Technical Guide for Offshore Institutions to access China Foreign Exchange Trade System

Transcription

1 Technical Guide for Offshore Institutions to access China Foreign Exchange Trade System V1.0 September 2015

2 Table of Contents Technical Guide for Offshore Institutions to access Introduction Technical guide on network access and exit for members Network structure Network connections Leased line direct connection Connections through MPLS VPDN of extranet providers Bandwidth standards Definition Bandwidth requirements Network connection and withdrawal Application procedure Charges Application cycle External service addresses and ports for foreign exchange trading system and related systems Universal ports CFETS FX Post-trade Processing Platform C-Swap Module Client recommended configuration requirements Client setup and configuration Basic configuration for clients Set up DNS... 15

3 5.1.2 Set up Hosts Set up browser CFETS FX 2009 Installation CSWAP Module Installation Post-trade processing platform Customer support service Introduction Contact information and service hours... 30

4 1. Introduction Welcome toenterchina Foreign Exchange Trade System. This guide will help you accomplish following tasks concerning the trading system: 1. Prepare the network connection 2. Configure the firewall settings 3. Configure the trade terminal 2. Technical guide on network access and exit for members 2.1 Network structure

5 CFETS network is composed of Shanghai Production Center, Beijing Disaster Recovery Center and a number of POP nodes (network relays) and Hong Kong should be the most important POP node for most institutions outside China. As one of the most important financial centers in the world, the international financial institutions in Hong Kong, be they head offices or branches,can easily connect with the local relay and in turn connect with the CFETS. Both BT (British Telecom) and TNS (Transaction Network Services) are world-renowned extranet providers aiming at establishing global data communications network. They provide value-added data services through their worldwide MPLS VPN networks for institutions around the world. CFETS has already inter-connected with both BT and TNS, they may be considered as the overseas virtual POP of CFETS. All potential financial institutionsaround the world may connect with CFETS through them. 2.2 Network connections Currently, CFETS provides leased line direct connection or MPLS VPN indirect connection to overseas institutions. Leased line direct connection is recommended Leased line direct connection Institutions outside China (or their branches) may apply for direct connection through the local telecom operators that have business relationship with telecom operators in China or Hong Kong for connecting with CFETS. Current locations for direct connections are Shanghai, Beijing and Hong Kong. At least 2 connections to different locations are recommended for full backup purpose. Types of connections are listed as follows: Connection Telecom Operator Types of Leased Line Bandwidth to be supported Shanghai China Telecom SDH 2M MSTP 2M*n China Unicom SDH 2M

6 MSTP 2M*n Beijing China Telecom SDH 2M MSTP 2M*n China Unicom SDH 2M MSTP 2M*n Hong Kong PCCW MSTP 2M*n HGC SDH 2M WT&T SDH 2M Connections through MPLS VPDN of extranet providers As mentioned in Chapter 1, institutions outside China may connect with CFETS by means of MPLS VPN networks of extranet providers BT and TNS, and CFETS has extended the network to most part of the world through virtual POP. Institutions outside China may connect to MPLS VPN of BT or TNS for network connection with CFETS. The list of POP of BT in 134 cities of 67 countries is as follows: Almaty Dallas London Santiago Amsterdam Dubai Los Angeles Sao Paulo Athens Dublin Luxembourg Seoul Atlanta Dusseldorf Lyon Sevilla Auckland Frankfurt Madrid Shanghai Bangalore Geneva Malmoe Singapore Bangkok Gothenborg Manama Stockholm Barcelona Guangzhou Manila Strasbourg Beijing Hamburg Marsielle Stuttgart Beirut Helsinki Melbourne Sydney Berlin Ho Chi Minh Mexico City Taillinn

7 City Bogota Hong Kong Milan Taipei Boston Houston Montreal Tel Aviv Bratislava Istanbul Moscow Tokyo Brussels Jakarta Mumbai Toronto Bucharest Johannesberg New Dehli Toulouse Budapest Karachi New York Valencia Buenos Aires Kiev Nicosia Vienna Cairo Kuala Lumpur Osaka Warsaw Calgary Kuwait City Oslo Washington DC Cape Town Lagos Paris Zagreb Caracas Lille Prague Zurich Casablanca Lima Rio de Janerio Chicago Lisbon Rome Copenhagen Ljubljana San Francisco TNS has 125 POP in 40 countries:

8 BT and TNS provide the following connections: Extranet Provider Types of Connection Bandwidth Supported BT MPLS VPN 2M*n TNS MPLS VPN 2M*n 2.3 Bandwidth standards Definition Minimum bandwidth: the minimum line bandwidth that enables the proper functioning of the client system at the terminal of network members. If the dedicated line bandwidth is less than the minimum bandwidth,cfets cannot guarantee the proper functioning of the client system. Recommended bandwidth: the line bandwidthrecommended by CFETS that network members can apply. If the dedicated line bandwidth is less than the recommended bandwidth, CFETS cannot guarantee the proper response of the client system.

9 Shared bandwidth: the bandwidth can be shared among all other business except market making. Foreign exchange API market makers require a separate data line solely for this purpose. The minimum shared bandwidth should be the sum of the minimum bandwidths of all simultaneous business Bandwidth requirements Type Business Bandwidth (bps) Forex CFETS FX 2009 Each simultaneous user min 64k, (Members) recommended 128k. CSWAP Module Each simultaneous user min 256k, recommended 512k. Post-trade Processing Platform Each simultaneous user min 64k, recommended 128k. 2.4 Network connection and withdrawal Application procedure

10 1. To apply for network connection or withdrawal, please complete CFETS Network Connection or Withdrawal Application (refer to Appendix 1), affixthe common seal and return to CFETS. 2. CFETS will contact the institutions for connection requirements and provide information including contact and charges of various telecom providers. Institutions have to confirm the method of connection, either through leased line or MPLS VPN network of extranet providers, and CFETS will assist and follow up on connection application. 3. For leased line users, once the line is set up, CFETS will provide configuration data including IP and NAT addresses and further assist in network testing. 4. For extranet users that connect to CFETS using MPLS VPN, extranet providers will assist in network configuration. CFETS will assist in installation of VPN dialup terminal and network testing Charges Application for leased line as well as MPLS VPDN network may incur one-off charges and monthly fees, all charges are to be borne by individual member for payment to operators or extranet providers. Please contact with their sales representatives for details Application cycle When leased line is used for connection to CFETS, different telecom providers will require different time to complete the task. With the efforts of CFETS, the time frame for connection with the local line is scheduled as follows: Operators Locations Local elapsed time China Telecom Shanghai, Beijing 3~4 weeks China Unicom Shanghai, Beijing 3~4 weeks PCCW Hong Kong Completed in 30 working days, normally completed within 1 month HGC Hong Kong 3~4 weeks WT&T Hong Kong 3 weeks

11 *The above schedule can normally be reached unless any abnormality happens during the installation process such as insufficient resources. For extranet providers, such as BT or TNS, the time frame for connection is scheduled as follows: Extranets Existing Users New Users BT 5~10 working days 4~6 weeks TNS 5~10 working days 4~6 weeks * The above schedule can normally be reached unless any abnormality happens during the installation process such as insufficient resources Contact of various telecom providers PCCW HGC WT&T BT Radianz TNS Name: 欧铖 (Ocean) Mobile: ocou@pccwglobal.com Tina Liu Mobile: TINA.LIU@hgc.com.hk Name: 甘晓艳 (Christine Gan) Mobile: ganxiaoyan@shtel.com.cn Name:Darren Chau Mobile: Darren.Chau@bt.com Name:Stephanie Chung Mobile: schung@tnsi.com 3. External service addresses and ports for foreign exchange trading system and related systems After opening the network, when using a dedicated line to access the trading centre related systems, your organization also needs to open the corresponding service addresses and ports on the firewall. For ease of understanding of external service addresses and ports forforeign exchange trading system and related business systems, we will prepare a

12 consolidated list of the addresses and ports. At the same time, if your organization uses network address translation (NAT) to convert the service address to the address within your organization, please modify the service address to the corresponding internal address in the configurations of the firewall. 3.1 Universal ports Trading centre server address (Shanghai master Service port Remark server) TCP 80 USB Key digital certificate update UDP 53 DNS Service Trading Centre Server (Beijing disaster Service Port Remark backup) TCP 80 USB Key digital certificate update UDP 53 DNS Service 3.2 CFETS FX 2009 Trading centre server address (Shanghai master server) Service port PING 443(https) PING 443(https) Remark Network Connection Test Transaction module / management module Network Connection Test Transaction System

13 Trading Centre Server (Beijing disaster backup) Service Port PING 443(https) PING 443(https) Remark Network Connection Test Transaction module / management module Network Connection Test Transaction System 3.3 Post-trade Processing Platform Trading centre server address (Shanghai master server) Service port Trading Centre Server (Beijing disaster backup) Service Port Remark Production service address and port after trading Remark Disaster backup service address and port after trading 3.4 C-Swap Module Trading centre Service port Remark

14 server address (Shanghai master server) TCP Client download and update C-Swap transaction port 4. Client recommended configuration requirements Hardware Software Sessions CPU Memory Hard Disk Operating System Resolution Framework Recommended Configuration X86 architecture,2ghz or above 2GB or above 2GB or above hard disk space Windows XPor above, Windows 7 32-bit recommended, Windows 7 64-bit is not supported. 800*600 or higher, 1280*1024 recommended..net Framework 4.0 or higher. Sun Java 1.6.0_06(For WinXP) Sun Java 1.7.0_21(For Win7) Network Browser Antivirus software Intranet/In ternet Bandwidth Internet Explorer8 or Explorer9 recommended. Mainstream antivirus software supported, NORTON recommended. Only intranet is supported. Leased line network, 256kbps or higher, 512kbps recommended. Note: These requirements are for the users who use all functions. For users who only use FX trading system(cfets FX 2009), 128K Leased line is recommended.

15 5. Client setup and configuration 5.1 Basic configuration for clients Set up DNS Open Control panel->network and sharing center>local connection- >TCP/IP, enter DNS server address and backup DNS server address Set up Hosts If your local DNS cannot be modified, you can set up hosts for analysis ofdomain name, which supports accessing the trading system through domain name. Specific operations are as follows: Use notepad to open C:\Windows\System32\drivers\etc\hosts, then add the following corresponding relationship to this file, after that save the file fxtrade.chinamoney.com.cn fxportal.chinamoney.com.cn fxtradetest.chinamoney.com.cn fxportaltest.chinamoney.com.cn fxtradebak.chinamoney.com.cn fxportalbak.chinamoney.com.cn post-trade.chinamoney.com.cn Note: The test domain name is just for Simulation Environment Set up browser 1) Open IE browser, click Tools->Internet properties->advanced, choose and tick Use JRE1.6.0_06 for <applet>(requires restart), click OK and restart the computer, see below: Note: This setup is unnecessary for IE8.0 and above.

16 2) Open IE browser, click Tools->Internet properties->security->trusted sites, click Sites, enter and then click Add and Close, see below:

17

18 3) Open IE browser, click Tools->Internet properties->general->setup, and tick Every time I visit the webpage, see below:

19 4) Open IE browser, click Tools->Internet properties->security->internet, click Custom level, then enable "launching applications and unsafe files (unsafe)", see below:

20 5.2 CFETSFX2009 Installation 1. Insert the installation CD provided by the CFETS into the transaction terminal CD-ROM, and then the CD will run automatically as shown below: 2. Select Toolkit Setup as shown below: 3. Select Install CFETS FX 2009, then the system begins to install. Choose a language (Chinese or English) in the pop-up language selection box and click OK as shown below.

21 4. Click Next in the FX CFETS 2009 setup wizard as shown below: 5. Choose Accept the terms of the license agreement and click I agree as shown below:

22 6. Select the installation instruction for the terms of the license agreement, and click Next as shown below:

23 7. Click "Install", you can install to the default path, or click "Browse" to define the custom installation path as shown below: 8. Follow the system prompts to install until completion. Note: If confirmation is required during installation, the ensuing installation will proceed after manual confirmation by users. 9. You need to restart the computer after installation, click Yes as shown below: 10. After the restart, users can access the trading system by clicking the desktop shortcut, or click Start->All program files->cfets FX 2009 as shown below:

24 Or Note: 1) In WIN7 or WIN8 system, you must run the installation CD-ROM as an administrator. 2) During the installation, if a version before V (Win7) version is found, the older version will be uninstalled automatically. An automatic backup of the configuration of the older version will be performed, and no reconfiguration is required. While uninstalling the older version, the program will uninstall a system dll related to USBKey digital certificate. When the computer is restarted after installation, a prompt will appear as follows: In this case, you need to reinstall certificate management software. 3) The program will install the following components according to the need of the terminal

25 ID Component name Use Mandatory or not 1 CFETS FX 2009 CFETS FX 2009 client Mandatory 2 JRE-7u21(for 32-bit operating system) Running support environment for client transaction module Mandatory 3 SHECA CFETS CA Certificate support program Mandatory 4 Microsoft.NET Framework 4.0(for WIN7) Running support environment for client program Based on the operating system 4) The system will check whether update is required after each successful login, click OK and the system will update automatically as shown below: 5) The installation, update and cancellation of the USBKey certificate, please refer to USBKeyUserManual. 6) New member users need to complete the relevant settings according to appendix 2.7 Trading terminal setup before use. 7) To login to the core of the new version, the following prompt will appear if the security certificate expires:

26 You can continue to login after clicking Later. 5.3 CSWAP Module Installation 1. In the IE browser of the intranet terminal, the C-swap setup website will be shown as below, is the address for downloading the C- swap (production environment) setup, is the latest serial number of the client version. The URL for downloading is:

27 2. The C-Swap installation package provides two types of formats (ZIP and EXE), please click on the "download" button to download the installation package. It also provides ZIP and EXE setup for Net Framework 4.0 installation.. 3. Open the installation package, double-click the EXE installation package to open the installer window (see diagram below): 4. Click "Next" and "Browse..." to select the installation directory, click "Install" to start the installation, click "Close" to complete the installation, the recommended installation path is suggested. Please ensure that the latest version of CFETS FX 2009has been installed before installing C-Swap module.

28 Please ensure that the.net Framework 4.0 has been installed before installing C-Swap module. 5.4 Post-trade processing platform Post-trade processing platform (PTPP) is web-based, no installation is required. Open IE directly, and enter the address of the PTPP host as follow: enter the following interface: Choose your language first Note: The first time you access the PTPP, you should set Language first. This enables you to set your preferences for language information which will be saved by OS cookies automatically.

29 6. Customer support service 6.1 Introduction Helpdesk of China Foreign Exchange Trade System (CFETS) provides a service center to members for system-related business, technical issues and usage. It helps to resolve all sorts of business-related or technical problems in transaction, settlement, information service, etc. The flow chart below is the support process of CFETS (illustration with solution for problems and the time report): CFETS Customers Business Support: Accept and answer businessrelated questions; accept and complete relevant business service applications. For possible technical problems, transfer the case to Technical Support. Technical Problems Technical Support: Accept and solve technical problems; accept and complete relevant technical service applications. Problem Solved

30 6.2. Contact information and service hours 1. Tel: (FX) *7*1*1 (Information) *7*4 (Technical) *7*6*1 2.Fax (FX) (Information) (Technical) (FX) (Information) (Technical) 4. Service hours (GMT +8): a) (FX) 6:30-20:00 b) (Information) 8:45-17:00 c) (Telephone Technical Support) 6:30 20:00