AirLink Helix

User Guide

2140847 Rev 3.0D

Preface

AirLink Helix User Guide

Preface

AirLink Helix User Guide

Contents

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5

What???s Included with the AirLink Helix? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 What Else Do You Need to Get Started? . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Getting Going (the quick version). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 CDMA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6 GSM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6

Connecting a Computer to the AirLink Helix . . . . . . . . . . . . . . . . . . . . . . . . . .7

Connecting Through Ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Connecting Through Wi-Fi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Where to Find More Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Hardware Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Physical Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Turning On the AirLink Helix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Status Lights. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

Cellular Antennas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Reset Button. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Power Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

SIM Slot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Remove the SIM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

USB Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

USB Modem connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Configuring AirLink Helix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19

ACEmanager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Contents

Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Home . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19

WAN/Cellular . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

LAN/WiFi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21

VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22

Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

About . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24

Configuring WAN/Cellular . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25

WAN/Cellular . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

WAN Failover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26

Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

How it works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 IP Passthrough . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

Configuring LAN/WiFi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

LAN/WiFi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Addressing/VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

WiFi Global . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

Shared WEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

WPA/WPA2 Personal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

WPA Enterprise . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

WiFi 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34

Global DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34

VRRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Configuring AirLink Helix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37

VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 VPN 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37 VPN 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39

Contents

Configuring Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41

Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Port Forwarding and DMZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41

Port Filtering - Outbound . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42

MAC Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42

Configuring Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 ACEnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43 ACEmanager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44

Dynamic DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44

Landing Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45

Management (???SNMP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Configuring Admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47

Admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47

Debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48

Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49

Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51

WAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 LAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Routing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Administration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Physical . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

AirLink Helix User Guide

Regulatory Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Federal Communications Commission Notice (FCC United States) . . . . 53

Industry Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Antenna Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

RF Exposure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

EU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

WEEE Notice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

What???s Included with the AirLink Helix?

???AirLink Helix RT kit

???AirLink Helix RT cellular router

???User Guide

???Outlet power adapter

???Wi-Fi (optional depending on the kit)

???Antennas (optional depending on the kit)

What Else Do You Need to Get Started?

???An active data account with your cellular provider is required. Contact your cellular carrier or reseller if you have data account related queries.

Note: Please also read the terms and conditions of your cellular service to ensure that your rate plan is appropriate for use with the AirLink Helix.

???At least one computer that supports Ethernet or Wi-Fi networking.

???A web browser such as Internet Explorer 6 or later for Windows, Firefox 1.5, or Safari.

AirLink Helix User Guide

Getting Going (the quick version)

The AirLink Helix is designed to be simple to use. No additional software is required for most users. The remainder of the User Guide provides complete instructions for using the device.

CDMA

If you have a CDMA device, please follow the instructions as below:

1.Plug the AirLink Helix power adapter into the power connector on the back panel of the AirLink Helix. Wait approximately two minutes to allow the AirLink Helix and modem to initialize.

2.Connect your computer to the AirLink Helix with an ethernet cable. Users can also connect with Wi-Fi using ???helix??? as the default network name.

3.If the modem is not automatically detected, and if you are a first time user,

you may need to configure your cellular modem through the WAN page in the ACEmanager with your web browser at 192.168.2.1. The username is admin and default password is 12345. For more details on configuring the AirLink Helix, refer to the chapter titled ???Using the ACEmanager.???

GSM

If you have a GSM device, please follow the instructions as below:

1.Insert a SIM card into the SIM slot on the front of the Helix.

2.Plug the AirLink Helix power adapter into the power connector on the back panel of the AirLink Helix. Wait approximately two minutes to allow the AirLink Helix and modem to initialize.

3.Connect your computer to the AirLink Helix with an ethernet cable. Users can also connect with Wi-Fi using ???helix??? as the default network name.

4.If the modem is not automatically detected, and if you are a first time user,

you may need to configure your cellular modem through the WAN page in the ACEmanager with your web browser at 192.168.2.1. The username is admin and default password is 12345. For more details on configuring the AirLink Helix, refer to the chapter titled ???Using the ACEmanager.???

Have more questions? Look through this manual for more information or contact

Sierra Wireless support at http://www.sierrawireless.com/support.

2: Connecting a Computer to the AirLink 2 Helix

???Connecting Through Ethernet

???Connecting Through Wi-Fi

???Where to Find More Any laptop, desktop, handheld, printer, or other computing device that

Figure 2-1: Helix: Ports on the backplate

Connecting Through Ethernet

To connect to the AirLink Helix using Ethernet, simply plug one end of an Ethernet cable into your computer, and plug the other end into either of the Ethernet ports on the AirLink Helix.

There are two Ethernet ports on the Helix. In most configurations, both can be used for LAN connections. In WAN failover mode, one is used for a WAN port to connect to another Internet service like a DSL or cable modem.

Make sure your computer is setup for DHCP addressing. To setup the AirLink Helix for static IP addressing, refer to the LAN Page section in ???Using the ACEmanager???.

AirLink Helix User Guide

Connecting Through Wi-Fi

Wi-Fi is available as an option on some versions of the Helix RT.

To connect wirelessly to the AirLink Helix using a Wi-Fi equipped computer, simply select the network name ???helix??? using the Wi-Fi connection software provided with your operating system or Wi-Fi network interface.

You can customize the network name and other Wi-Fi configuration options using the LAN/Wi-Fi page in the ACEmanager. For more information, see the ???Using the ACEmanager??? chapter.

Note: If you don???t change the default security settings in the ACEmanager for the AirLink Helix, the AirLink Helix is accessible to any Wi-Fi device. For information about Wi-Fi security, see the Security Page section in the ???Using ACEmanager??? chapter.

The AirLink Helix Wi-Fi network is based on the 802.11b/g. By default you can also use computers equipped with 802.11b Wi-Fi hardware because 802.11g is backwards compatible with 802.11b.

If you have trouble connecting automatically to the AirLink Helix using Wi-Fi, try the following:

???Make sure the ???helix??? network name is selected in the list of available networks with your computer???s Wi-Fi connection software.

???Turn your computer???s Wi-Fi connection off and then on again.

???Restart your computer.

???Check to see that your computer???s network configuration is consistent with the configuration of the AirLink Helix. The default AirLink Helix configuration requires your computer to use a DHCP connection.

???For Windows XP users, check to see that you have Service Pack 2 or higher installed. To determine if you have Service Pack 2 installed, open the Control Panel and then open the System application.

???Change the Wi-Fi channel in the AirLink Helix ACEmanager. You may be encountering interference on a certain channel.

???Try turning off WEP or WPA encryption in the ACEmanager. If you can connect when encryption is turned off, you may be entering incorrect WPA or WEP login information into your computer or device.

Where to Find More Help

The Ethernet, Wi-Fi, and TCP/IP network interfaces used by the AirLink Helix comply with industry standards. Connection issues may be related to the proper use of these standards and not the AirLink Helix itself. For additional help connecting your computer or device to the AirLink Helix, please refer to the networking instructions provided by your computer???s operating system.

Please contact Sierra Wireless support for further Helix RT related queries.

Note: Software currently does not support USB services. Do not plug unsupported devices into the USB ports.

Turning On the AirLink Helix

The AirLink Helix powers on as soon as it is plugged in to the power outlet. The AirLink Helix power port is located on the back of the device. To turn the device off, simply unplug the power adapter.

For use in a vehicle, a vehicle power adapter is available as an optional accessory.

Status Lights

The AirLink Helix has three lights on the front faceplate that indicate status and help initial troubleshooting. The green LED on the left, is lit whenever Helix is plugged in. The middle green LED indicates cellular signal strength. The right green LED indicates WWAN activity.There are three modes:

AirLink Helix User Guide

3G

Status

Figure 3-1: Status LEDs

LEDs

The LED patterns in the Helix are as follows:

(Left) ??? 3G

???Off : 3G connection is not active

???On : 3G connection is active

(Middle) ??? Signal Strength (RSSI)

???On Solid : Equal to or stronger than -69dBm (excellent signal strength)

???Fast Blink : -70 to -79dBm

???Normal Blink : -80 to -89dBm

???Slow Blink : -90 to -99dBm

???Off : Equal to or weaker than -100dBm (no signal strength)

(Right) ??? WWAN Status

???Off : No cell module detected

???Blinking : cellular module detected, communicating with the Helix CPU. This LED is hardware dependent and may blink differently depending on the installed cellular module.

Cellular Antennas

The AirLink Helix requires two cellular antennas, as shown in Figure 3-2. Depending on your Helix kit, antennas may or may not be included.

Hardware Overview

Cellular

Antennas

Figure 3-2: Cellular Antennas

Note: Use all four antennas for diversity. Using only one cell antenna or one Wi-Fi antenna can cause degraded performance.

The optimal placement of the cellular antenna is upright.

AirLink Helix User Guide

Wi-Fi Antennas

The antennas on the back of the Helix are for transmitting and receiving Wi-Fi signals. Connect antennas directly to the connectors found at the back of the Helix.

Note: Optimal antenna performance can be achieved by orienting the WiFi antennas horizontally.

Wi-Fi Antennas

Figure 3-3: Wi-Fi Connection

Reset Button

The reset button is a small hole located in on the front faceplate of the Helix. This button provides a quick way to turn the Helix power off and back on. Simply insert a paper clip or similar object into the hole to press the reset button.

In some cases the Airlink Helix may need to be reset to defaults. This will reset any custom settings and connection information. If the ACEmanager password has been forgotten or is unable to be accessed, the Airlink Helix can be reset during the bootup process by pressing the reset button for just 10 seconds.

Reset Button

Figure 3-4: Helix: Reset Button

AirLink Helix User Guide

Figure 3-8: Pushing SIM in to the SIM slot

Remove the SIM

Firmly press on the SIM and it will unlock from the holder with a click sound. Once the SIM ejects, use a pair of tweezers to pull out the SIM.

Figure 3-9: Removing SIM

A single USB modem can be connected to Helix RT. USB modems Compass 598 (Sprint) and Compass 895 (AT&T) are supported. Only one cellular device, that is either the Helix RT or the USB modem operates at a given time. When a USB modem is connected to the Helix RT, it assumes all the functions of the internal radio module to provide WWAN connectivity. Once the USB modem is removed the internal radio module of Helix RT restarts.

Figure 4-1: USB modems : Compass 895 and Compass 598

When a USB modem is connected to the Helix RT, it performs with the other all the features as if it were the Helix RT. WAN failover, APN configuration, and similar features now operate with the USB modem.

Multiple failover options include USB modem in WAN failover feature, so that the software can automatically toggle between:

???WAN port Ethernet connection

???Embedded modem

???USB modem.

Note: Only one external USB modem can be plugged in at a time.

AirLink Helix User Guide

USB Modem connection

Instructions to connect your USB modem to the Helix RT are as follows.

1.Unplug the Helix RT.

2.Plug in the USB modem. You can also use the extender cable provided.

3.Plug in the Helix RT.

Note: The USB modem needs to be inserted when the Helix is turned off, in order for Helix to recognize the USB modem at startup.

4.Enter http://192.168.2.1:9191.htm on your browser, to connected to ACEmanager.

??User ID: admin

??Password: 12345

Note: USB radio supports all other Helix software features.

5.In ACEmanager,

a. By selecting the About tab, you can view the Helix module information.

Figure 4-2: ACEmanager: Status - About

USB Connection

6.Check the LED lights on the USB modem, to check the status of the USB connection.

Information for the USB modem connection is available on the Status tab in ACEmanager. GSM users can configure their APN on the WAN/Cellular tab in ACEmanager.

AirLink Helix User Guide

ACEmanager is the free utility used to manage and configure the AirLink Helix RT. After powering on the Helix, you can log on to ACEmanager by :

???Entering http://192.168.2.1:9191/index.htm in your browser.

The default login credentials are:

???Login: admin

???Password: 12345

To prevent others from changing the Helix settings, change the ACEmanager password. See the Security topic in the ???Configuring Airlink Helix" for more information.

Status

All of the fields in the ???Status??? group have read-only parameters and provide information about the Helix. Depending on the individual settings and the onboard cellular module of the Helix, the actual status pages may look different than the screenshots listed here. The individual status sections give an accurate view of the current running configuration of the Helix. Refer to the following sections for information about the individual configuration options.

Home

The home section of the status tab has basic information about the cellular network connection. Refer to the "WAN / Cellular" section for information about configuring the cellular modem.

Figure 5-1: ACEmanager: Status - Home

AirLink Helix User Guide

Table 5-1: Status: Home

WAN/Cellular

WAN/cellular status indicates specific information about the cellular connection including IP address and how much data has been used.

LAN/WiFi

This is the status of the local network. It lists information about the network and connected clients. If the Helix has Wi-Fi, Wi-Fi status information will be shown here.

AirLink Helix User Guide

Figure 5-3: ACEmanager: Status - LAN/WiFi

VPN

The VPN section gives an overview of the VPN settings and indicates whether a

VPN connection has been made.

Figure 5-4: ACEmanager: Status - VPN

Configuring AirLink Helix

Security

The security section provides an overview of the security settings on the Helix.

Figure 5-5: ACEmanager: Status - Security

Services

This section shows the ACEnet status.

Figure 5-6: ACEmanager: Status - Services

AirLink Helix User Guide

About

The About section of the Status group provides basic information about the cellular modem.

Figure 5-7: ACEmanager: Status - About

WAN/Cellular

The WAN/Cellular section allows changes to the cellular connection and main operating mode of the Helix. Some settings may appear differently and are dependent on cellular carrier settings.

The default mode is "Cellular". This uses the onboard cellular module as primary means of connection and enables all other onboard features. Custom connection settings can be included if they are supported by the cellular module.

AirLink Helix User Guide

WAN Failover

WAN Failover allows the Helix to intelligently manage two Internet connections, switching from one to the other as needed. After enabling this mode, Helix will continually test the primary Internet connection. If tests fail, Helix will automatically switch to the secondary connection while continuing to test the primary connection and switch back to the primary connection when connectivity is returned.

AirLink Helix User Guide

switches to if the primary connection fails. Default primary interface is Ethernet.

4.If needed, change the Primary Route IP and interval.

5.Click on Apply and reboot the box when prompted.

6.Plug in the Ethernet cable for the WAN connection in to WAN/LAN port of the Helix.

How it works

When enabled, Helix will ping the Primary Route IP at the interval you have configured. If one of these pings fails, Helix will immediately send another short series of pings to that IP address. If these pings also fail, Helix will switch to using the secondary Internet connection.

While the secondary Internet connection is being used, Helix will continue to ping the Primary Route IP to determine when the connection is restored. When the connection is restored, Helix will switch back to the primary connection.

IP Passthrough

IP Passthrough mode will pass the cellular WAN IP address directly through to any client connected to WWAN/LAN port on the Helix. This may be necessary for some VPN configurations or other enterprise applications. The Helix can also continue to provide LAN IP addresses to clients connected through LAN port (or Wi-Fi with supported devices). However WAN Failover, DMZ, and Port Forwarding are not available and ACEmanager cannot be reached through port 1. Any client connected to WWAN/LAN port must be setup with a static IP address and a gateway address that matches the WWANIP address and gateway address. IP passthrough works best when the cellular module is setup by the cellular carrier to receive a public static IP address on the carrier network.

Figure 6-3: ACEmanager: WAN/Cellular - IP Passthrough

The LAN/WiFi section displays VLAN configuration parameters, in

ACEmanager.

VLAN stands for virtual LAN. VLANSs help structure the network growth of companies. A VLAN typically has a cluster of hosts that are together in a broadcast domain and not based on their physical location. A difference between VLAN and LAN is that a VLAN allows devices to be grouped together even when the devices are not located on the same network switch.

The VLAN implementation with a Helix is more of a VLAN support. i.e. if there is a switch behind the Helix that supports VLAN, Helix will forward the packet to the appropriate VLAN segment.

ACEmanager allows the users to reconfigure their network instead of relocating devices.

Addressing/VLAN

This section indicates the status and allows you to change the IP settings of the local network.

Note: Changing settings in this area will require you to reconnect to

ACEmanager after saving any changes.

Figure 7-1: ACEmanager: LAN/WiFi - Addressing

AirLink Helix User Guide

WiFi Global

On supported models, the Helix has a Wi-Fi radio for wireless network connections.

Note: You can lock yourself out of the Helix when you first turn on WEP or WPA. You must then enter the right key in the format required by your computer or device before you can connect to the Helix with Wi-Fi. WEP and WPA do not affect Ethernet connections, so you can always connect to the Helix through an Ethernet port regardless of your encryption settings.

Configuring LAN/WiFi

AirLink Helix User Guide

Figure 7-4: ACEmanager: WiFi - WPA/WPA2 Personal

Configuring LAN/WiFi

WPA Enterprise

WPA Enterprise adds another layer of security to WPA by requiring clients authenticate with a server before being able to access the network. Clients connecting to the Helix when WPA Enterprise is enabled will need to have certificates installed from the RADIUS server, allowing them access to the network before being allowed to connect.

AirLink Helix User Guide

WiFi 2

The WiFi interface can support up to 4 WiFi LANs (WLAN), each with a separate

SSID, and separate encryption settings. Global settings apply to all WLANS.

Each WLAN may be routed to the Internet under user control.

Figure 7-6: ACEmanager: LAN/WiFi - WiFi 2

Global DNS

Global DNS allows you to override the default DNS settings of the cellular modem. This is used when custom cellular network settings (such as DataLink or custom APNs) are used on the cellular modem. Some carriers will block this setting. Check with your cellular carrier for more information.

Figure 7-7: ACEmanager: LAN/WiFi - Global DNS

AirLink Helix User Guide

The Helix Box can act as a Virtual Private Network (VPN) client, providing enterprise VPN access to any device connected to the Helix RT even when a device has no VPN client capability on its own. The Helix supports up to two tunneling protocols, IPsec and GRE. Both can be used at the same time if configured properly.

The Helix also supports split tunnels with one encrypted tunnel and one open tunnel. A sample server subnet for a split tunnel would be 172.16.1.0/24. Split tunnel VPNs should be setup with care, as a split tunnel configuration with both an enterprise VPN and access to the public Internet can inadvertently expose company resources.

This section should give you a general overview of the VPN capabilities. If you would like specific solution support, refer to the recommendations and instructions provided with your VPN server solution.

VPN 1

Figure 8-1: ACEmanager:VPN1 - IPSec Tunnel

AirLink Helix User Guide

Figure 8-2: ACEmanager: VPN 2 - VPN/IPSec

Figure 8-3: ACEmanager: VPN 2 - VPN/IPSec - GRE Tunnel

AirLink Helix User Guide

Most security features can be configured on the Security page. It is recommended you change the default password for ACEmanager.

Port Forwarding and DMZ

To add a rule, fill in the outside port (ie, 8080), the protocol (TCP or UDP), the host (or internal) IP, and the private port (the port on the inside of the network). Some cellular carriers restrict port access.

Check with your cellular carrier if you have problems setting this up. To add more rules, click on the Add More button. To remove a rule, click on the 'X' button that is next to the rule.

AirLink Helix User Guide

Port Filtering - Outbound

Figure 9-2: ACEmanager: Security - Port Filtering-outbound

MAC Filtering

Figure 9-3: ACEmanager: Security - MAC Filtering

Services

The services sections allows configuration of external services that extend the functionality of the Helix.

ACEnet

ACEnet is a remote management service that can be used to remotely configure and view the status of Helix boxes and other ALEOS compatible devices. For more information about this service, go to: http://www.sierrawireless.com/Product/airlink/acenet.aspx

AirLink Helix User Guide

ACEmanager

Figure 10-2: ACEmanager: Services - ACEmanager

Enable ACEmanager Enable ACEmanager on Tethered Host and Wifi or ALL (includes OTA).

ACEmanager Port Port for accessing ACEmanager is 9191.

Dynamic DNS

Dynamic DNS allows a Helix Box WAN IP address to be published to a third-party service. Be aware of the Dynamic DNS abuse policy when setting this up to ensure that the Helix is not blocked from the service.

Figure 10-3: ACEmanager: Services - Dynamic DNS

Landing Page

When Landing page is configured, an internet connection is blocked until the landing page is viewed from the web browser.

Figure 10-4: ACEmanager: Services - Landing Page

Enable Landing Page Select ???Enable??? to enable the landing page.

Landing Page URL URL of the landing page viewed. This can be on the remote location or on connected computer.

Note: WiFi 2, 3 and 4 are not affected by landing page.

Note: When the device first receives the nework IP and the landing page cannot be reached, you could get an error indicating Internet access is unavailable.

Management (???SNMP)

The Simple Network Management Protocol (SNMP) was designed to allow remote management and monitoring of a variety of devices from a central location. The SNMP management system is generally composed of agents (such as your Helix device) and a Network Management Station (NMS) which monitors all the agents on a specific network. Using the management information base (MIB), an NMS can include reporting, network topology mapping, tools to allow traffic monitoring and trend analysis, and device monitoring.

AirLink Helix User Guide

Figure 10-5: ACEmanager: Services - Management (SNMP)

Admin

The admin section of the Helix allows the box to be reset to defaults, the password to be changed, and debug mode.

Figure 11-1: ACEmanager: Service - Admin

It is highly recommended to change the default password of the

Helix.

To change the default password,

1.Enter the user name (admin).

2.Enter the old password.

3.Enter the new password twice.

4.Click on Change Password

You will be prompted to restart the Helix. When the box has restarted, reconnect to ACEmanager and you will be prompted to enter the new password.

Defaults

This will reset all settings (passwords, LAN and WAN configuration, security settings, etc.) to the original factory settings.

Figure 11-2: ACEmanager: Admin - Default

AirLink Helix User Guide

Click Reset to Factory Defaults to initiate the process to reset the Helix to its default settings. After clicking on the button, the Helix will reset and you can connect to ACEmanager with the default username and password.

Debug

Debug mode allows direct control over the cellular module for additional control, technical support, and custom settings. Enabling this mode will disable the onboard cellular module control.

Figure 11-3: ACEmanager: Admin - Debug

Here is how to configure the Helix for debug mode using AT commands:

1.Set Debug Enabled option to Enabled.

2.Set Debug Output to DB9 for output to the DB9 on the device. The TCP option can be used if a virtual serial port is setup on the host device.

3.Set Dev Port to the radio module port that pass through mode to AT.

4.Set the BAUD Rate to 115200

5.Set the TCP Port if Debug Output is set to TCP. Ignore this option if you are using a serial cable

6.Click the Apply button and OK in the popup window that reads: ???Applied the changes successfully.???

7.Click Reboot button.

8.Attach a serial cable to the Helix device after it has been rebooted.

Note: The Helix must be rebooted when enabling or disabling debug mode.

Configuring Admin

Log

The log file is a system log of the helix unit.

Log 0 is the current data and Log 1 to 5 is the archived data. The Refresh tab will refresh the display with current data. Clear tave will clear the log displayed.

Figure 11-4: ACEmanager: Admin - Log

AirLink Helix User Guide

LAN

???Ethernet 10/100 megabit, 2 ports

???Configurable LAN IP address

???MAC filtering

???Configurable DHCP server

???Wi-Fi 802.11b/g

???WPA and WPA2 Personal and Enterprise

???WEP (64 or 128 bit)

Routing

???NAT

???WWAN IP passthrough

???Static or DHCP IP address assignment

???Custom APN for GSM networks

???Port Forwarding

???Outbound port restrictions

???DMZ host

???On-board VPN

Administration

???ACEmanager, device config

???Remote management option with ACEnet

???Signal strength meter via ACEmanager

???Upgradeable firmware

AirLink Helix User Guide

Hardware

???FCC CFR47 PART 15 SUBPART C (FCC) compliant

??MC5727 id is N7N-MC5725

??MC8790 id is N7NMC8790

??WLM54G WiFi PCI card id MK8CPX-05-WLM54G.

???Power, Status, Activity LEDs

???Outlet Power adapter (12VDC, 1.5 amp)

Physical

???Compact, rugged case

???Dimensions: 6.25"x1.3875"x7.0625" (case, not including antenna)

???Weight: 2.25 pounds

???Operating temperature: 0??C to 50?? C

???Storage Temperature: -10C to +80C

Federal Communications Commission

Notice (FCC United States)

Electronic devices, including computers and wireless modems, generate RF energy incidental to their intended function and are therefore subject to FCC rules and regulations.

This equipment has been tested to, and found to be within the acceptable limits for a Class A digital device, pursuant to part 15 of the FCC Rules.

This equipment generates radio frequency energy and is designed for use in accordance with the manufacturer's user manual. However, there is no guarantee that interference will not occur in any particular installation.

If this equipment causes harmful interference to radio or television reception, which can be determined by turning the equipment off and on, you are encouraged to try to correct the interference by one or more of the following measures:

???Reorient or relocate the receiving antenna

???Increase the separation between the equipment and the receiver

???Connect the equipment into an outlet on a circuit different from that to which the receiver is connected

???Consult the dealer or an experienced radio/television technician for help

???This device complies with Part 15 of the Federal Communications Commission (FCC) Rules. Operation is subject to the following two conditions:

1.This device may not cause harmful interference.

2.This device must accept any interference received, including interference that may cause undesired operation.

Warning: Changes or modifications to this device not expressly approved by Sierra Wireless could void the user's authority to operate this equipment.

Industry Canada

This Class A digital apparatus meets all requirements of the Canadian Interference Causing Equipment Regulations. Operation is subject to the following two conditions:

1.this device may not cause harmful interference, and

2.this device must accept any interference received, including inter- ference that may cause undesired operation.

AirLink Helix User Guide

Regulatory Information

The Declaration of Conformity made under Directive 1999/5/EC is available for viewing at the following location in the EU community.

Sierra Wireless

39677 Eureka Drive

Newark, CA

USA 94560

The device is a Class A device for use in commercial environment.

WEEE Notice

If you purchased Product Name in Europe, please return it to your dealer or supplier at the end of its life. WEEE products may be recognised by their wheeled bin label on the product label.

AirLink Helix User Guide