   Universal Card usage
Corporate Usage:
The corporate usage mode is predefined for corporate post-paid communication. Typically machines
and the captain are allowed to make corporate postpaid communications.
Local Allowance:
Linking a user group with the local allowance mode enables on-board user credit management without
the need to use classic prepaid cards such as the Universal Card service.
Users linked to a local prepaid group need to have positive credit to be able to launch data or voice
sessions.
Universal Card Usage:
Linking a user group to the Universal Card usage mode provides classic prepaid voice and data
communication using the Universal Card service.
 
 
9.2.3 Creating a User Group
To create a new user group go to Box Settings > Accounts > Groups,  click ‘Add’ and proceed as
follows:
  Set a group name
  Set a group description   Select a group type   Select a payment mode   Click ‘Save’ to add the new group 
The page is refreshed and the group details are displayed. This page enables you to review or change
the group name or description. However, it is no longer possible to change the group type and
payment mode .
When all general group settings are correct click ‘Back’ to reach the group specific overview.  
Figure 62: Group Details
9.2.3.1 Enable VoIP Connectivity:
If you wish to enable a user group to make VoIP calls, click on the Connectivity  panel to expand it,
click on the ‘VoIP’ weblet and associate VoIP channel per the device to the group. By default, there is
no VoIP channel linked to a newly-created user group. If VoIP is not allowed or is not available, do not
change anything in this panel.
Figure 63: VoIP Connectivity
To associate a VoIP channel to a group, click ‘Edit’. The page refreshes and the available VoIP
channels will be displayed. Click the channel on the right-hand table to mark it and move it to the left-
hand table using the left double arrow.
Figure 64: VoIP Connectivity
 
 
9.2.3.2 Enable Data Connectivity:
To allow a user group to launch data sessions, click on the Connectivity   panel to expand it and
associate each communication channel per device to the group. By default, no data channel is linked
to a newly-created user group. If data communication is not allowed or is not available, do not change
anything in this panel.
To associate a data channel to the group, click the channel on the right-hand table to mark it and move
it to the left-hand table using the left double arrow.
Figure 65: Data Connectivity
 
 
9.2.3.3 Firewall:
For each user group, you can apply a set of firewall filtering rules. For more details about firewall rule
management, see chapter 12.
Figure 66: Applied Rules
Firewall filtering settings at group level represent the 2 nd
 stage of the integrated Firewall in the Vizada
XChange Box.
In stage two, a detailed filter can be set to enable the type of traffic allowed for the Group member.
Traffic types and ports not covered by a given firewall filter will be blocked.
In the default set-up, there is no firewall filtering and the Group can use any kind of traffic. It is highly
recommended that you change the default settings and define only those specific traffic types that are
allowed for this user group.
  If user group firewall settings are different from terminal firewall settings, the terminal firewall will
always prevail.
9.2.3.4 Firewall Rule Setup:
To define a firewall filtering for a group, proceeds as follows:
  Click on the group name   Expand the ‘Firewall’ panel    Click ‘Edit’    Click the ‘Open’ filter to mark it    Remove the filter by clicking on the right arrow button   Mark all filters from the available list of rules
  Click on the left arrow button to apply these filters   To change the filter loading sequence click on the red up/down arrows to move a filter up or
down   Click ‘Save’, or ‘Back’ to cancel  
Figure 67: Group Firewall
9.2.3.5 Setup Daily Access Limits
You can apply daily-based access limits to data and voice communications individually for each user
group. The system will allow communication only either within the set time windows (based on the
onboard set time) or/and until the set maximum duration has been reached. If a user tries to
communicate outside of the set time windows or the maximum duration is already reached, the system
will decline and inform him accordingly. For all members of a user group the same settings will take
effect independently when the user account was created.
The ‘Daily Access Limits’ offer three (3) different modes:
1. ‘Disabled’  a. No access limitations take effect
2. ‘Maximum Daily Duration’  a. A max amount of hours per day can be spent for communication
3. ‘Daily Time Windows’  a. In up to three (3) time windows communication is allowed
To set a daily access limit for a group, click the ‘Daily Access Limits’ collapsible panel to expand and
click ‘Edit’ 
On the new page select the mode to apply to the user group.
Maximum Daily Duration:
Figure 68: Maximum Daily Duration
Using the bar, the maximal duration can be selected in steps of 15 minutes. The duration range goes
from zero (0) to 24 hours.
To set the duration click and keep the mouse button pressed on the quad and move it from left to right
and vice versa.
 
 
XChange – Administrator Handbook  Astrium Services   Page 99/192
 The maximum Daily Duration should be setup between zero (0) and 24 hours. If the bar shows zero
(0), the user will not be able to make any communication. If the bar shows 24 hours, the user will be
able to spend 24 hours per day for communication.
Daily Time Windows:
Figure 69: Daily Time Windows
Up to three (3) different time windows can be setup. To add a new time window click on ‘Add a time
window’ and move the starting and ending quads to the desired times. To set the time window click
and keep the mouse button pressed on the quads and move them from left to right and vice versa.
To add a second or third time window proceed in the same way.
To remove a time window, click the small black ‘x’ sign and confirm the deletion in the popup window.  
 
 
9.2.4 Editing a User Group
To edit a user group, go to Box Settings > Accounts > Groups.
Click on the group name and ‘Edit’ to access the page of user group details. From there you can view
the most recent change logs for this group, change the firewall setup, and edit or delete the group.
Click ‘Edit’ to change the details such as the group name or descr iption. The group type and payment
mode cannot be changed.
You can also change the VoIP and data connectivity settings. See Chapter 8.2.3 for more details
about setting VoIP and data connectivity.
NB: Changes to user groups will take effect immediately and changes to the name or description will
switch all log entries to the new entry.
9.2.5 Deleting a User Group
To delete a user group go to Box Settings > Accounts > Groups.
Click on the group name to mark and click the ‘Delete’ button below the group list.
  The users linked to the group will automatically be deleted. To avoid deleting users, empty the
group before deleting it.
9.3 User Management
To enter the user management feature go to Box Settings > Accounts > Users.
User management enables you to create, manage and delete users. Working with user accounts is
mandatory in the Vizada XChange Box. You cannot launch data or voice sessions or benefit from the
Vizada XChange Box features without a user account.
Figure 70: User Overview
The user overview provides general information about all defined users such as:
  User identifier   Last name   First name
  PIN code (password)   Linked user group   Current available local allowance
 As the user overview may have to display a very large number of users, you can preselect which users
are displayed.
To preselect which users will be displayed, open the ‘Search Criteria’ panel and select the usage
mode or group name from the list that you want to be displayed and click on ‘Search’. The page is
refreshed and only the user accounts in question will be displayed.
In the bottom line of the list the number of shown lines per page can be set from 10 to 100. If more
 
 
XChange – Administrator Handbook  Astrium Services   Page 102/192
It is also possible to sort the overview list in descending or ascending order for any column. To sort the
list, just click on the title box of the column.
9.3.1 Creating a User
To create a new user go to Box Settings > Accounts > Users, click ‘Add’ and proceed as follows: 
  Type in the first and last names   Set a username or click ‘Auto’ (first letter of the first name concatenated with last name)   Select a description   Select the user group   Type in the email address and phone number   Set the user credit allowance (appears only for local allowance groups)
  Set the maximal mobile data duration (default 2 hours)   Click ‘Save’ to save the new user  
Figure 71: New User
9.3.1.1 Maximum mobile data session duration:
The ‘maximum mobile data session duration’ indicates the automatic disconnection time for users
using a smartphone or tablet via the mobile web interface or Android XChange application.
When a smartphone user’s online data session reaches the set threshold, per default 2 hours, the
Vizada XChange Box disconnects the data session to avoid unwanted traffic consumption.
To change the default value, simply click and keep the mouse button pressed on the quad and move it
from left to right and vice versa.
 
 
9.3.2 User Account Voucher
 After clicking on ‘Save’, the page is automatically refreshed and a user account voucher appears
providing all account details, like username and password, and login, internet access and voice call
description. Note the user credentials or click ‘Print’. Click ‘Edit’ to change the user details o r to change
the password.
 
 
9.3.3 Creating a Batch of User
The ‘Instant User Creation’ tool provides the ability to create up to 100 user accounts in one click. 
Figure 73: Instant User Creation
To create user accounts in a batch, follow the instructions below:
  Expand the ‘Instant User Creation’ panel    Select the user group   Set the number of user accounts to create
  Set the credit amount o  Only available for local prepaid user groups
  Click ‘Add’ 
The page refreshes and displays all new created user accounts including passcode and credit amount
in a table.
Below the overview table the user account voucher per user account is displayed.
When pressing ‘Print’ the overview table and each user account voucher will be printed on a separate
page.
Figure 74: User Account Summary
 The batch-wise created user accounts are ‘anonymous’ user accounts. The username derives from
the selected user group plus a consecutively number. It is not possible to influence the user names.
9.3.4
Creating a Machine Account
To create a new user go to Box Settings > Accounts > Users, click ‘Add’ and proceed as follows: 
  Set a username or click ‘Auto’   Type in first and last name   Set a description   Select the machine user group
  Type in the email address and phone number   Set the local IP address of the machine (only appears for a machine group)   Click ‘Save’ to save the new machine  
Figure 75: New Machine
XChange – Administrator Handbook  Astrium Services   Page 108/192
 After clicking on ‘Save’, the page is automatically refreshed and an account voucher appears providing
all account details, like username and password, and login, internet access and voice call description.
Note the user credentials or click ‘Print’. Click ‘Edit’ to change the user details or to change the
password.
 
 
9.3.5 Editing a User Account
To edit a user account, go to Box Settings > Accounts > Users and click the desired user name.
Click ‘Edit’ to enter the user details page, where you can: 
  Change the user status o  Active (ready to use) o  Deactivated (user suspended)
  Change the user name
  Edit the description and contact details   Click ‘Save’, or ‘Back’ to cancel  
Figure 77: User Details
The user status can be changed from ‘Active’ to ‘Deactivated’. This feature is handy for vessels with
many changes in crew members. There is no need to delete and recreate user accounts each time a
crew member leaves the vessel.
If a crew member leaves the vessel, their user account can be temporarily deactivated and easily
reactivated when the return to the vessel.
 
 
9.3.6 Resetting User Passwords
To reset a user password, go to Box Settings > Accounts > Users and click the username in question
and proceed as follows:
  Click ‘Edit’ to enter the user details page.   Click ‘Reset Password’    Note the new password delivered by the user credential summary
Figure 78: New User Credentials Summary
9.3.7 Local Credit Management
To manage a users’ local credit, go to Box Settings > Accounts > Users and click the username in
question.
Click ‘Edit’ to enter the user details page. On the user details page it is possible to: 
  View the current credit   Update the credit
o  Top-up o  Reset o  Remove
Figure 79: User Credit
Top-Up:
To top-up the credit, enter the top-up amount and click ‘Apply’. The page is refreshed and the current
credit will be updated immediately.
Reset:
To reset the credit, enter the value for which the credit should be reset and click ‘Apply’. The page is
refreshed and the current credit will be updated immediately.
Remove:
To deduct an amount from the user’s credit, enter the amount to be deducted and click ‘Apply’. The
page is refreshed and the current credit will be updated immediately.
9.3.8 Deleting a User Account
To delete a user account, go to Box Settings > Accounts > Users and click the username in question
and click ‘Delete’ and confirm the deletion in the popup window.  
Reset the remaining credit to zero.
Figure 80: Delete User Popup
  Reset the remaining credit to zero before deleting a user account. The deleted user account
remains in all local logs.
When the user account is successfully deleted, below status message will be displayed:
Figure 81: Deletion Success
10. RATING TABLES
To Access the rating tables go to Box Settings > Rating Tables.
Figure 82: Rating Tables
10.1 Cost Matrix
The embedded cost matrix needs to be set up correctly to ensure that both the Vizada XChange Box
local allowance credit and the monitors work correctly.
 
 
Figure 83: Cost Matrix
The cost matrix displays several lines per device connected to the terminal.
For each terminal connected, the prices for:
  Analog Voice ($/min) o  Voice to PSTN o  Voice to GSM
  Data ($/kB)   VoIP ($/min)
o  VoIP to PSTN o  VoIP to GSM
are displayed for the appropriate accounting mode (i.e. corporate usage or local allowance).
10.1.1 Editing the Cost Matrix
To edit the cost matrix, go to Box Settings > Rating Tables > Cost Matrix and follow the steps below:
  Click ‘Edit’  o  The current costs are displayed in a popup
 
 
Figure 84: Edit Cost Matrix
 If a flat-fee is available for a communication type or terminal, and communication costs should not
be charged to crew members, set the cost matrix to €0.00.
 
 
10.2 Rating Schemes
To enter the rating schemes, go to Box Settings > Rating Tables > Rating Schemes.
The rating schemes are preconfigured with default increment and stepping settings. The rating
schemes need to be set up correctly to ensure that the traffic log of the Vizada XChange Box and the
local allowance deduction from a user´s credit work correctly.
Figure 85: Rating Schemes
The rating schemes are provided per connected broadband device separated in collapsible panels
each. The minimum charge and stepping can be setup per communication type (Voice, VoIP, Data)
separately per payment mode.
Minimal Charge:
The minimum charge is the minimum amount of data or time charged to the user.
For instance when the real data consumption of a user´s online session is below 100 KB at the end,
the minimum charge will be deducted from his local allowance credit.
Stepping:
Stepping is the frequency of charging the user during his online or phone session.
For instance, the charged duration of a 48 sec voice call will be 60 sec (4x15sec).
 
 
11. MONITORING
The Vizada XChange Box has a local monitoring and alarm feature. Monitoring is used to maintain the
overall overview of all traffic consumption on board, especially for single data or voice sessions, to
avoid surprises due to an unexpectedly level of traffic consumption.
In the current version of the Vizada XChange Box, alerts for local allowance levels and large session
alerts will be displayed automatically to the captains and administrators home screen if a certain
threshold is reached (depending on the settings that have been made and cost matrix applied).
 All alerts are displayed in the ‘Events & Alerts’ block on the home screen showing the type of monitor
and the user name that triggered an alert.
11.1 Overview
To open the monitoring overview, go to Box Settings > Monitors > Overview .
Figure 86: Overview of the Monitor function
 
 
XChange – Administrator Handbook  Astrium Services   Page 117/192
The monitor overview is divided into the two types of monitoring allowance alerts and large session
users. This page provides an overview of the latest alerts sent out.
The credit information on allowance alerts is displayed in three different colors so as to display the
alert level clearly:
  Red for very low credit level   Yellow for low credit level   Blue for high credit level
To focus on a specific aspect of alerts, you can select a specific user group and/or specific time frame.
Click on ‘Search’ to display a given user group and/or time frame. 
11.2 Monitor Settings
To access the settings for the monitoring process, go to Box Settings > Monitors > Settings.
 Allowance alerts and large session alerts can be set up differently.
Figure 87: Monitors Settings
11.2.1 Allowance Alerts
 Allowance alerts are predefined for three levels. For each level, a specific threshold can be set. The
allowance alert levels are:
  Very Low   Low   High
Low and Very Low:
The low and very low level alerts are triggered when a user’s credit falls below one of these
thresholds.
High:
The high level alarm is caused when a user’s credit rises above the threshold. 
11.2.2 Large Session Alerts
Large session alerts are by default divided into postpaid corporate usage and local prepaid
allowances. For this large session alerts, you can set a currency based threshold per traffic type (voice
and data).
The alert will be caused when an on-going voice or data session reaches this threshold.
11.2.3 Editing Monitoring Settings
To edit the monitoring settings, go to Box Settings > Monitors > Settings and proceed as follows:
  Click ‘Edit’  o  Current thresholds are displayed in editable fields
 
 
12. LOGS
The Vizada XChange Box has an embedded log feature. This provides the captain and administrator
with near real-time information about traffic, local credit consumption, changes, system and event logs.
The log function is divided into the following log types:
 Overall development of traffic  Traffic log
 Credit log  Change log  System log  Event log
12.1 Traffic Development
To view the overall development of traffic, go to Box Settings > Logs > Overview .
Figure 88: Logs Overview
 
 
XChange – Administrator Handbook  Astrium Services   Page 120/192
You can display a specific period, mode or device by selecting criteria from the boxes at the top of the
page. These cover:
  Period o  Current month o  Last 7 days o  Last 14 days o  Last 30 days
  Mode o  N