SyncServer S650 SAASM 00002904C
SyncServer S650 SAASM 00002904C
Features
• <20 ns RMS to UTC (USNO) via GPS, typical
• GPS SAASM GB-GRAM MPE-S Type II
PPS L1/L2 receiver
• <1x10–12 frequency accuracy Robust Timing and Design
Unparalleled Flexibility
• Modular timing architecture with unique
The modular SyncServer S650 SAASM The GPS SAASM receiver coupled with
and innovative FlexPort™ technology
combines the best of time and frequency active thermal compensation technology
• Most popular timing signal inputs/out-
instrumentation with unique flexibility and provides excellent accuracy of <20 ns
puts are standard in the base timing
powerful network/security-based features. RMS to UTC (USNO). This is all in addition
I/O module (IRIG B, 10 MHz, 1PPS)
to a durable hardware design subjected
• Four standard GbE ports, all with
The base Timing I/O module with eight to MIL-STD-810H testing, high-reliability
patented NTP hardware time stamping,
BNC connectors comes standard with the components extending the operating
two additional 10 GbE ports optional
most popular Timing I/O signals (IRIG B, temperature range from –20 °C to 65 °C,
• Web-based management with high-
10 MHz and 1PPS). When more flexibility and a dual power supply option. Upgrad-
security cipher suite
is required, the unique FlexPort technol- ing to a high-performance oscillator, such
• Rubidium Atomic Clock or OCXO
ogy option enables six of the BNCs to as a Rubidium atomic clock, keeps the
oscillator upgrades
output many supported signals (time S650 accurate for long periods in the event
• Dual power supply option
codes, sine waves, programmable peri- of a GPS service disruption.
• Hot start ready using DAGR/PLGR
ods), all configurable in real time through
• Additional timecode I/O including IRIG
the secure web interface. This incredibly Secure Networking
A/B/C37/E/G/NASA/2137/XR3/HaveQuick/ Security is an inherent part of the S650
flexible BNC-by-BNC configuration makes
PTTI available SAASM. In addition to many security fea-
efficient and cost-effective use of the 1U
• Superior 10 MHz low phase noise options
space available. Similar functionality is tures and protocols, unused services can be
• PTP multi-port/profile output option
applied to the two input BNCs, as well. disabled. The four standard GbE ports, and
• PTP input option
Unlike legacy modules with fixed count two optional 10 GbE ports, can accommo-
• DISA/DoDIN approved product
BNCs outputting fixed signal types per date 10,000 NTP requests per second using
Applications module, FlexPort technology can allow up hardware time stamping and compensa-
• FlexPort timing technology efficiently to 12 BNCs to output any combination of tion. NTP monitoring, charting and MRU
and cost-effectively adds innovative supported signal types. logging assist in managing the NTP client
“any signal, any connector” technol- activity. For more secure NTP operations,
ogy, eliminating the wasted space The Timing I/O module is also available enable the optional security-hardened NTP
inherent with legacy style fixed-signal with T1/E1 Telecom I/O, HaveQuick/PTTI Reflector™ with line speed, 100% hardware-
modules/BNCs I/O and fiber input/output connectors. based NTP packet processing.
• Best-in-class low phase noise 10 MHz
outputs for satellite ground stations Superior Low Phase Noise (LPN) Leverage Built-In Hardware
Performance The S650 SAASM includes additional
and radar systems
built-in hardware features enabled through
• Multiple GbE network ports for easy For applications requiring superior LPN
software license keys such as the security
network configuration and adaptation 10 MHz signals, two different LPN mod-
hardened NTP Reflector and multi-port/pro-
• Reliable and rugged design for long ules are available. Each module has eight
file IEEE 1588 PTP output/input operations.
product life and wide application scope extremely isolated 10 MHz LPN outputs,
• Many security-hardened, network-based with each module offering excellent The SyncServer S650 SAASM—the best
features for stringent IA requirements levels of LPN or ultra LPN performance. choice for mission-critical operations.
microchip.com
Four GbE Ports for Performance, Flexibility and Security Standard Management Access Security
The S650 SAASM has four dedicated and isolated GbE Ethernet All of the expected network management protocols are stan-
ports, each equipped with NTP hardware time stamping. These dard in the S650 SAASM. These include mandatory password
are connected to a high-speed microprocessor with microsecond- access, HTTPS/SSL only (using the high-encryption cipher
accurate time stamps to assure high-bandwidth NTP perfor- suite), SSH, access control lists, service termination, SNMPv2/
mance. This exceeds the need of servicing 10,000 NTP requests v3, and NTP MD5 authentication. All traffic to the S650 CPU is
per second with no degradation in time stamp accuracy. bandwidth-limited for protection against DoS attacks. The local
keypad on the server can be password-protected to prevent
The four GbE ports provide network tampering.
configuration flexibility and enhanced se-
curity. Multiple isolated and synchronized
Security-Hardening Option
time servers can also be configured. Two
The SyncServer S650 SAASM can be further hardened from
10 GbE SFP+ ports can be added for NTP/
both an NTP perspective and an authentication perspective
PTP operations as well.
through the Security Protocol License option that includes the
security-hardened NTP Reflector.
Multiple ports provide the flexibility to adapt to different
network topologies as networks grow and change. An S650 Operational hardening through the 360,000 NTP packet per
can be the single time source to synchronize clients on dif- second NTP Reflector with 100% hardware-based NTP packet
ferent subnets and physical networks. There is only one time processing also works with a CPU-protecting firewall by band-
reference, but it can appear as though there are four clocks width limiting all non-NTP traffic. The Reflector also monitors
available because each port is independent. packet flow for DoS detection and reporting, yet remains impervi-
ous to the level of network traffic as it operates at line speed.
NTP can be served on all four ports (six if 10 GbE ports are
added). The highly secure web-based management interface is Authentication hardening is available for NTP client/server
only available on port 1, so that administrators may choose to authentication through the NTP Autokey function or user
keep that IP address private and secure. Unique access control access authentication through TACACS+, RADIUS, and LDAP.
lists per port can govern server response to client requests for Third party CA-signed X.509 certificates are installable for
time. further hardening of management access. For more informa-
tion about the protocol license option, see the SyncServer
Intuitive, Secure and Easy-to-Use Web Interface Options datasheet (DS00002920).
The modern web interface is the primary control interface of
the S650. Once the keypad and display bring the unit online,
complete status and control functions are easily found on the
left navigation menu.
Ultra-High-Performance NTP
The S650 SAASM can effortlessly support hundreds of
thousands of network clients while maintaining microsecond-
caliber NTP time stamp accuracy. NTP request throughput
rates can exceed 10,000 requests/second while maintaining
NTP time stamp accuracy. NTP monitoring, charting and MRU FlexPort—The Ultimate in Timing Flexibility
logging assist in managing the NTP client activity. If the Secu- Our unique FlexPort technology efficiently and cost-effectively
rity Protocol License option is enabled, the NTP Reflector can adds innovative “any signal, any connector” capabilities,
process over 360,000 NTP requests per second with 20-nano- eliminating the wasted space inherent with legacy style fixed
second caliber time stamp accuracy with the added benefit of signal modules.
security-hardening the network port.
The FlexPort option enables the six output connectors (J3-J8) to
output many supported signals (time codes, sine waves,
Superior Low Phase Noise Performance programmable periods) all configurable in real time through
The S650 SAASM is optimized to provide the best possible low the secure web interface. User-entered, nanosecond caliber
phase noise 10 MHz signals. Two LPN modules are available to phase offsets for each connector output accommodates
choose from depending on the phase noise sensitivity of the variable cable lengths. The two input connectors (J1-J2) can
user application. Each module has eight extremely isolated 10 support a wide variety of input signal types.
MHz LPN outputs with each module offering excellent levels of
LPN and Ultra LPN performance from the close in 1 Hz out to This level of timing signal flexibility is unprec-
100 kHz. edented and can even eliminate the need for
additional signal distribution chassis as there
Multi-Port/Profile IEEE 1588 PTP Grandmaster is no degradation in the precise quality of the
coherent signals.
Applications demanding very precise time accuracy can require
the IEEE 1588 precise time protocol (PTP). The S650 SAASM PTP
Output License enables multi-port/profile PTP grandmaster Oscillator Upgrades Improve Holdover
operations leveraging the built-in hardware time stamping on Accuracy and Save Valuable Time
each LAN port of the S650. The standard S650 SAASM is equipped with a crystal oscillator
that keeps the S650 accurate to nanoseconds when tracking
IEEE 1588 PTP Input License GPS. However, if GPS connectivity is lost and the server is
placed in holdover, the oscillator begins to drift, impacting tim-
PTP input is useful for tunneling time to the S650 over the
ing accuracy. Upgrading the oscillator improves the holdover
network. PTP input can be the primary time reference or used
accuracy significantly. For example, consider the following drift
as a backup reference in the event of GPS signal loss. With
rates for the standard oscillator compared to the OCXO and
GPS, the S650 can automatically calibrate and store observed
Rubidium upgrades.
network path delay asymmetries for PTP input use if the GPS
signal is lost.
Oscillator Holdover Drift (first 24 hours)
Standard 400 microseconds
OCXO 25 microseconds
Rubidium <1 microsecond
Standard Network Protocols • NTP Reflector option: 360,000 NTP client mode three
requests per second. NTP packets are timestamped 100%
• NTP v3,4 (RFC 1305/5905/8633), SNTP(RFC4330)
• NTP v3,4 Symmetric keys: SHA1/256/512 and MD5 in hardware with prevailing clock accuracy. All non-NTP
• SNMP v2c, v3 packets are provided to the CPU on a bandwidth-limited
• SNMP MIBII, Custom MIB, system status via SNMP basis. The NTP Reflector is included as part of the Security
• DHCP/DHCPv6 Protocol License option.
• HTTPS/SSL* (TLS 1.1/1.2)
• SMTP forwarding NTP Activity Chart
• SSHv2
• Telnet
• IPv4/IPv6
• Syslog: 1 to 8 servers
• Key management protocols can be individually disabled
• Port 1: Management and Time protocols
• Port 2, 3 and 4 (optional 5 and 6): time protocols only
Front Panel
Specification Details
Sharp, high-resolution, 160 × 32 vacuum-
Display
fluorescent
0–9 numeric, up, down, left, right, ENTER, CLR,
Keypad
TIME, STATUS, MENU, keypad lockout.
LEDs (tri-color: green/red/orange)
Sync Time reference status
Note: The SyncServer S650 SAASM has
Network Network connection status
been granted Security Approval by the
Alarm Fault condition
Global Positioning System Directorate.
CV (green only) Cryptovariable status
PLGR/DAGR DB15-M, hot start port
Crypto key input. DS-102. Compatible with
Key Fill
AN/PYQ-10, AN/CYZ-10, KYK-13.
Zeroize button
Zeroize crypto keys
(recessed)
Note: Note: The SyncServer S650 is on the DISA/DoDIN
Approved Products List
Hardware Options
Timing I/O Module(s) Rubidium Atomic Oscillator Upgrade
Equipped with eight connectors for timing signal input Improves stability, accuracy, and holdover accuracy. Hold-
and output, the standard configuration offers a broad yet over accuracy is <1 μs for the first 24 hours and <3 μs after
fixed selection of signal I/O, including IRIG B, 10 MHz and the first three days.
1PPS. Five variations of the Timing I/O Module are avail-
able as listed below. See the SyncServer Options Datasheet OCXO Oscillator Upgrade
(DS00002920) more signal types. Improves holdover accuracy to 25 μs for the first day.
• Timing I/O Module
• Timing I/O Module + Telecom I/O Dual AC Power Supplies
• Timing I/O Module + HaveQuick/PTTI The dual-corded, dual-AC power supply option provides load
• Timing I/O Module + Fiber Outputs sharing and active power management system with hitless
• Timing I/O Module + Fiber Input failover.
Software Options
Security Protocol License with Security-Hardened NTP 1PPS Time Interval/Event Time Measurements
Reflector Use the S650 Timing I/O module to measure, store and
Security-hardened NTP Reflector and authentication statistically display in real time the difference of an external
hardening with NTP Autokey, TACACS+, RADIUS, LDAP 1PPS relative to the S650. The Event Time capture feature
and CA-signed X.509 certificates. time tags and stores external events.
The Microchip name and logo and the Microchip logo are registered trademarks of Microchip Technology Incorporated in the
U.S.A. and other countries. All other trademarks mentioned herein are property of their respective companies.
© 2021, Microchip Technology Incorporated. All Rights Reserved. 4/21 900-00776-000 Rev D DS00002904C