Hello everyone！
Today, I want to share with you how to log in to the LMT.
What are the login methods?
1. You can locally log in to the base station through the LMT to perform related operations.
2. After the OM channel between the base station and the MAE server is established, you can log in to the LMT through the MAE proxy to perform related operations.
I'll explain these two login methods in more detail later. Before logging in to the LMT, you need to meet some prerequisites.
Prerequisites
1. Before logging in to the LMT in Microsoft Windows Server 2008, Microsoft Windows Server 2012, or Microsoft Windows 7, install the cipher suite patch. For details, see How to Install the Cipher Suite Patch.
2. Before using the LMT, install the JAVA Platform Standard Edition Runtime Environment (JRE) plug-in on the LMT PC.
The JRE plug-in can be downloaded from the Java official website.
If the JRE plug-in is not installed on the PC or the installed JRE plug-in is not the compatible version, the Java client window cannot be opened or some functions of the LMT cannot work properly.
After a successful login to the LMT main page, when you click the batch processing, tracing, monitoring, or device maintenance function, the Local Maintenance Terminal window is opened for you to execute commands or view data and results.
If you cannot log in to the LMT after the JRE plug-in is upgraded to the latest version, restart the browser and log in again.
The following problems may occur when a user logs in to or use the LMT:
Problem 1: No Java plug-in is installed. As a result, the Java client window cannot be opened.
Problem 2: The installed Java plug-in is of another version other than the recommended versions. As a result, the Java client window cannot be opened.
Problem 3: LMT functions, including Batch, Trace, Monitor, and Device Maintenance, cannot be used even after the Java plug-in of a recommend version is installed.
Solution
For problem 1, check whether the Java plug-in is successfully installed.
For problem 2: You are advised to uninstall the current Java plug-in and install the Java plug-in of a recommended version.
For problem 3, perform the following operations:
If the Application Blocked by Security Settings dialog box is displayed, an error message is displayed on the window for tracing, monitoring, or batch processing, or such window is not displayed, you can reconfigure Exception Site List.
Close the browser and delete temporary Java files when other issues occur.
NOTE
When a Java plug-in of a later version has been installed, a Java plug-in of an earlier version installed afterward will not be activated.
After the preceding conditions are met, you need to pay attention to other problems that may affect the login to the LMT.
LMT login may be affected in the following situations:
LMT users are categorized into local users and EMS users. By default, only one local user or EMS user can log in to the LMT. (If the base station is properly connected to the OSS, local users cannot log in to the LMT locally by default. ) If more users need to log in to the system at the same time, run the SET USRMAXONLINE command to change the default value.
A maximum of six local users and EMS users can log in to the LMT at the same time.
When the BBU3900/BBU3910 is configured with the LMPT, a maximum of four local users and EMS users can log in to the LMT at the same time.
By default, the HTTPS or WSS is used for connecting to the LMT. If you enter an HTTP URL in a web browser to connect to the LMT, the HTTP request automatically changes to an HTTPS request. Connection to the LMT over HTTPS or WSS requires digital certificates. If the base station is not configured with a digital certificate or the digital certificate status is abnormal (you can run the DSP APPCERT command to query the digital certificate status), you cannot access the LMT. (In the case of certificate expiration, access to the LMT is allowed, but you are advised to replace the digital certificate as soon as possible.)
The operator-issued certificate and device certificate of a base station on the LMT are in a descending order of priorities.
If an operator has deployed a PKI system, secure base station deployment by PnP is recommended and the operator-issued certificate must be obtained prior to access.
After the ACT CFGFILE command is executed to activate the minimum configuration, you can access the LMT only in HTTPS mode. Ensure that the digital certificate is normal before activating the minimum configuration.
When the LMT is running, do not change the system time or time zone of the LMT PC. Otherwise, a critical fault may occur in the system. If the system time or time zone has to be changed, perform the operation after the LMT exits.
The refresh function of the browser cannot be used on the LMT. If you use the refresh function in the LMT main window, the LMT is logged out. If you use the refresh function on the monitor window, an error occurs in the script.
Before you upgrade or roll back the LMT version, clear the browser's cache and cookies.
You can run the SET WEBLOGINPOLICY command to set the default policy for connections to the LMT. For a base station using the LMPT as its main control board, three login modes are supported: COMPATIBLE(Compatible), HTTPS_ONLY(Https_only), and LOGIN_HTTPS_ONLY(Login_https_only). For a base station using other boards rather than the LMPT as its main control board, only one mode, HTTPS_ONLY(Https_only), is supported. (1) COMPATIBLE(Compatible): Either HTTP or HTTPS can be used for connections to the LMT. (2) HTTPS_ONLY(Https_only): Only HTTPS can be used for connections to the LMT. (3) LOGIN_HTTPS_ONLY(Login_https_only): The HTTPS is used for log in to the LMT and the HTTP is used after the login. Data over HTTP is transmitted in plaintext and prone to disclosure. Therefore, value HTTPS_ONLY(Https_only) is recommended.
If the WebLMT Login Policy parameter is set to HTTPS_ONLY(Https_only) but login by HTTP is configured on the MAE, login to the LMT in MAE proxy mode does not work.
The password status will be checked when you log in to the LMT. You can set whether the LMT can force the user to change the password upon the first login by running the SET PWDPOLICY command.
The TLS/SSL version of the web browser and the JRE must be set to the same value as the TLS/SSL Version parameter configured using the SET WEBLOGINPOLICY command. Otherwise, the Web LMT login page cannot be opened using the web browser or the Web LMT that you have logged in to cannot work properly.
During the LMT or board restart, if the Web server does not respond when you log in to the WebLMT, the current browser may load some pages from the browser cache, as shown in Figure 1.
Figure 1 Logging In to the LMT
After a login timeout message is prompted, if the Web server does not respond when you log in to the WebLMT again, the current browser may load some pages from the cache, as shown in Figure 2.
Figure 2 Logging In to the LMT
Perform the following operations if problems indicated in Figure 1 and Figure 2 occur:
Press shortcut keys Ctrl+Shift+Delete to clear the browser cache.
Check the browser settings and ensure that JavaScript is enabled.
By default, the idle session timeout duration of the LMT is 10 minutes. If a user does not perform any operation within 10 minutes, the LMT will trigger session logout and the user exits from the LMT. Parameters related to idle sessions can be queried by running the LST WEBLOGINPOLICY command. If you need to obtain data reported by NEs within a long period of time when using functions such as tracing, monitoring, and batch processing, you can run the SET WEBLOGINPOLICY command to change the parameter settings related to idle sessions.
By default, the maximum lifetime of a session of the LMT is 480 minutes, which can be changed by running the SET WEBLOGINPOLICY command. When the remaining lifetime of a session is 30, 20, or 10 minutes, a message is prompted on the LMT. When the lifetime of a session exceeds the configured maximum lifetime, the LMT will trigger session logout and the user exits from the LMT.
The preceding describes the problems that may occur when you log in to the LMT and use the LMT. If you encounter problems, you can perform the preceding operations.
LMT Login Mode
Method 1: To use the LMT to log in to and log out of the base station locally, perform the following steps:
1. Connect the LMT PC to the base station.
Wired connection: Applicable to the BBU3900, BBU3910, BBU5900A, and BBU5900. You can use either of the following cables to connect the LMT PC to the BBU:
A crossover cable or straight-through cable: used when connecting to the ETH port on the LMPT of the BBU3900 or BBU3910, as shown in illustration "a" of Figure 3.
A USB-to-Ethernet cable: used when connecting to the USB port on the UMPT of the BBU3900/BBU3910/BBU5900/BBU5900A, as shown in illustration "b" of Figure 3.
Figure 3 Connection between the LMT PC and the BBU
Wireless connection: Applicable to the BBU3910A and BBU3910C, as shown in Figure 4 and Figure 5.
Figure 4 Wireless connection between the LMT PC and the BBU3910A
Figure 5 Wireless connection between the LMT PC and the BBU3910C
NOTE
When you try to connect the LMT PC to the base station through the local maintenance port, you may encounter the following four scenarios:
If the LOCALETHPORT.SWITCH parameter is set to ENABLE(Enable), the LMT PC can be directly connected to the base station through the local maintenance port.
If the OMCH works properly and LOCALETHPORT.SWITCH is set to DISABLE(Disable), the base station disables the local maintenance port by default. If you need to connect the LMT PC to the base station through the local maintenance port, first run the MML command SET LOCALETHPORT on the MAE with LOCALETHPORT.SWITCH set to ENABLE(Enable).
If the base station cannot be maintained remotely due to OMCH faults, the base station reports ALM-25901 Remote Maintenance Link Failure after the OMCH is interrupted for 5 minutes. If the LOCALETHPORT.SWITCH parameter is set to DISABLE(Disable), the base station automatically enables the local maintenance port. The LMT PC can connect to the base station through the local maintenance port. After the OMCH is restored, the base station disables the local maintenance port. In this case, the LMT PC cannot connect to the base station through the local maintenance port. If you need to connect the LMT PC to the base station through the local maintenance port, first run the MML command SET LOCALETHPORT on the MAE with LOCALETHPORT.SWITCH set to ENABLE(Enable).
If the OMCH MO is not configured on the base station and the LOCALETHPORT.SWITCH parameter is set to DISABLE(Disable), the base station automatically enables the local maintenance port after restart. In this case, the LMT PC can connect to the base station through the local maintenance port.
If the LMT PC is configured with a WLAN wireless network adapter and the local wireless access point device is enabled on the base station (by running the SET LOCALWAP command with Switch set to default value ON(On)), the PC can be connected to the base station through the local wireless access point device as long as the base station transmits WLAN signals:
If the OMCH works properly, the base station disables WLAN signals by default. To connect the LMT PC to the base station through a local wireless access point device, run the SET LOCALWAPSW command on the MAE with Enable Switch set to ENABLE and Enable Elapse Time set to an appropriate value. During the time specified by Enable Elapse Time, the base station transmits WLAN signals so that the LMT PC can be connected to the base station through a local wireless access point device.
If the OMCH is disconnected, the base station automatically transmits WLAN signals to allow for the connection. After the OMCH recovers, the base station transmits WLAN signals within the duration specified by AP auto-disable time. The LMT PC can connect to the base station through the local wireless access point device. You can run the SET LOCALWAP command to set the AP auto-disable time parameter.
For details about how to configure a WLAN wireless NIC on a PC, see How to Configure Wireless NIC on a Computer.
The service set identifier (SSID) of the local wireless access point device is in the format of HID_XXXXXXXXXX, where XXXXXXXXXX indicates the last 10 digits in the ESN.
The initial password of the local wireless access point device is T4$9Mc@q#$rb&hFL (case-sensitive). The password can be changed using the SET LOCALWAPPWD command on the MAE.
For security purposes, only one terminal or user can log in to the local wireless access point device at a time.
The LMT PC can locally connect to the base station in wireless mode with the valid line of sight (LOS) being less than 10 m (32.81 ft).
2. In the address box of the browser, enter the IP address of the main control board for local maintenance. The default maintenance IP address of the base station is 192.168.0.49 in wired login mode and 192.168.1.49 in wireless login mode.
NOTE
For NodeBs:
If main control board UMPT is upgraded from V200R014C00 or earlier to V200R015C00 or later, use the IP address before the upgrade as the local maintenance IP address.
If main control board UMPT is newly delivered and the software version is V200R015C00 or later, use 192.168.0.49 as the default local maintenance IP address.
If the ACT CFGFILE command is executed to enable minimum configuration, the local maintenance IP address is restored to 192.168.0.49.
The local maintenance IP address cannot be the same or on the same network segment as an existing IP address used on the live network. If such a local maintenance IP address is used, it must be changed by running the SET LOCALIP command. Otherwise, information on the MAE, such as counters and CHR logs, will be lost when the base station is maintained both locally and remotely.
3. Click Go. The Local Maintenance Terminal login page is displayed.
4. Specify User name, Password, and Verification code, and set User type to Local.
NOTE
By default, User name is admin. Password varies depending on the following scenarios:
For newly delivered base stations of SRAN16.1 or later, the default value of Password is Y5$7Kc@u#$tr&LhF (case-sensitive).
For newly delivered base stations of SRAN16.0, the default value of Password is hwbs20@com (case-sensitive).
For newly delivered base stations of versions that range from SRAN7.0SPC200 to SRAN15.1, the default value of Password is hwbs@com (case-sensitive).
For base stations that are upgraded from a version earlier than SRAN17.1 to SRAN17.1, the password is the same as that used before the upgrade (case-sensitive).
If the base station version is SRAN16.1 or later and the password is changed in minimum configuration mode, the new password must contain at least 12 characters from the following four types of characters: lowercase letters, uppercase letters, digits, and special characters.
A password can be copied to the password text box.
You are advised to change the passwords of default accounts every 90 days.
The verification code is not required during the first login. A user only needs to enter the correct user name and password. In case of entering wrong user name or password, the verification code will be required. If there is no any attempt for half an hour, the page is restored to the original state and the verification code is not required when the user tries to log in.
If the verification code is illegible, click Refresh to change the verification code.
5. Click Login to switch to the LMT main window.
NOTE
When you log in for the first time or the password expires, the Password dialog box is displayed after you click Login. In this case, you need to change the password within 2 minutes. Otherwise, the LMT will be disconnected from the base station and you need to log in to the LMT again.
If the login fails because the provided information is incorrect, click Reset and enter the correct information. If the login failure persists, check the connection between the LMT and the main control board.
6. Log out of the LMT.
Click Logout on the upper right corner of the LMT main window.
The Confirm dialog box is displayed.
Click Yes. The LMT is disconnected from the base station. A dialog box for logging in to the LMT is displayed.
Close Internet Explorer to log out of the LMT.
Method 2: To use the MAE proxy to log in to the base station, perform the following steps:
1. Enter https://MAE IP:port/OM IP/login.html in the address box of the browser to open the WebLMT login page.
NOTE
Port indicates the port number of the MAE. The port number of the MAE is 80, 443, 8080, or 8081. Port 80 or 443 is used in the old proxy mode that does not require authentication. Port 8080 or 8081 is used in the new proxy mode that requires the user name and password of the proxy server to open the WebLMT login page.
When you log in to the WebLMT remotely using the MAE proxy, ensure that the connections between the PC and the MAE proxy server, and between the MAE proxy server and the base station work properly. In addition, the firewall does not forbid the currently used ports.
In the topology page on the MAE, you can right-click an NE and choose Maintenance Client from the shortcut menu to open the WebLMT.
2. Specify User name, Password, and Verification code, and set User type to EMS or Local.
NOTE
User names and passwords for an EMS account are authorized by the MAE.
The verification code is not required during the first login. A user only needs to enter the correct user name and password. In case of entering wrong user name or password, the verification code will be required. If there is no any attempt for half an hour, the page is restored to the original state and the verification code is not required when the user tries to log in.
If the verification code is illegible, click Refresh to change the verification code.
If port 8080 or 8081 is used by the MAE proxy, enter the user name and password of the proxy server when performing the tasks of logging in to the WebLMT, tracing, monitoring, batch processing, and device maintenance.
3. Click Login to switch to the LMT main window.
NOTE
When you log in for the first time or the password expires, the Password dialog box is displayed after you click Login. In this case, you need to change the password within 2 minutes. Otherwise, the LMT will be disconnected from the base station and you need to log in to the LMT again.
If the login fails because the provided information is incorrect, click Reset and enter the correct information. If the login failure persists, check the connection between the LMT and the main control board.
4. Log out of the LMT.
a. Click Logout on the upper right corner of the LMT main window.
The Confirm dialog box is displayed.
b. Click Yes. The LMT is disconnected from the base station. A dialog box for logging in to the LMT is displayed.
c. Close Internet Explorer to log out of the LMT.
This is all the information I shared about LMT login. You are welcome to read and comment.
