Rev 3 Nov 17
9
4119855
2
2: Installation
This chapter describes how to install an ACM server appliance, and how to connect
the ACM (server or software) to your network.
Physical Installation
The ACM dedicated server appliance is a Dell PowerEdge R230XL (subject to future
change).
Environmental Requirements
The server must be installed in a temperature-controlled, computer data center
environment. An external UPS power source is recommended. The unit's power
supply is rated at 250W and a power cord is supplied.
Mounting Requirements
The server is shipped with Dell-supplied rails that can be used to mount the unit in
compatible 19" racks, or set onto securely mounted rack shelving.
Connecting the ACM to Your Network
The ACM is dedicated to providing secure mobile connections for AirLink gateways/
routers. It is not to be used as a replacement or substitute general purpose enterprise
firewall/router.
Sierra Wireless recommends that the ACM be installed behind the enterprise firewall
so that policies and procedures relating to enterprise security are not significantly
affected by the introduction of the ACM. When used in this mode, the ACM security
footprint is limited to:
•
AirLink devices must be able to access the ACM from the WAN. Typically, this
requires that the ACM be assigned a public IP address. If the IP address is not
publicly routable, it should be network address translated (NAT) (see next point)
to a private address on the ACM physical network interface.
•
TCP/IP port 2222 must be enabled to allow access to the ACM.
•
The traffic between AirLink devices and the ACM consists of IPsec traffic on UDP
protocol port 500 and ESP encapsulated on UDP port 4500. Only these items
need to be taken into consideration for port and protocol translation from the
public to the private address.
To connect the ACM to your network, the following steps must be performed:
1.
Assign a public IP address. If network address translation is required, translate
assigned IP addresses to the outside address of the ACM (see
page 52).