r1 - 2008-03-27 - 04:20:41 - SteveKosteckeYou are here: NTP >  Support Web > Z3801AReceiverModifications
NTP users are strongly urged to take immediate action to ensure that their NTP daemons are not susceptible to being used in distributed denial-of-service (DDoS) attacks. Please also take this opportunity to defeat denial-of-service attacks by implementing Ingress and Egress filtering through BCP38.

ntp-4.2.8p10 was released on 21 March 2017. It addresses 6 medium- and 5 low-severity security issues, 4 informational security topics, 15 bugfixes, and contains other improvements over 4.2.8p9.

Please see the NTP Security Notice for vulnerability and mitigation details.

Are you using Autokey in production? If so, please contact Harlan - he's got some questions for you.

Z3801A GPS receiver modifications

Description

The Z3801A is a GPS timing receiver designed for CDMA base stations. Many of these devices are available on the surplus market for a modest price. Ham radio operators have discovered these surplus devices, most of the information contained here is taken from sources like K8CU. The K8CU web page contains manuals and utility software for the Z3801A. Unfortunately, the Z3801A is built for telecom installations and needs to be modified for other uses. The changes require some soldering and mechanical modifications, but you get a very high quality time reference for a couple hundred dollars.

The Z3801A contains a GPS receiver and HP's best double-oven timebase. The timebase combined with HP's Smartclock technology create a timebase accurate to better than 1us when locked to GPS with a drift of less than 7uS per day when not locked to GPS. Jitter on the 1 PPS timing signal is better than 200nS making this a very high quality timebase for ntp applications. When locked to GPS this timebase is very close to the quality of an atomic timebase.

The Z3801A needs a few different modifications to work properly: The Z3801A serial interface is RS-422, but with a simple internal modification can be converted to RS-232 for use with most computers. The Z3801A is designed to run off an external DC power supply, a power supply can be fitted in the case so that it can be run off normal 100-220v mains. The Z3801A provides a pulse-per-second signal in a format not suitable for an RS-232 port, with a small modification the pulse-per-second signal can be modified for precision timing with ntp and the PPS driver. Finally, after the hardware modifications are made a few non-volatile parameters need to be set in the device so that it will work with ntp.

Power supply modification

The chassis of an unmodifed Z3801A is shown below. You need a Torx T10 to get the cover off, you will also need a Torx T12 for some of the other fasteners. There is a reasonably large empty space near the front panel on the right side of this image where a power supply can be fitted. It seems that there are two different versions of the Z3801A, one requires 48v DC and the other requires 24v DC. I have only seen the "BSC" model that requires 48v and that is what I cover here. If you have the 24v unit you will need to modify your power supply selection accordingly.

A good power supply for this application is available from Digikey. You can also get a snap-in IEC power connector from Digikey that accepts a standard power cord. Remove the DC power jack from the chassis. Cut off the external power connector, but save the internal connector and use this to connect to the power supply.

Use a sheet metal nibbler tool to enlarge the hole for the DC power connector to a rectangle 0.78" by 1.079". The IEC power connector should snap in the hole and if you are careful you can maintain a cosmetic finish on the back panel. I recommend that you remove the internal PCBs while drilling and nibbling the sheet metal chassis, a small metal scrap can cause big problems on the PCB.

The power supply has threaded mounting holes for #6 screws. Drill two holes in the bottom of the chassis and mount the power supply as shown in the photo below. Wire mains power to the power supply and DC output to the PCB. Note that the black wire connects to V- on the power supply and the red wire connects to V+ on the power supply. This is actually a little confusing because the Z3801A manual says that the device runs off -48v. No worrys, the device is diode protected against hooking up the power backwards. After you hook things up, apply power and you should see the power light and a short test of the other LEDs.

The Digikey parts used for the power modification are as follows:

    48v power supply                62-1043-ND
    AC power connector              CCM1402
    Nibbler tool for sheet metal    GC395-ND
The finished unit with power supply and connector and other modifications is shown below. The unit runs a little hot but I don't think this is a problem. The double oven oscillator trys to keep the oscillator at 50C. As a result, everything in box tends to get close to 50C over time.

RS-232 and PPS modification

The Z3801A is an RS-422 device, but has an unused internal RS-232 option we can use. In the area near the DB25 connector is a place for 0.1" headers. These can be purchase from Digikey and installed as shown in the figure below. Jumpers select between RS-422 and RS-232 operation. If you like you can just install wires in the RS-232 positions shown jumpered in this picture.

The RS-232 conversion also requires that you remove 5 resistors from the bottom of the PCB. These zero-ohm resistors are shown in the following image of the bottom of the PCB.

The remaining modification is for the PPS signal. For the PPSAPI you need a signal on pin-8 of the DB-25. This will connect to pin-8 on a DB-25 serial port or pin-1 of a DB9 serial port on the host computer.

The Z3801A provides a high quality PPS signal, but not in a format suitable for RS-232. This modification adds a couple of wires to provide the PPS signal at RS-232 levels. First cut the trace coming from pin-8 of the DB-25 on the bottom of the PCB. This is circled in the image below. Second, solder a wire from pin-8 of the DB-25 to pin-1 of J13. Identify J13 on the silkscreen on the top of the PCB, but the solder the wire on the bottom of the PCB. The wire is shown in the following image. Pin-1 of J13 is the pin with the square solder pad, the other pads are round. Finally, on the top sode of the board lift pin-12 of the LT1180 and solder a wire from the lifted pin-12 of the LT1180 to pin-2 of the Lucent 1141LL nearby. A close-up image of the wire from the lifted pin of the the LT1180 is shown below. It is important that neither the pin or the wire touch the PCB pad for pin-12.

With the modification, the device has the following RS-232 signals:

     Pin 1           Ground
     Pin 2           Tx
     Pin 3           Rx
     Pin 8           PPS (DCD)

Firmware configuration

Once the hardware modifications are complete, a few firmware options need to be configured for use with ntp. These can be done with any 19200 baud, 7-bit data, odd parity terminal program, but it is probably a lot easier to use the HP StatStat program to configure the device. You can get the program from the K8CU web site mentioned above.

The device maintains the last position where it locked to GPS. Connect a cable from the Windows PC to the Z3801A and launch the StatStat program. Configure the connection and it should find the device and display information about the device.

After connecting a GPS antenna, the device might take a very long time to lock or possibly not lock at all until you issue the menu command Control->Survey. The GPS receiver will re-calculate the current position and save this as the default location. This might take several hours. A progress indicator is shown on the StatStat screen. Once the device knows its current location it will lock a few minutes after power up.

The device needs to be configured to report UTC time, it seems that many of these devices are configured to report GPS time. From the command window issue the command "diag:gps:utc 1" and power cycle the box. The status window should start reporting UTC time.

The device needs to be configured to report time in "format 2". From the command line send the command ":ptime:tcode:format F2". You can verify the format with the command ":ptime:tcode:format?" which should report "F2". You can verify UTC time reporting with the command ":diag:gps:utc?" which should return "1". Once configured the device will remember these settings after a power cycle, the box should recover unattended after a power outage.

NTP configuration

A typical configuration for the Z3801A is shown below. Be sure and create symbolic links from /dev/hpgps0 and /dev/pps0 to the serial port device connected to the Z3801A.

    # GPS timecode
    server 127.127.26.0 prefer ttl 1
    fudge  127.127.26.0 time1 -0.96738

    # GPS pulse per second on DCD pin
    server 127.127.22.0

The computer should quickly lock to the GPS timecode and then lock to the PPS signal. The host operating system needs to be compatible with the PPSAPI in order to lock to the PPS signal. Once locked and after several hours of time to settle, you should seen timing information something like this:

    % ntpq
    ntpq> peers
         remote           refid      st t when poll reach   delay   offset  jitter
    ==============================================================================
    +GPS_HP(0)       .GPS.            0 l   22   64  377    0.000    0.045   2.323
    oPPS(0)          .PPS.            0 l   10   16  377    0.000   -0.003   0.001

Jeff Mock (jeff@mock.com)

Topic attachments
I Attachment Action Size Date Who Comment
jpgjpg z3801a-1.jpg manage 138.7 K 2006-03-27 - 07:52 HalMurray  
jpgjpg z3801a-2.jpg manage 86.5 K 2006-03-27 - 08:55 HalMurray  
jpgjpg z3801a-3.jpg manage 89.2 K 2006-03-27 - 08:56 HalMurray  
jpgjpg z3801a-4.jpg manage 76.7 K 2006-03-27 - 08:56 HalMurray  
jpgjpg z3801a-5.jpg manage 79.6 K 2006-03-27 - 08:57 HalMurray  
Edit | WYSIWYG | Attach | Printable | Raw View | Backlinks: Web, All Webs | History: r1 | More topic actions
 
SSL security by CAcert
Get the CAcert Root Certificate
This site is powered by the TWiki collaboration platform
IPv6 Ready
Copyright & 1999-2017 by the contributing authors. All material on this collaboration platform is the property of the contributing authors. Ideas, requests, problems regarding the site? Send feedback