Helix User Guide.book
Contents
1. Command Description Device Initiated Variable This determines how often the Helix checks for software updates Interval Minutes and settings changes from ACEnet ACEnet can also query the Helix at a regular interval if settings allow Refer to the ACEnet documentation for more information Account Name Your account name Status Connected or Not Connected Dynamic DNS Dynamic DNS allows a Helix Box WAN IP address to be published to a third party service Be aware of the Dynamic DNS abuse policy when setting this up to ensure that the Helix is not blocked from the service Status WAll Cellular LANWiFi VPN Security Services Admin Last updated time 06 12 2009 15 56 08 Expand All Apply Refresh Cancel MENT annaa A IH Dynamic DIS ENENEES Dynamic DIIS Service Not Selected 1 Login Password Interval Secs 3600 Full Domain Name Figure 5 24 ACEmanager Services Dynamic DNS Command Description Service dyndns org noip org ods org regfish com or tzo com Select the dynamic DNS provider that you have an account with Login Login for Dynamic DNS Password Password for Dynamic DNS provider Interval Enter Interval in Sec Be careful when entering this information to match the recommendations from your Dynamic DNS provider Full Domain Name Full domain name provided by your Dynamic DNS provider An example is helixrt noip org for instance2. Admin The admin section of the Helix allows the box to be reset to defaults the password to be changed and debug mode 46 2140847 Rev 3 0 Jul 09 Status WAN Cellular LAILWiFi VPH Security Services Admin Last updated time 06 12 2009 15 56 08 Configuring AirLink Helix Apply Refresh Cancel Change ACEmanager Password User Ham Old Passwort New Passwort Retype New Passwort Change Password Status WAIL Cellular LAN WiFi VPN Security Services Admin Last updated time 06 12 2009 15 56 08 Figure 5 25 ACEmanager Service Admin It is highly recommended to change the default password of the Helix To change the default password 1 Enter the user name admin 2 Enter the old password 3 Enter the new password twice 4 Click on Change Password You will be prompted to restart the Helix When the box has restarted reconnect to ACEmanager and you will be prompted to enter the new password Defaults This will reset all settings passwords LAN and WAN configu ration security settings etc to the original factory settings Apply Refresh Cancel Reset to Factory Default Reset to Factory Default Figure 5 26 ACEmanager Admin Default Click Reset to Factory Defaults to initiate the process to reset the Helix to its default settings After clicking on the button the Helix will reset and you can connect to ACEmanager with the defaul
3. Network Password Keep Alive Keepalive IP Address 216 92 96 182 Keepalive Ping Time 3600 Figure 5 8 ACEmanager WAN Cellular Command Backhaul Mode Description Cellular WAN failover IP Passthrough These are the three operating modes of the Helix Cellular mode is the default mode and in this mode the Helix operates as cellular modem with LAN routing capabilities WAN failover mode uses either the cellular modem or an Ethernet WAN link DSL cable office LAN to connect to the Internet The Helix will then manage and switch between the two connections based on their availability IP Passthrough mode mode will pass the cellular WAN IP address directly through to any client connected to port 2 of the Helix This is used in some VPN scenarios or when a device requires an external IP address Devices connected to port 1 or Wi Fi will still receive DHCP addressing Network Credentials Default or Custom Default settings are the default cellular data connection settings in the United States Selecting Custom settings will show another set of fields allowing you to use custom settings for specific carrier information Set APN GSM only APN or Access Point Name is specific to GSM networks Custom access points can be used to create VPN connections or to provide specific routing functionality Contact your cellular carrier for more information about how these work Network Us
4. Set the TCP Port if Debug Output is set to TCP Ignore this option if you are using a serial cable 6 Click the Apply button and OK in the popup window that reads Applied the changes successfully Click Reboot button 8 Attacha serial cable to the Helix device after it has been rebooted Note The Helix must be rebooted when enabling or disabling debug mode 48 2140847 6 Technical Specifications WAN LAN Routing Administration Hardware Physical Rev 3 0 Jul 09 WAN WAN fail over of landline backhaul DSL cable etc WAN Alive maintains persistent cellular connection Dynamic DNS client compatible with third party DDNS services LAN Ethernet 10 100 megabit 2 ports Configurable LAN IP address MAC filtering Configurable DHCP server Wi Fi 802 11b g WPA and WPA2 Personal and Enterprise WEP 64 or 128 bit Routing NAT WWAN IP passthrough Static or DHCP IP address assignment Custom APN for GSM networks Port Forwarding Outbound port restrictions DMZ host On board VPN Administration ACEmanager device config Remote management option with ACEnet 49 AirLink Helix User Guide Signal strength meter via ACEmanager Upgradeable firmware Hardware e FCC CFR47 PART 15 SUBPART C FCC compliant MC5727 id is N7N MC5725 MC8790 id is N7NMC8790 WLM54G WiFi PCI card id MK8CPX 05 WLM54G Power Status Activity LEDs Outlet Power adapter 12VDC 1 5 a
5. 3600 Not Available 208 67 222 222 DNS Server 2 208 67 220 220 Time in Use Minutes 20746124 Traffic Over WAN KB 0 Command Cellular IP Address Figure 5 2 ACEmanager Status WAN Cellular Description Cellular WAN IP Address Ethernet IP Address Ethernet IP Address This is present in WAN failover mode only WAN Link WAN Link defaults to cellular In WAN failover mode this can be either cellular or Ethernet ESN EID IMEA The cellular radio module s unique identification number or electronic serial number ESN or IMEA Keepalive IP Address The IP address that WAN keepalive uses to test cellular connectivity Keepalive Ping Time The amount of time between keepalive pings in seconds Gateway Gateway IP address of the local network DNS Server 1 First DNS IP addresses of cellular or Ethernet network DNS Server 2 Second DNS IP addresses of cellular or Ethernet Time in Use Minutes Total time of continuous network connectivity on either cellular or Ethernet WAN This timer restarts when the connection is reset Traffic Over WAN KB Rev 3 0 Jul 09 Total amount of data sent and received during this session This is reset when the connection is reset LAN WiFi This is the status of the local network It lists information about the network and connected clients If the Helix has Wi Fi Wi Fi status information will be shown her
6. Helix supports three prime key lengths including Group 1 768 bits Group 2 1 024 bits and Group 5 1 536 bits IPSec SA Life Time 180 to 86400 Determines how long the VPN tunnel is active in seconds The default value is 28 800 seconds or 8 hours VPN 2 The Helix can act as a Generic Routing Encapsulation GRE endpoint providing a means to encapsulate a wide variety of network layer packets inside IP tunneling packets With this featureyou can reconfigure IP architectures without worrying about connectivity GRE creates a point to point link between routers on an IP network The VPN 2 section allows configuration of the GRE tunnel on the Helix box 1 Status WAN Cellular LANMWIFi ven Security Services Admin Last updated time 06 12 2009 15 50 25 Apply Refresh Cancel vPH4 T VPN 2 Type Tunnel Disabled v NR D D VPN Status Disabled GRE TTL 255 Figure 5 21 ACEmanager VPN 2 VPN IPSec Status WAN Cellular LAILWiFi ven Security Services Admin Last updated time Apply Refresh Cancel VPH1 VPN 2 Type GRE Tunnel v AAA sau VPN Gateway Address 0 0 0 0 Remote Subnet IP AddrMask GRE TTL Figure 5 22 ACEmanager VPN 2 VPN IPSec GRE Tunnel 44 2140847 Configuring AirLink Helix Command Description VPN 2 Type Tunnel Disabled or GRE Tunnel Enabling the GRE Tunnel will expose other options for configuring the tunne
7. Status WAI Cellular Last updated time 06 12 2009 14 59 00 LANWiri VPN WPA Enterprise WPA Enterprise adds another layer of security to WPA by requiring clients authenticate with a server before being able to access the network Clients connecting to the Helix when WPA Enterprise is enabled will need to have certificates installed from the RADIUS server allowing them access to the network before being allowed to connect Security Services Admin Expand All Apply Refresh Cancel Addressing Global DNS WIFI Configuration Enable Wireless Access Point SSID Network Name WIFION helix Hide SSID Display M Wireless Mode Mixed M Wifi Channel 12412GHz Security Encryption type WPA WPA2 Enterprise Y WPA WPA2 Enterprise Wifi Encryption TKIP Primary Radius Server IP Primary Radius Server Port Primary Radius Server Secret Secondary Radius Server IP Secondary Radius Server Port Secondary Radius Server Secret Figure 5 15 ACEmanager WiFi WPA WPA 2 Enterprise Command WiFi Encryption Description TKIP or AES Defines what encryption scheme to use under WPA Options are Temporal Key Integrity Protocol TKIP and Advanced Encryption Standard AES Radius Server IP Primary or Secondary This is the IP address of your enterprise RADIUS server These servers must be accessible ALL th
8. Encryption Standard is supports 128 bit encryption IKE Authentication Algorithm SHA1 or MD5 Can be configured with MD5 or SHA1 MD5 is an algorithm that produces a 128 bit digest for authentication SHA1 is a more secure algorithm that produces a 160 bit digest IPSec Encryption Algorithm Rev 3 0 Jul 09 DES 3DES or AES Determines the type and length of encryption key used to encrypt decrypt ESP Encapsulating Security Payload packets 3DES supports 168 bit encryption AES Advanced Encryption Standard supports 128 bit encryption 43 AirLink Helix User Guide Command Description IPSec Authentication SHA1 or MD5 Can be configured with MD5 or SHA1 MD5 is an algorithm Algorithm that produces a 128 bit digest for authentication SHA1 is a more secure algorithm that produces a 160 bit digest IKE SA Life Time 180 to 86400 Determines how long the VPN tunnel is active in seconds The default value is 28 800 seconds or 8 hours Perfect Forward Yes or No Provides additional security through a DH shared secret value Secrecy When this feature is enabled one key cannot be derived from another This ensures previous and subsequent encryption keys are secure even if one key is compromised IPSec Key Group DH1 DH2 or DH5 Determines how the Helix VPN creates an SA with the VPN server The DH Diffie Hellman key exchange protocol establishes pre shared keysd uring the phase 1 authentication
9. Hiding the SSID will not prevent people from connecting to the box if the signal is open Rev 3 0 Jul 09 3 al AirLink Helix User Guide Command Wireless Mode Description G only or Mixed By default the Mixed mode option provides the greatest compatibility with 802 11b and 802 11g devices To create a pure 802 119 network select the G Only mode Wi Fi Channel 1 11 The Wi Fi access point on the Helix can use any of 11 channels If other Wi Fi networks are in range and operating on nearby channels you may be able to avoid interference by changing to a different Wi Fi channel Security Encryption type Open WEP WPA The Helix box supports Wired Equivalent Privacy WEP and Wi Fi Protected Access 802 11i WPA and WPA2 Personal and Enterprise Both protocols will restrict access to the Helix box and protect data transmitted between the clients and the device WPA provides the highest level of security if all of the LAN devices on your network support this protocol WPA Enterprise is the follow on wireless security method to WPA that provides stronger data protection for multiple users and large managed networks It prevents unauthorized network access by verifying network users through an authentication server Status WAN Cellular Last updated time 06 12 2009 14 59 00 Shared WEP WEP or Wireless Encryption Protocol is the least secure but most supported encryption method L
10. default login credentials are Login admin e Password 12345 To prevent others from changing the Helix settings change the ACEmanager password See the Security topic in the Config uring Airlink Helix for more information Status All of the fields in the Status group have read only param eters and provide information about the Helix Depending on the individual settings and the onboard cellular module of the Helix the actual status pages may look different than the screenshots listed here The individual status sections give an accurate view of the current running configuration of the Helix Refer to the following sections for information about the individual configuration options Home The home section of the status tab has basic information about the cellular network connection Refer to the WAN Cellular section for information about configuring the cellular modem 25 AirLink Helix User Guide Status WAN Cellular LAN WiFi VPN Security Services Admin Last updated time 06 16 2009 12 17 08 Refresh Cancel backhaul mode Cellular WANICellular Current WAN IP Address LAN WiFi Network State Not Connected RSSI dBm 104 VPN Network Operator Security Network Service Type None 7 ALEOS Software Version 4 0 40 026 eee Channel 65535 About Modem Name Helix RT Figure 5 1 ACEmanager Status Home Table 5 1 Status Home Command Description Backhaul mode WAN backha
11. il Figure 5 19 ACEmanager Security MAC Filtering MAC Filtering MAC an allows communication to Helix through the listed MAC address s only VPN The Helix Box can act as a Virtual Private Network VPN client providing enterprise VPN access to any device connected to the Helix RT even when a device has no VPN Rev 3 0 Jul 09 41 AirLink Helix User Guide 42 client capability on its own The Helix supports up to two tunneling protocols IPsec and GRE Both can be used at the same time if configured properly The Helix also supports split tunnels with one encrypted tunnel and one open tunnel A sample server subnet for a split tunnel would be 172 16 1 0 24 Split tunnel VPNs should be setup with care as a split tunnel configuration with both an enterprise VPN and access to the public Internet can inadver tently expose company resources This section should give you a general overview of the VPN capabilities If you would like specific solution support refer to the recommendations and instructions provided with your VPN server solution VPN 1 Status WAN Cellular LAN WiFi vm Security Services Admin Last updated time 06 12 2009 15 48 37 Apply Refresh Cancel VPN Status Disabled SNTP Server Address pool ntp org J VPN Gateway Address Remote Subnet IP AddriMask Pre shared Key 1 My Identity Peer Identity Negotiation Mode Main M IKE Encrytion Algorithm DES IKE Auth
12. 8 08 58 Apply Refresh Cancel ome Radio Module Type MC8790 WAN Cellular Radio Firmware Version K1_0_2 BAP C ALEOS Software Version 4 0 40 024 LAN WiFi y O M gt gt gt Modem Hardware Configuration 0F150000000700000000000000000000 ven MSCI Version 6 Security Services About Figure 5 7 ACEmanager Status About Command Description Radio Firmware Firmware version in the radio module Version ALEOS Software Displays version of ALEOS software running on the Helix RT Version Modem Hardware Versions of internally configured hardware Configuration MSCI Version Version of MSCI WAN Cellular The WAN Cellular section allows changes to the cellular connection and main operating mode of the Helix Some settings may appear differently and are dependent on cellular carrier settings The default mode is Cellular This uses the onboard cellular module as primary means of connection and enables all other onboard features Custom connection settings can be included if they are supported by the cellular module 30 2140847 Status Configuring AirLink Helix WAN Cellular LAN WiFi VPN Security Services Admin Last updated time 06 16 2009 12 17 12 Expand All Apply Refresh Cancel D wacen O warmed backhaul mode Cellular Network Credentials WAN Failover IP Passthrough Network Credentials GSM Set APN Network User ID
13. ANWiFi VPN Security Services Admin Expand All Apply Refresh Cancel Addressing Global DUS WIFI Configuration IFI ON ll Enable Wireless Access Point SSID Network Name heli Hide SSID Display Wireless Mode Mixed vw Wifi Channel 12412GHz w Security Encryption type Shared WEP v WEP Key length 64 bit key generated from passphrase WEP Passphrase HelixwWEP WEP Hex Key 8f 3d be 0d 60 36 Figure 5 13 ACEmanager WIFI Shared WEP 2140847 Command Key Length Configuring AirLink Helix Description 64 bit 128 bit Custom WEP is available with shorter 64 bit keys or longer 128 bit keys While 128 bit encryption provides a higher level of security some computers and Wi Fi clients only support 64 bit encryption Use a key length that is compatible with all of the wireless clients on your network WEP Passphrase The default passphrase is HelixWEP You can enter your own private WEP passphrase to generate a hex hexadecimal key Treat the passphrase like a password and select one that is difficult for others to guess After you enter a new passphrase click the Apply button to make the change effective When logging into Wi Fi from your computer enter the hex key not the passphrase Most WEP connections only use the hexadecimal format The passphrase is simply used as an easy way for you to create a hex key You can configure your own h
14. AirLink Helix User Guide 2140847 Rev 3 0 CI _ SIERRA WIRELESS HEART OF THE WIRELESS MACHINES Important Notice Safety and Hazards Rev 3 0 Jul 09 Due to the nature of wireless communications transmission and reception of data can never be guaranteed Data may be delayed corrupted i e have errors or totally lost Although significant delays or losses of data are rare when wireless devices such as the Sierra Wireless AirLink Product Name are used in a normal manner with a well constructed network the Sierra Wireless AirLink Product Name should not be used in situations where failure to transmit or receive data could result in damage of any kind to the user or any other party including but not limited to personal injury death or loss of property Sierra Wireless accepts no responsibility for damages of any kind resulting from delays or errors in data transmitted or received using the Sierra Wireless AirLink Product Name or for failure of the Sierra Wireless AirLink Product Name to transmit or receive such data READ ALL SAFETY AND OPERATING INSTRUCTIONS BEFORE OPERATING THE PRODUCT Warning FOR INDOOR USE ONLY TO PREVENT FIRE OR SHOCK HAZARD DO NOT EXPOSE THIS DEVICE TO RAIN OR MOISTURE DO NOT EXPOSE THIS PRODUCT TO DRIPPING OR SPLASHING NO OBJECTS FILLED WITH LIQUIDS SUCH AS VASES SHALL BE PLACED ON THE DEVICE Caution DO NOT OPEN THE UNIT DO NOT PERFORM ANY SERVICING OTHER THAN THAT CONTAINED IN T
15. HE INSTAL LATION AND TROUBLESHOOTING INSTRUCTIONS UNLESS YOU ARE QUALIFIED TO DO SO REFER ALL SERVICING TO QUALIFIED SERVICE PERSONNEL Caution CHANGES OR MODIFICATIONS NOT EXPRESSLY APPROVED BY THE PARTY RESPONSIBLE FOR COMPLIANCE COULD VOID THE USER S AUTHORITY TO OPERATE THE EQUIPMENT It is recommended that the customer install an AC surge arrestor in the AC outlet to which this device is connected This is to avoid damaging the equipment by local lightning strikes and other electrical surges Regulatory Information Rev 3 0 Jul 09 Only use twisted pair Ethernet cables with RJ 45 connectors that conform to FCC standards in the Ethernet ports Do not plug a telephone cable RJ 11 into any Ethernet RJ 45 port on your device Installation of this product must be in accordance with national wiring codes To clean wipe this device with a clean dry cloth Never use cleaning fluid or similar chemicals Do not spray cleaners directly on the unit or use forced air to remove dust Do not use attachments not recommended by the device manufacturer To avoid injury from falling equipment do not place this product on an unstable surface This device should be situated away from heat sources and products that produce heat All safety and operating instructions should be retained for future reference Do not use onboard aircraft or in hazardous locations such as gas stations or explosive environments Not designed
16. M 2140847 Rev 3 0 Jul 09 Figure 3 9 Removing SIM Hardware Overview 19 AirLink Helix User Guide 20 2140847 4 USB Connection A single USB modem can be connected to Helix RT USB modems Compass 598 Sprint and Compass 895 AT amp T are supported Only one cellular device that is either the Helix RT or the USB modem operates at a given time When a USB modem is connected to the Helix RT it assumes all the functions of the internal radio module to provide WWAN connectivity Once the the USB modem is removed the internal radio module of Helix RT restarts Figure 4 1 USB modems Compass 895 and Compass 598 When a USB modem is connected to the Helix RT it performs with the other all the features as if it were the the Helix RT WAN failover APN configuration and similar features now operate with the USB modem Multiple failover options include USB modem in WAN failover feature so that the software can automatically toggle between WAN port Ethernet connection Embedded modem USB modem Note Only one external USB modem can be plugged in at a time Rev 3 0 Jul 09 21 AirLink Helix User Guide USB Modem connection Instructions to connect your USB modem to the Helix RT are as follows 1 Unplug the Helix RT 2 Plug in the USB modem You can also use the extender cable provided 3 Plug in the Helix RT Note The USB modem needs to be inserted when the Helix is turned off in ord
17. VPN client VPN 2 Disabled Enabled Connected The status of the GRE client Security The security section provides an overview of the security settings on the Helix Status WAN Cellular LAILWIFi VPN Security Services Admin Last updated time 06 11 2009 17 54 18 Apply Refresh Cancel home DMZ Disabled WAN Cellular Port Forwarding Disabled LANMFi Port Filtering Outbound Not Used VPN Security Services About Figure 5 5 ACEmanager Status Security Command Description DMZ Disabled or Enabled Indicates whether a DMZ is in use Port Forwarding Shows the status of any port forwarding settings 0 is OFF 1 is ON Port Filtering Outbound Status WAIN Cellular Enabled or disabled Show status of outbound port filtering Services This section shows the ACEnet status LAN WiFi VPN Security Services Admin Last updated time 6 25 2009 15 21 01 Home LANWiFi VPN Rev 3 0 Jul 09 WAN Cellular Security ACEnet Not Configured Figure 5 6 ACEmanager Status Services Refresh Cancel 29 AirLink Helix User Guide ACEnet ACEnet status If an ACEnet account has been setup the status will change from Not Configured to Configured About The About section of the Status group provides basic infor mation about the cellular modem Status WAll Cellular LAN WiFi VPN Security Services Admin Last updated time 06 11 2009 1
18. can customize the network name and other Wi Fi configu ration options using the LAN Wi Fi page in the ACEmanager For more information see the Using the ACEmanager chapter Note If you don t change the default security settings in the ACEmanager for the AirLink Helix the AirLink Helix is accessible to any Wi Fi device For information about Wi Fi security see the Security Page section in the Using ACEmanager chapter The AirLink Helix Wi Fi network is based on the 802 11b g By default you can also use computers equipped with 802 11b Wi Fi hardware because 802 11g is backwards compatible with 802 11b If you have trouble connecting automatically to the AirLink Helix using Wi Fi try the following Make sure the helix network name is selected in the list of available networks with your computer s Wi Fi connection software Turn your computer s Wi Fi connection off and then on again Restart your computer e Check to see that your computer s network configuration is consistent with the configuration of the AirLink Helix The default AirLink Helix configuration requires your computer to use a DHCP connection For Windows XP users check to see that you have Service Pack 2 or higher installed To determine if you have Service Pack 2 installed open the Control Panel and then open the System application 2140847 Rev 3 0 Jul 09 Connecting a Computer to the AirLink Helix Change the Wi Fi channe
19. e 27 AirLink Helix User Guide Status WAIN Cellular LAN WiFi VPN Security Services Admin Last updated time 06 11 2009 17 47 40 Apply Refresh Cancel Dome 2222222222 Ethernet Port 1 192 168 2 1 24 WAll Cellular Ethernet Port 2 192 158 21 24 LAM Security Encryption type Open NES WiFi Mode Mixed VPH Connected Clients 1 Security _ IPMAC Services IP Address MAC Address About 192 168 2 78 00 90 96 ad cb 11 Figure 5 3 ACEmanager Status LAN WiFi Command Description Ethernet Port 1 Address status of the LAN port Ethernet Port 2 Address status of the WAN LAN port Security Encryption Options are Open WEP or WPA Shows the Wi Fi encryption type type WiFi Mode The type of Wi Fi network If the Helix is configured exclusively as an 802 11g network this will show Mixed or G Only Connected Clients Number of connected clients VPN The VPN section gives an overview of the VPN settings and indicates whether a VPN connection has been made Status WAll Cellular LAN WiFi VPN Security Services Admin Last updated time 6 25 2009 15 25 45 Refresh Cancel Berne VPN 1 Status Disabled WAN Cellular VPN 2 Status Disabled LAN WiFi Security Services About Figure 5 4 ACEmanager Status VPN 28 2140847 Configuring AirLink Helix VPN 1 Description Disabled Enabled Connected The status of the IPSec
20. e AirLink Helix Before connecting multiple devices to the AirLink Helix for the first time itis a good idea to connect one computer first and verify that the Product Name is successfully connected to the Internet You may need to use AirLink Helix ACEmanager to verify that the Helix device is properly configured See the Configuring AirLink Helix chapter for more information USB port Serial Port LAN nn WAN Power Ethernet ernet USB Port Figure 2 1 Helix Ports on the backplate Connecting Through Ethernet To connect to the AirLink Helix using Ethernet simply plug one end of an Ethernet cable into your computer and plug the other end into either of the Ethernet ports on the AirLink Helix There are two Ethernet ports on the Helix In most configura tions both can be used for LAN connections In WAN failover mode one is used for a WAN port to connect to another Internet service like a DSL or cable modem AirLink Helix User Guide 10 Make sure your computer is setup for DHCP addressing To setup the AirLink Helix for static IP addressing refer to the LAN Page section in Using the ACEmanager Connecting Through Wi Fi Wi Fi is available as an option on some versions of the Helix RT To connect wirelessly to the AirLink Helix using a Wi Fi equipped computer simply select the network name helix using the Wi Fi connection software provided with your operating system or Wi Fi network interface You
21. e receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help The device that accompanies this software can radiate radio frequency energy If not used in accordance with the instruc tions given in the User Guide the device may cause harmful interference with other communications devices for example radios televisions phones etc Any changes or modifications not expressly approved by Sierra Wireless could void the user s authority to operate this device Sierra Wireless America 39677 Eureka Drive Newark CA USA 94560 510 624 4900 The FCC ids are e MC5727 id is N7N MC5725 e MC8790 id is N7NMC8790 e WLM54G Wi Fi PCI card id MK8CPX 05 WLM54G Certain components of the software included with the Helix RT are subject to the GNU General Public License GPL the Lesser GNU General Public License LGPL or other open source or free software licenses Open Source Software Some of the Open Source license is owned by third parties Each item of Open Source Software is licensed under the terms of the end user license that accompanies such Open Source Software Nothing in this document limits your rights under or grants you rights that supersede the terms and conditions of any applicable Open Source License In pa
22. e time or clients will not be able to connect via Wi Fi The secondary server is optional and used when the primary server is not available 38 2140847 Configuring AirLink Helix Command Description Secondary Radius This is the port number of your enterprise RADIUS server The secondary Server Port port is used when the primary is unavailable Primary or Secondary This is the shared secret key used to secure communications with the Radius Server Secret RADIUS server Global DNS Global DNS allows you to override the default DNS settings of the cellular modem This is used when custom cellular network settings such as DataLink or custom APNs are used on the cellular modem Some carriers will block this setting Check with your cellular carrier for more information Status WAN Cellular A VPN Security Services Admin Last updated time 06 12 2009 15 30 40 Apply Refresh Cancel Addressing Primary DNS 208 67 222 222 WiFi Secondary DNS 208 67 220 220 Alternate Primary DNS Alternate Secondary DNS Figure 5 16 ACEmanager LAN WiFi Global DNS Command Description Primary DNS Primary Global DNS Address Secondary DNS Secondary Global DNS Address DNS Override Disabled or Enabled By default this is set to Disabled Alternate Primary Alternate primary DNS address This is optional If the primary DNS is DNS unavailable this DNS address
23. entication Algorithm MDS vw IKE Key Group DH1 v IKE SA Life Time 86400 Perfect Forward Secrecy No wj IPSec Encrytion Algorithm DES wj IPSec Authentication Algorithm MDS vw IPSec Key Group None M IPSec SA Life Time 86400 Figure 5 20 ACEmanager VPN1 IPSec Tunnel 2140847 Command VPN 1 Type Configuring AirLink Helix Description Tunnel Disabled or IPsec tunnel Use this option to enable or disable the VPN tunnel If custom settings are used they will be saved and the tunnel can be disabled and reenabled without needing to reenter any of the settings The IPsec VPN employs the IKE Internet Key Exchange protocol to set up a SecurityAssociation SA between the Helix and a Cisco or Cisco compatible enterprise VPN server IPSec consists of two phases to setup an SA between peer VPNs Phase 1 creates a secure channel between the Helix VPN and the enterprise VPN thereby enabling IKE exchanges Phase 2 sets up the IPSec SA that is used to securely transmit enterprise data For a successful configuration all settings for the VPN tunnel must be identical between the Helix VPN and the enterprise VPN server VPN1 Status Disabled Not Connected or Connected This indicates the current status of the VPN connection Use this as part of troubleshooting a VPN connection SNTP Server Address The Simple Network Time Protocol Server SNTP ensures the clock on the Helix VPN is synched to standard time The defau
24. er ID Enter the user name needed the authenticate on your APN This is provided by your cellular operator Network Password This setting shows up on Helix boxes with GSM and CDMA technology Fill in the password that accompanies the custom connection information Keepalive IP Address The IP address that the Helix will ping to determine if there is internet connectivity By default this is set to a Sierra Wireless server but this can be changed lf the Helix is setup for WAN failover or any custom cellular settings ie Datalink or custom APN make sure this IP address is accessible Keepalive Ping Time This is the amount of time between keep alive pings in seconds This setting prevents the cellular modem from going into a low power or hibernation mode by regularly sending out ICMP pings By default this is configured to 3600 seconds or an hour If the ping fails the Helix will send an additional three pings to the specified address If those pings fail the Helix will restart the cellular connection automatically Rev 3 0 Jul 09 31 AirLink Helix User Guide ast updated time 05 27 2009 14 45 WAN Failover WAN Failover allows the Helix to intelligently manage two Internet connections switching from one to the other as needed After enabling this mode Helix will continually test the primary Internet connection If tests fail Helix will automatically switch to the secondary connection while conti
25. er for Helix to recognize the USB modem at startup 4 Enter http 192 168 2 1 9191 htm on your browser to connected to ACEmanager User ID admin Password 12345 Note USB radio supports all other Helix software features 5 In ACEmanager a By selecting the About tab you can view the Helix module information 22 2140847 Rev 3 0 Jul 09 Status WAN Cellular LAN WiFi VPN Security Services Last updated time 07 17 2009 16 40 46 Home WAN Cellular LAN WiFi VPN Security Services men NEN Radio Module Type Radio Firmware Version ALEOS Software Version Modem Hardware Configuration MSCI Version Admin USB Connection C598 p2505002 60752 Oct 22 2008 14 4 0 41 005 0F140000000700000000000000000000 6 Figure 4 2 ACEmanager Status About 6 Check the LED lights on the USB modem to check the status of the USB connection Information for the USB modem connection is available on the Status tab in ACEmanager GSM users can configure their APN on the WAN Cellular tab in ACEmanager 23 AirLink Helix User Guide 24 2140847 5 Configuring AirLink Helix ACEmanager Status e WAN Cellular e LAN WiFi Security e VPN Services Admin Rev 3 0 Jul 09 ACEmanager ACEmanager is the free utility used to manage and configure the AirLink Helix RT After powering on the Helix you can log on to ACEmanager by entering 192 168 2 1 in your browser The
26. ex key rather than generating one with a passphrase by selecting the Custom Key option from the drop down menu Make sure your hex key only includes 10 or 26 valid hex digits created through pairs of characters of 0 9 and or a f with each pair separated by a colon For example 80 3a c9 95 b8 WPA WPA2 Personal WPA WPA2 Personal is a higher level of encryption than WEP requiring a pre shared passphrase be known before being able to connect to a network Last updated time 06 12 2009 14 59 00 Addressing WiFi Global DNS Rev 3 0 Jul 09 Status WAN Cellular LANWIFi VPN Security Services Admin Expand All Apply Refresh Cancel EI WIFI Configuration Enable Wireless Access Point WIFION SSID Network Name helix Hide SSID Display v Wireless Mode Mixed v Wifi Channel 12412GHz vw Security Encryption type WPAWPA2 Personal Wifi Encryption TKIP WPA Passphrase HelixwPAPassphrase Figure 5 14 ACEmanager WiFi WPA WPA2 Personal 37 AirLink Helix User Guide Command WiFi Encryption TKIP or AES Defines what encryption scheme to use under WPA Options are Temporal Key Integrity Protocol TKIP and Advanced Encryption Standard AES Description WPA Passphrase By default this is HelixWPAPassphrase You can change this to another phrase with alphanumeric characters and symbols when creating a passphrase
27. he instructions as below 1 Insert a SIM card into the SIM slot on the front of the Helix 2 Plug the AirLink Helix power adapter into the power connector on the back panel of the AirLink Helix Wait approximately two minutes to allow the AirLink Helix and modem to initialize 3 Connect your computer to the AirLink Helix with an ethernet cable Users can also connect with Wi Fi using helix as the default network name 4 Ifthe modem is not automatically detected and if you are a first time user you may need to configure your cellular modem through the WAN page in the ACEmanager with your web browser at 192 168 2 1 The username is admin and default password is 12345 For more details on config 2140847 Rev 3 0 Jul 09 Introduction uring the AirLink Helix refer to the chapter titled Using the ACEmanager Have more questions Look through this manual for more information or contact Sierra Wireless support at http www sierrawireless com support AirLink Helix User Guide 8 2140847 2 Connecting a Computer to the AirLink Helix Connecting Through Ethernet Connecting Through Wi Fi Where to Find More Help Rev 3 0 Jul 09 Any laptop desktop handheld printer or other computing device that supports Ethernet or optional Wi Fi can connect to the AirLink Helix If your computer supports these common network interfaces you don t need to install any additional software to connect to th
28. igure 5 10 ACEmanager WAN Cellular IP Passthrough LAN WiFi Addressing This section indicates the status and allows you to change the IP settings of the local network Changing settings in this area will most likely require you to reconnect to ACEmanager after saving any changes Status WAll Cellular LANWiFi VPN Security Services Admin Last updated time 06 12 2009 14 53 56 Apply Refresh Cancel Modem IP 192 168 2 1 Subnet Mask 255 255 255 0 Server Mode Enabled v Starting IP 192 168 2 2 Ending IP 192 168 2 254 Lease Timer Secc 3600 Figure 5 11 ACEmanager LAN WiFi Addressing Command Modem IP IP address of the Helix By default this is set to 192 168 2 1 Changing this will affect the start and end IP address Changing this will also require a reconnection to ACEmanager and physical reconnection of the LAN Ethernet Description this will Helix Subnet mask The subnet mask indicates how large the IP address pool will be Changing The default is 255 255 255 0 and means that 254 clients can connect to the limit or expand the number of clients that can connect to the Helix 34 2140847 Configuring AirLink Helix Command Description Server Mode Enabled or Disabled By default the Helix has aDHCP server that is enabled Disabling the server will require all connected clients to have static IP addressing Starting IP DHCP pool
29. imity of the human body Antenna installation should provide for at least a 20 cm separation from the operator Rev 3 0 Jul 09 Hardware Overview blink differently depending on the installed cellular module Cellular Antennas The AirLink Helix requires two cellular antennas as shown in Figure 3 2 Depending on your Helix kit antennas may or may not be included The Helix will work with most dual band cellular antennas with SMA connectors Connect antennas directly to the connectors found on the sides of the Helix Note When using a cable to an antenna placed away from the Helix minimize the length of your cable All gain from a more advantageous antenna placement can be lost with a long cable to the device Each external antenna used with an extension cable should be located 20cm apart from any other antenna Figure 3 2 Cellular Antennas Note Use all four antennas for diversity Using only one cell antenna or one Wi Fi antenna can cause degraded performance The optimal placement of the cellular antenna is upright 15 AirLink Helix User Guide 16 Wi Fi Antennas The antennas on the back of the Helix are for transmitting and receiving Wi Fi signals Connect antennas directly to the connectors found at the back of the Helix Note Optimal antenna performance can be achieved by orienting the WiFi antennas horizontally Wi Fi Antennas Figure 3 3 Wi Fi Connection Reset Button The reset but
30. l VPN Status Disabled Connected or Not Connected Indicates the status of the GRE tunnel on the Helix box VPN Gateway Address The IP address of the device that this client connects to This IP address must be open to connections from the Helix Box Remote IP Add mask The default configuration is 0 0 0 0 0 which will direct all traffic over the GRE tunnel GRE TTL Status Last updated time 06 12 2009 15 55 19 WAN Cellular GRE time to live TTL value is the upper bound on the time that a GRE packet can exist in a network In practice the TTL field is reduced by one on every router hop This number is in router hops not in seconds Services The services sections allows configuration of external services that extend the functionality of the Helix ACEnet ACEnet is a remote management service that can be used to remotely configure and view the status of Helix boxes and other ALEOS compatible devices For more information about this service go to http www sierrawireless com Product airlink acenet aspx LAN WiFi VPN Security Services Admin Apply Refresh Cancel ACEnet Dynamic DNS ACEnet Management Disabled v Server URL Device Initiated Interval Minutes Account Name i Status Figure 5 23 ACEmanager Services Dynamic DNS ACEnet Management Enabled or Disabled Service URL ACEnet URL Rev 3 0 Jul 09 45 AirLink Helix User Guide
31. l in the AirLink Helix ACEmanager You may be encountering interference on a certain channel Try turning off WEP or WPA encryption in the ACEmanager If you can connect when encryption is turned off you may be entering incorrect WPA or WEP login information into your computer or device Where to Find More Help The Ethernet Wi Fi and TCP IP network interfaces used by the AirLink Helix comply with industry standards Connection issues may be related to the proper use of these standards and not the AirLink Helix itself For additional help connecting your computer or device to the AirLink Helix please refer to the networking instructions provided by your computer s operating system Please contact Sierra Wireless support for further Helix RT related queries 11 AirLink Helix User Guide 12 2140847 3 Hardware Overview Physical Interfaces peek On the AirLink Physical Interfaces elix e Status Lights Cellular Antennas Wi Fi Antennas Reset Button Power Connector i SIM Slot 802 11b g Wi Fi optional The AirLink Helix has the following physical interfaces and connection methods Two cellular SMA antenna connectors Two Wi Fi SMA antenna connectors optional e 2 host USB ports 2 Ethernet ports e serial port Note Software currently does not support USB services Do not plug unsupported devices into the USB ports Note An ALEOS update support Note Serial connection is f
32. lt NTP server is pool ntp org You can specify anypreferred NTP server Both the VPN server and client must use the same SNTP address VPN Gateway Address The IP address of the server that this client connects to This IP address must be open to connections from the Helix Box Remote Subnet IP Addr Mask The default configuration is 0 0 0 0 0 which will direct all traffic over the GRE tunnel Pre shared Key 1 Pre shared Key PSK used to initiate the VPN tunnel My Identity If these fields are left blank My Identity will default to the WAN IP address assigned by the carrier and Peer Identity will default to the VPN Server IP For a fully qualified domain name FQDN these values should be preceded by an character www domain com For user FQDN these values should include a username user domain com Peer Identity Required in some configurations to identify the client or peer side of a VPN connection This defaults to the VPN server IP address Negotiation Mode Main Mode or Aggressive To operate the onboard VPN under Aggressive mode enable this configuration By default the Helix operates under Main Mode Aggressive mode offers increased performance at the expense of security IKE Encryption Algorithm DES 3DES or AES Determines the type and length of encryption key used to encrypt decrypt ESP Encapsulating Security Payload packets 3DES supports 168 bit encryption AES Advanced
33. manufactured or intended for machinery medical or industrial applications or for any other application may be hazardous Do not move or touch the antennas while the device is on Device should be located at least 20 centimeters 8 inches away from any human body in order to meet FCC exposure limits Do not operate while driving This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 This device must accept any interference received including interference that may cause undesired operation This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential instal lation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that inter Open Source Rev 3 0 Jul 09 ference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures e Reorient or relocate th
34. me rad haw gd aan cc a ea ne aga 17 A M M P 17 Remove the SIM 224232 9xEXCEER ERE RREQDERESUERPRTUERRCDET ee Had 18 USB CONMECI N een 21 USB Modem connection 22 Rev 3 0 Jul 09 1 Configuring AirLink Helix 1 0u 0 000 00000 una a a anna ss 25 ACEmanager ere ans deba edet wee dr Some waked 25 OR a aaa ee 25 HOME praia lara ete inertie 25 WAN Celular sera una ern 26 LANAWIFI tar aaa a an da cia Eee EC 21 VPN grads rmm 28 SeCUlly aussuchen AE KG reis ia aci n E 29 II PM reed 29 POGUE 3 ps qb 3 i ci ee dide ucc do ae o do men qoe Doo eed lo Ro d 30 WAN Cellular cased serie see ICE MAR eee Ae anaes 30 WAN Failover Ed bd ae RR RE east 32 BU o a dau Es Re E Ida MEM Des act qd mE 33 How it works nr 33 IP PassthrouU hs sudo 9x 0244 ER RUE DEA dE GR ARR ben 33 LAN NIE s s edo ae har ae o kn fr Lx Re ae ns 34 Addressing u su an na tn 34 WIFI eee e eerie eet Teer eee eT TT ee ee eee ee eee SIERT 35 shared WEP 15222 esed ed eisernen 36 WPA WPA2 Personal caia Ea in 37 WPA ER ps a a Ba wann 38 Global DNS 5x22 adakR RE encore era Serra a ea 39 SECUN MERERI T TT a TT 40 Port Forwarding and DMZ 52x 3 na RC RC e CERRO CLE 40 Port Filtering Outbound 444 44 yas reor terr herr rs 41 MAC Filt ring 13 mex ua raten ORA X RR HER AR Ra 41 Ug TETTE 41 A ee REPRE rc co qux eee 42 VPN EU x iius sud o o ab Y xoc Eoo e dodo o den a at 44 VoU O raed a a oe eh ard aide wee Oe ie
35. mp Physical Compact rugged case Dimensions 6 25 x1 3875 x7 0625 case not including antenna Weight 2 25 pounds Operating temperature 0 C to 50 C Storage Temperature 10C to 80C 50 2140847 mn SIERRA WIRELESS HEART OF THE WIRELESS MACHINES
36. ng and streaming video that may not work well with a NAT router DVZ host is unavailable if IP passthrough is enabled DMZ Enabled OFF or ON Enables or disables the DMZ on the Helix The Helix allows a single client to connect to the Internet through a demilitarized zone DMZ Note All security features are inactive if DMZ is enabled Note Because DMZ traffic does not pass through the NAT router the DMZ host is fully exposed to the Internet without the protection of the Helix firewall If the DMZ is used this can present a security risk to the DMZ host client 2140847 Configuring AirLink Helix Port Filtering Outbound Status WAll Cellular LAN WiFi VPN Security Services Admin Last updated time 06 12 2009 15 53 19 Apply Refresh Cancel Port Forwarding Outbound Port Filtering Mode Not Used v Filtered Ports MAC Filtering Start Port End Port Figure 5 18 ACEmanager Security Port Filtering outbound Port Filtering Independent of the IP filtering this mode can be enabled to block ports Outbound specified When enabled all ports not matching the rule will be blocked depending on the mode MAC Filtering Status WAN Cellular LANWiFi VPN Security Services Admin Last updated time 06 12 2009 15 54 12 Apply Refresh Cancel Port Forwarding MAC Filtering Disabled v one MAC Address allowed List MAC Filtering MAC Address re
37. nuing to test the primary connection and switch back to the primary connection when connectivity is returned Status WAN Cellular LANWIFI VPN Security Services Admin Expand Al Apply Refresh Cancel LI WAN Mode WAWCellular backhaul mode v Network Credentisis Custom w WAN Failover Ethernet WAN IP P Address P Netmask Gateway P DNS 1 Primary Interface Ethernet Y Primary Route P 216 92 96 182 interval Secs Network Credentials GSM Keep Alive Figure 5 9 ACEmanager WAN Cellular WAN Failover Command Ethernet WAN IP Description Static or DHCP If DHCP is selected no other IP related information needs to be entered If Static is selected enter the IP information about the secondary Internet connection IP Address If Static mode is selected this is the IP address of the Helix Box on the secondary network IP Netmask If Static mode is selected this is the netmask of the Helix Box in WAN Failover primary or secondary Gateway IP If Static mode is selected this is the gateway IP address of the that the Helix Box DNS 1 If Static mode is selected this is the primary DNS server that the Helix connects on the secondary network DNS 2 If Static mode is selected this is the secondary DNS server that the Helix connects on the secondary network Primary Interface Cellular or Ethernet This determines the cellular module or the Ethernet connection to be the
38. or modem programming purposes only USB is expected by September 2009 Turning On the AirLink Helix The AirLink Helix powers on as soon as it is plugged in to the power outlet The AirLink Helix power port is located on the back of the device To turn the device off simply unplug the power adapter For use in a vehicle a vehicle power adapter is available as an optional accessory Rev 3 0 Jul 09 13 AirLink Helix User Guide 14 Status Lights The AirLink Helix has three lights on the front faceplate that indicate status and help initial troubleshooting The green LED on the left is lit whenever Helix is plugged in The middle green LED indicates cellular signal strength The right green LED indicates WWAN activity There are three modes Signal Strength Status Figure 3 1 Status LEDs LEDs The LED patterns in the Helix are as follows Left 3G e Off 3G connection is not active e On 3G connection is active Middle Signal Strength RSSI e On Solid Equal to or stronger than 69dBm excellent signal strength e Fast Blink 70 to 79dBm Normal Blink 80 to 89dBm e Slow Blink 90 to 99dBm Off Equal to or weaker than 100dBm no signal strength Right WWAN Status e Off No cell module detected Blinking cellular module detected communicating with the Helix CPU This LED is hardware dependent and may 2140847 Note This device is not intended for use within close prox
39. pings to that IP address If these pings also fail Helix will switch to using the secondary Internet connection While the secondary Internet connection is being used Helix will continue to ping the Primary Route IP to determine when the connection is restored When the connection is restored Helix will switch back to the primary connection IP Passthrough IP Passthrough mode will pass the cellular WAN IP address directly through to any client connected to WWAN LAN port on the Helix This may be necessary for some VPN configura tions or other enterprise applications The Helix can also continue to provide LAN IP addresses to clients connected through LAN port or Wi Fi with supported devices However WAN Failover DMZ and Port Forwarding are not available and ACEmanager cannot be reached through port 1 33 AirLink Helix User Guide Any client connected to WWAN LAN port must be setup with a static IP address and a gateway address that matches the WWANIP address and gateway address IP passthrough works best when the cellular module is setup by the cellular carrier to receive a public static IP address on the carrier network Status WANiCellular LAN WiFi VPN Security Services Admin Last updated time 05 27 2009 14 45 02 Expand All Apply Refresh Cancel wawcetulr 00000 IWAN Mode backhaul mode IP Passthrough Network Credentials Custom Network Credentials GSM x Keep Alive SER EISEN F
40. primary connection 32 2140847 Command Primary Route IP Configuring AirLink Helix Description This is the IP address that Helix continually tests connectivity with Helix will ping this address through the primary WAN connection to ensure the primary connection is working If a ping to this address fails Helix will rollover all WAN connectivity to the secondary WAN connection until it can resume connectivity to this address through the primary connection Interval Secs Rev 3 0 Jul 09 Determines how often the Primary Route IP is tested Setup 1 Select WAN Failover from the backhaul mode drop down menu 2 Determine whether the Ethernet WAN network is DHCP or Static IP based and fill in information accordingly 3 Select the primary interface This should be selected as the most reliable connection and will be the one that the Helix primarily uses and tests The secondary connection will be the connection that the Helix keeps active and switches to if the primary connection fails Default primary interface is Ethernet 4 Ifneeded change the Primary Route IP and interval 5 Click on Apply and reboot the box when prompted 6 Plug in the Ethernet cable for the WAN connection in to WAN LAN port of the Helix How it works When enabled Helix will ping the Primary Route IP at the interval you have configured If one of these pings fails Helix will immediately send another short series of
41. r carrier or reseller if you have data account related queries Note Please also read the terms and conditions of your cellular service to ensure that your rate plan is appropriate for use with the AirLink Helix At least one computer that supports Ethernet or Wi Fi networking A web browser such as Internet Explorer 6 or later for Windows Firefox 1 5 or Safari AirLink Helix User Guide Getting Going the quick version The AirLink Helix is designed to be simple to use No additional software is required for most users The remainder of the User Guide provides complete instructions for using the device CDMA If you have a CDMA device please follow the instructions as below 1 Plug the AirLink Helix power adapter into the power connector on the back panel of the AirLink Helix Wait approximately two minutes to allow the AirLink Helix and modem to initialize 2 Connect your computer to the AirLink Helix with an ethernet cable Users can also connect with Wi Fi using helix as the default network name 3 Ifthe modem is not automatically detected and if you are a first time user you may need to configure your cellular modem through the WAN page in the ACEmanager with your web browser at 192 168 2 1 The username is admin and default password is 12345 For more details on config uring the AirLink Helix refer to the chapter titled Using the ACEmanager GSM If you have a GSM device please follow t
42. rticular nothing in this document restricts your right to copy modify and distribute that Open Source Software subject to the terms of Open Source License As required by the terms of the GPL and LGPL or any other applicable Open Source License Sierra Wireless makes the Open Source Software available to the public in source code form on a CD To receive a CD please contact customer support Patents Copyright Rev 3 0 Jul 09 The following Open Source Software is included with the Helix RT GPL and LGPL Software The Helix RT is provided with the following software licensed under the GPL and LGPL A copy of the GNU GPL license is available from the Free Software Foundation http www gnu org BusyBox from Erik Andersen http www busybox net Host AP driver from Jouni Malinen http hostap epitest fi IPtables from Harald Welte and others http www netfilter org Linux operating system version 2 4 20 Openswan from Xelerance Corporation http www openswan org PPP from Paul Mackerras http www samba org ftp unpacked ppp README SPLASH from Willem de Bruijn http splash snap sourceforge net Updatedd from Philipp Benner http www philipp benner de updatedd Other Open Source Software The Helix RT is provided with the following software licensed under BSD licenses or other Open Source Licenses The software and license details are available from the referenced web site
43. s Internet Software Consortium DHCP Server http www isc org Net SNMP from the NET SNMP Project http www net snmp org OpenSSH from the OpenBSD Project http www openssh com thttpd from Jef Poskanzer http www acme com Portions of this product may be covered by some or all of the following US patents 5 515 013 5 629 960 5 845 216 5 847 553 5 878 234 5 890 057 5 929 815 6 169 884 6 191 741 6 199 168 6 339 405 6 359 591 6 400 336 6 516 204 6 561 851 6 643 501 6 653 979 6 697 030 6 785 830 6 845 249 6 847 830 6 876 697 6 879 585 6 886 049 6 968 171 6 985 757 7 023 878 7 053 843 7 106 569 7 145 267 7 200 512 D442170 D459 303 and other patents pending 2004 2009 Sierra Wireless America Inc Trademarks AirLink and AceWare are trademarks of Sierra Wireless Helix RT is a trademark os Sierra Wireless Windows is a registered trademark of Microsoft Corporation Other trademarks are the property of the respective owners Contact Information Support Desk Phone 1 877 231 1144 Hours 5 00 AM to 5 00 PM Pacific Time Monday to Friday except US Holidays E mail support sierrawireless com Sales Desk Phone 1 510 624 4200 1 604 232 1488 Hours 8 00 AM to 5 00 PM Pacific Time E mail MobileandM2Msales sierrawireless com Post Sierra Wireless America 39677 Eureka Drive Newark CA USA 94560 Sierra Wireless 13811 Wireless Wa
44. start IP address Ending IP The Ending IP for the Ethernet Interface Lease Timer Secc DHCP Lease Time WIFI On supported models the Helix has a Wi Fi radio for wireless network connections Note You can lock yourself out of the Helix when you first turn on WEP or WPA You must then enter the right key in the format required by your computer or device before you can connect to the Helix with Wi Fi WEP and WPA do not affect Ethernet connections so you can always connect to the Helix through an Ethernet port regardless of your encryption settings Status WAN Cellular LANWiFi VPN Security Services Admin Last updated time 06 12 2009 14 59 00 Expand All Apply Refresh Cancel Addressing E iwi Configuration wr Enable Wireless Access Point WIFION v Global DNS SSID Network Name helix Hide SSID Display vw Wireless Mode Mixed w Wifi Channel 12412GHz vw Security Encryption type Open v Figure 5 12 ACEmanager LAN WiFi WIFI Command Description Enable Wireless WI Fi on or Wi fi off Allows you to disable or enable the Wi Fi access point If Access Point you are using the Helix in an environment wheres security or safety require that you disable Wi Fi you can turn Wi Fi off here The WAN and Ethernet LAN connections will remain active SSID Network Name The default network name is helix Hide SSID Hide or Show This determines whether the SSID will be broadcasted by the Helix
45. t username and password Debug Debug mode allows direct control over the cellular module for additional control technical support and custom settings Enabling this mode will disable the onboard cellular module control 47 AirLink Helix User Guide Status WAll Cellular LANWiFi VPN Security Services Admin Last updated time 06 12 2009 15 58 30 Apply Refresh Cancel E COM word Debug Enabled Disabled u l pu E Debug Output TCP M Ls v EE cos r i BAUD Rate 38400 TCP Port 23000 Figure 5 27 ACEmanager Admin Debug Command Description Debug Enabled Disabled or Enabled Disabled is the default state Enabling this option will pass control of the cellular module to an external device for control 0 gt Disabled 1 gt Enabled Debug Output TCP or DB9 This option selects the output of the debug control TCP will send the output over TCP and DB9 will send the output over the serial port 0 gt TCP 1 gt DB9 BAUD Rate Speed of the port TCP Port The port to connect to is specified when using the TCP debug mode Here is how to configure the Helix for debug mode using AT commands 1 Set Debug Enabled option to Enabled 2 Set Debug Output to DB9 for output to the DB9 on the device The TCP option can be used if a virtual serial port is setup on the host device 3 Set Dev Port to the radio module port that pass through mode to AT Set the BAUD Rate to 115200
46. ton is a small hole located in on the front faceplate of the Helix This button provides a quick way to turn the Helix power off and back on Simply insert a paper clip or similar object into the hole to press the reset button In some cases the Airlink Helix may need to be reset to defaults This will reset any custom settings and connection information If the ACEmanager password has been forgotten or is unable to be accessed the Airlink Helix can be reset during the bootup process by pressing the reset button for just 10 seconds 2140847 Hardware Overview Reset Button Figure 3 4 Helix Reset Button Power Connector Helix comes with a switching adapter The power connector is located on the back plate of the Helix Power adapter Figure 3 5 Power Connector SIM Slot Note This section applies to Helix with GSM technology only To insert the SIM in to the SIM slot follow the instructions as below 1 Carefully remove the SIM card from the card you received Figure 3 6 SIM card 2 Gently press the SIM to click it into place Rev 3 0 Jul 09 17 AirLink Helix User Guide 18 Figure 3 7 Insert SIM 3 When the SIM card is fully inserted it will lock into the holder with a click sound Figure 3 8 Pushing SIM in to the SIM slot Remove the SIM Firmly press on the SIM and it will unlock from the holder with a click sound Once the SIM ejects use a pair of tweezers to pull out the SI
47. ul mode cellular failover passthrough Current WAN IP This can be the IP address of the cellular moden if it is being used or the IP address address of WAN port if WAN Failover has switched to the Ethernet connection Network State Not Connected or Connected Current state of the cellular radio RSSI Signal strength of the cellular signal The lower the number the better the signal strength The exact numbers vary between cellular carriers However 40dBm means Helix has a significantly stronger coverage area than when it is 70dBm Network Operator Indicates the network the modem is currently on Network Service Type The type of service being used by the modem for example EV DO Rev A or HSPA ALEOS Software Software version of the ALEOS build Version Channel The current active CDMA GSM channel number Modem Name Name of the modem WAN Cellular WAN cellular status indicates specific information about the cellular connection including IP address and how much data has been used 26 2140847 status WAN Cellular LAIL WiFi VPN Security Services Admin Last updated time 06 11 2009 17 45 01 Configuring AirLink Helix Refresh Cancel Home WAIL Cellular _ LANI WiFi Security Services About Cellular IP Address Ethernet IP Address WAN Link ESN EIDAMEI Keepalive IP Address Keepalive Ping Time Gateway DNS Server 1 Not Available 352974020313334 216 92 96 182
48. will be used Alternate Secondary Alternate secondary DNS address This is optional If the secondary DNS is DNS unavailable this DNS address will be used Rev 3 0 Jul 09 39 AirLink Helix User Guide 40 Status WAll Cellular LANMAFi VPN Security Services Admin Security Most security features can be configured on the Security page It is recommended you change the default password for ACEmanager Port Forwarding and DMZ To add a rule fill in the outside port ie 8080 the protocol ICP or UDP the host or internal IP and the private port the port on the inside of the network Some cellular carriers restrict port access Check with your cellular carrier if you have problems setting this up To add more rules click on the Add More button To remove a rule click on the X button that is next to the rule Last updated time 06 12 2009 15 52 00 Apply Refresh Cancel Command Port Forwarding Enabed Port Filtering Outbound DMZ Enabled OFF v DMZ IP Port Forwarding Enabled Disabled v Port Forwarding Public Port Protocol Host IP Private Port Figure 5 17 ACEmanager Security Port Forwarding Description Disabled or Enabled Disables or Enables port forwarding rules DMZ IP IP address of a DMZ The Helix allows a single client to connect to the Internet through a demilitarized zone DMZ The DMZ is particularly useful for certain services like VPN NetMeeti
49. ws eae ee 45 ACENG esposa plo paria she ebene dringen 45 Dynamic DNS cano ardt e dte a ORO RR 46 PANDY ac atacan acd o ab dea EO PT re EO P EE AE nn 46 B tU TP 41 Do ee rasgo gto ee dla e dicat aim berne eee eee 47 Rev 3 0 Jul 09 Contents Contents Technical Specifications ruuuuuuu0u00 nu Henn Ran 49 WAN Saar aaa 49 LAN ic Ss eh ann nn nen Mh ae eh A 49 ROMAN a senora a OCA RR a0 08 AR arena TE 49 Allmimistratiofi PS 49 HardWare METTI 50 Physical ousteuteveta RES E ER rone E EEEE CEE beheSeg ee tasee nes 50 Rev 3 0 Jul 09 AirLink Helix User Guide 4 2140847 1 Introduction What s Included with the AirLink Helix What Else Do You Need to Get Started Getting Going the Rev 3 0 Jul 09 quick version The AirLink Helix enables computers and other devices to connect quickly and easily to the Internet and remote enter prise networks using cellular data networks This User Guide provides basic instructions on how to configure and operate your AirLink Helix For additional support please visit www sierrawireless com support What s Included with the AirLink Helix e AirLink Helix RT kit AirLink Helix RT cellular router User Guide Outlet power adapter e Wi Fi optional depending on the kit Antennas optional depending on the kit What Else Do You Need to Get Started An active data account with your cellular provider is required Contact your cellula
50. y Richmond BC Canada V6V 3A4 Fax 1 510 624 4299 1 604 231 1109 Web www sierrawireless com Consult our website for up to date product descriptions documentation application notes firmware upgrades trouble shooting tips and press releases www sierrawireless com Revision Release Changes number date 1 x 2009 AirLink Helix documentation draft created 2 x 2009 AirLink Helix documentation revised 3 x 2009 USB Chapter added Rev 3 0 Jul 09 7 Contents Introduction au ua au au aaa a dd a a a a a a a a a anna 5 What s Included with the AirLink Helix 5 What Else Do You Need to Get Started 5 Getting Going the quick version 6 COMA 05254 8ec berths as ie perra RAPTAR UPEER DARRE vea 6 GSM M 6 Connecting a Computer to the AirLink Helix 9 Connecting Through Ethernet 00 cece eee nn nn 9 Connecting Through Wi Fi Guess rare aha RE 10 Where to Find More Help 11 Hardware Overview u sopa 0 0300 ceded sean needa ana ana ees 13 Physical Interfaces uus va aces oe ha a oa en ee ad Ro da 13 Turning On the AirLink Helix cc cece mnn 13 Status Lights ricerca rre 14 LEDS Sarria dara EC 14 Cellular Antenas aaa 15 WER A NIENNaE vic area ke ie aan ana Ahead 16 Reset Ballon s ako dod i RU CR OR Ia o aca Re CC CC aida 16 Power CONNECTOR s
Download Pdf Manuals
Related Search