AirLink Helix User Guide 2140847 Rev 3.
Preface Important Notice Due to the nature of wireless communications, transmission and reception of data can never be guaranteed. Data may be delayed, corrupted (i.e., have errors) or totally lost.
AirLink Helix User Guide All safety and operating instructions should be retained for future reference. Do not use onboard aircraft or in hazardous locations such as gas stations or explosive environments. Not designed, manufactured or intended for machinery, medical, or industrial applications or for any other application may be hazardous. Do not move or touch the antennas while the device is on.
Preface rights under, or grants you rights that supersede, the terms and conditions of any applicable Open Source License. In particular, nothing in this document restricts your right to copy, modify, and distribute that Open Source Software subject to the terms of Open Source License. As required by the terms of the GPL and LGPL or any other applicable Open Source License, Sierra Wireless makes the Open Source Software available to the public in source code form on a CD.
AirLink Helix User Guide Contact Information Support Desk: Phone: 1-877-231-1144 Hours: 5:00 AM to 5:00 PM Pacific Time, Monday to Friday, except US Holidays E-mail: support@sierrawireless.com Sales Desk: Phone: 1-510-624-4200 1-604-232-1488 Hours: 8:00 AM to 5:00 PM Pacific Time E-mail: MobileandM2Msales@sierrawireless.com Post: Sierra Wireless America 39677 Eureka Drive Newark, CA USA 94560 Sierra Wireless 13811 Wireless Way Richmond, BC Canada V6V 3A4 Fax: 1-510-624-4299 1-604-231-1109 Web: www.
Contents Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5 What’s Included with the AirLink Helix? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 What Else Do You Need to Get Started? . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Getting Going (the quick version). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 CDMA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Home . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19 WAN/Cellular . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20 LAN/WiFi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21 VPN . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Configuring Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Port Forwarding and DMZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Port Filtering - Outbound . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 MAC Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
AirLink Helix User Guide Regulatory Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Federal Communications Commission Notice (FCC United States) . . . . 53 Industry Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Antenna Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 RF Exposure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1 1: Introduction • What’s Included with the AirLink Helix? • What Else Do You Need to Get Started? • Getting Going (the quick version) The AirLink Helix enables computers and other devices to connect quickly and easily to the Internet and remote enterprise networks using cellular data networks. This User Guide provides basic instructions on how to configure and operate your AirLink Helix. For additional support please visit www.sierrawireless.com/support.
AirLink Helix User Guide Getting Going (the quick version) The AirLink Helix is designed to be simple to use. No additional software is required for most users. The remainder of the User Guide provides complete instructions for using the device. CDMA If you have a CDMA device, please follow the instructions as below: 1. Plug the AirLink Helix power adapter into the power connector on the back panel of the AirLink Helix. Wait approximately two minutes to allow the AirLink Helix and modem to initialize. 2.
2: Connecting a Computer to the AirLink 2 Helix • Connecting Through Ethernet • Connecting Through Wi-Fi • Where to Find More Help Any laptop, desktop, handheld, printer, or other computing device that supports Ethernet (or optional Wi-Fi) can connect to the AirLink Helix. If your computer supports these common network interfaces, you don’t need to install any additional software to connect to the AirLink Helix.
AirLink Helix User Guide Connecting Through Wi-Fi Wi-Fi is available as an option on some versions of the Helix RT. To connect wirelessly to the AirLink Helix using a Wi-Fi equipped computer, simply select the network name “helix” using the Wi-Fi connection software provided with your operating system or Wi-Fi network interface. You can customize the network name and other Wi-Fi configuration options using the LAN/Wi-Fi page in the ACEmanager. For more information, see the “Using the ACEmanager” chapter.
3 3: Hardware Overview • Physical Interfaces • Turning On the AirLink Helix • Status Lights • Cellular Antennas • Wi-Fi Antennas • Reset Button • Power Connector • SIM Slot Physical Interfaces The AirLink Helix has the following physical interfaces and connection methods: • Two cellular SMA antenna connectors • 802.11b/g Wi-Fi (optional) • Two Wi-Fi SMA antenna connectors (optional) • 2 host USB ports • 2 Ethernet ports • 1 serial port Note: Software currently does not support USB services.
AirLink Helix User Guide 3G Signal Strength WWAN Status Figure 3-1: Status LEDs LEDs The LED patterns in the Helix are as follows: (Left) – 3G • Off : 3G connection is not active • On : 3G connection is active (Middle) – Signal Strength (RSSI) • On Solid : Equal to or stronger than -69dBm (excellent signal strength) • Fast Blink : -70 to -79dBm • Normal Blink : -80 to -89dBm • Slow Blink : -90 to -99dBm • Off : Equal to or weaker than -100dBm (no signal strength) (Right) – WWAN Status • O
Hardware Overview Note: This device is not intended for use within close proximity of the human body. Antenna installation should provide for at least a 20 cm separation from the operator. The Helix will work with most dual band cellular antennas with SMA connectors. Connect antennas directly to the connectors found on the sides of the Helix. Note: When using a cable to an antenna placed away from the Helix, minimize the length of your cable.
AirLink Helix User Guide Wi-Fi Antennas The antennas on the back of the Helix are for transmitting and receiving Wi-Fi signals. Connect antennas directly to the connectors found at the back of the Helix. Note: Optimal antenna performance can be achieved by orienting the WiFi antennas horizontally. Wi-Fi Antennas Figure 3-3: Wi-Fi Connection Reset Button The reset button is a small hole located in on the front faceplate of the Helix.
Hardware Overview Power Connector Helix comes with a switching adapter. The power connector is located on the back plate of the Helix. Power adapter Figure 3-5: Power Connector SIM Slot Note: This section applies to Helix with GSM technology only. To insert the SIM in to the SIM slot, follow the instructions as below: 1. Carefully remove the SIM card from the card you received. Figure 3-6: SIM card 2. Gently press the SIM to click it into place. Figure 3-7: Insert SIM 3.
AirLink Helix User Guide Figure 3-8: Pushing SIM in to the SIM slot Remove the SIM Firmly press on the SIM and it will unlock from the holder with a click sound. Once the SIM ejects, use a pair of tweezers to pull out the SIM.
4 4: USB Connection A single USB modem can be connected to Helix RT. USB modems Compass 598 (Sprint) and Compass 895 (AT&T) are supported. Only one cellular device, that is either the Helix RT or the USB modem operates at a given time. When a USB modem is connected to the Helix RT, it assumes all the functions of the internal radio module to provide WWAN connectivity. Once the USB modem is removed the internal radio module of Helix RT restarts.
AirLink Helix User Guide USB Modem connection Instructions to connect your USB modem to the Helix RT are as follows. 1. Unplug the Helix RT. 2. Plug in the USB modem. You can also use the extender cable provided. 3. Plug in the Helix RT. Note: The USB modem needs to be inserted when the Helix is turned off, in order for Helix to recognize the USB modem at startup. 4. Enter http://192.168.2.1:9191.htm on your browser, to connected to ACEmanager.
USB Connection 6. Check the LED lights on the USB modem, to check the status of the USB connection. Information for the USB modem connection is available on the Status tab in ACEmanager. GSM users can configure their APN on the WAN/Cellular tab in ACEmanager. Rev 3.0D May.
AirLink Helix User Guide 18 2140847
5 5: Configuring AirLink Helix • ACEmanager • Status ACEmanager ACEmanager is the free utility used to manage and configure the AirLink Helix RT. After powering on the Helix, you can log on to ACEmanager by : • Entering http://192.168.2.1:9191/index.htm in your browser. The default login credentials are: • Login: admin • Password: 12345 To prevent others from changing the Helix settings, change the ACEmanager password. See the Security topic in the “Configuring Airlink Helix" for more information.
AirLink Helix User Guide Table 5-1: Status: Home Command Description Backhaul mode WAN backhaul mode : cellular, failover, passthrough. Phone Number This is the phone number that is programmed in to your device. Current WAN IP address This can be the IP address of the cellular modem, if it is being used or the IP address of WAN port if WAN Failover has switched to the Ethernet connection. Network State Not Connected or Connected. Current state of the cellular radio.
Configuring AirLink Helix Command Description Keepalive IP Address The IP address that WAN keepalive uses to test cellular connectivity. Keepalive Ping Time The amount of time between keepalive pings in minutes. 0 is off and 255 is max. Gateway Gateway IP address of the local network. DNS Server 1 First DNS IP addresses of cellular or Ethernet network. DNS Server 2 Second DNS IP addresses of cellular or Ethernet.
AirLink Helix User Guide Figure 5-3: ACEmanager: Status - LAN/WiFi Command Description Ethernet Port 1 Address / status of the LAN port. Ethernet Port 2 Address / status of the WAN / LAN port. Security Encryption type Options are Open, WEP, or WPA. Shows the Wi-Fi encryption type. WiFi Mode The type of Wi-Fi network. If the Helix is configured exclusively as an 802.11g network, this will show "Mixed" or "G-Only". Connected Clients Number of connected clients.
Configuring AirLink Helix Command Description VPN 1 Disabled, Enabled, Connected. The status of the IPSec VPN client. VPN 2 Disabled, Enabled, Connected. The status of the GRE client. Security The security section provides an overview of the security settings on the Helix. Figure 5-5: ACEmanager: Status - Security Command Description DMZ Disabled or Enabled. Indicates whether a DMZ is in use. Port Forwarding Shows the status of any port forwarding settings.
AirLink Helix User Guide Command Description ACEnet ACEnet status. If an ACEnet account has been setup, the status will change from "Not Configured" to "Configured". ACEmanager Status of ACEmanager access selected. Dynamic DNS Service Dynamic DNS Service that you have selected under Services tab. Full Domain Name Dynamic DNS full domain name configured. SNMP Community String Community String configured for SNMP.
6 6: Configuring WAN/Cellular • WAN/Cellular WAN/Cellular The WAN/Cellular section allows changes to the cellular connection and main operating mode of the Helix. Some settings may appear differently and are dependent on cellular carrier settings. The default mode is "Cellular". This uses the onboard cellular module as primary means of connection and enables all other onboard features. Custom connection settings can be included if they are supported by the cellular module.
AirLink Helix User Guide Command Description Set APN (GSM only) APN or Access Point Name is specific to GSM networks. Custom access points can be used to create VPN connections or to provide specific routing functionality. Contact your cellular carrier for more information about how these work. Network User ID Enter the user name needed the authenticate on your APN. This is provided by your cellular operator. Network Password This setting shows up on Helix boxes with GSM and CDMA technology.
Configuring WAN/Cellular Figure 6-2: ACEmanager: WAN/Cellular - WAN Failover Command Description Ethernet WAN IP Static or DHCP. If DHCP is selected, no other IP related information needs to be entered. If Static is selected enter the IP information about the secondary Internet connection. IP Address If Static mode is selected, this is the IP address of the Helix Box on the secondary network.
AirLink Helix User Guide switches to if the primary connection fails. Default primary interface is Ethernet. 4. If needed, change the Primary Route IP and interval. 5. Click on Apply and reboot the box when prompted. 6. Plug in the Ethernet cable for the WAN connection in to WAN/LAN port of the Helix. How it works When enabled, Helix will ping the Primary Route IP at the interval you have configured. If one of these pings fails, Helix will immediately send another short series of pings to that IP address.
7 7: Configuring LAN/WiFi • LAN/WiFi LAN/WiFi The LAN/WiFi section displays VLAN configuration parameters, in ACEmanager. VLAN stands for virtual LAN. VLANSs help structure the network growth of companies. A VLAN typically has a cluster of hosts that are together in a broadcast domain and not based on their physical location. A difference between VLAN and LAN is that a VLAN allows devices to be grouped together even when the devices are not located on the same network switch.
AirLink Helix User Guide Command Description Interface There is a Default interface (Bridged Ethernet and WiFi) and three Ethernet VLANs and WiFi WLAN interfaces respectively, in the interface column. VLAN ID Enter your VLAN IDs here. Ethernet Three virtual ethernet interfaces for three VLANs in addition to the default LAN is displayed on the ACEmanager screen. WiFi 2, WiFi 3 and WiFi 4 WiFi 2, 3, and 4 have to be configured independently.
Configuring LAN/WiFi Figure 7-2: ACEmanager: LAN/WiFi - WIFI Command Description Enable Wireless Access Point WI-Fi on or Wi-fi off. Allows you to disable or enable the Wi-Fi access point. If you are using the Helix in an environment where security or safety require that you disable Wi-Fi, you can turn Wi-Fi off here. The WAN and Ethernet LAN connections will remain active. SSID/Network Name The default network name is 'helix'. Hide SSID Hide or Show.
AirLink Helix User Guide Figure 7-3: ACEmanager: WIFI - Shared WEP Command Description Key Length 64 bit, 128 bit, Custom. WEP is available with shorter 64 bit keys or longer 128 bit keys. While 128 bit encryption provides a higher level of security, some computers and Wi-Fi clients only support 64 bit encryption. Use a key length that is compatible with all of the wireless clients on your network. WEP Passphrase The default passphrase is 'HelixWEP'.
Configuring LAN/WiFi Command Description WiFi Encryption TKIP or AES. Defines what encryption scheme to use under WPA. Options are Temporal Key Integrity Protocol (TKIP) and Advanced Encryption Standard (AES). WPA Passphrase By default this is 'HelixWPAPassphrase'. You can change this to another phrase with alphanumeric characters and symbols when creating a passphrase.
AirLink Helix User Guide WiFi 2 The WiFi interface can support up to 4 WiFi LANs (WLAN), each with a separate SSID, and separate encryption settings. Global settings apply to all WLANS. Each WLAN may be routed to the Internet under user control. Figure 7-6: ACEmanager: LAN/WiFi - WiFi 2 Global DNS Global DNS allows you to override the default DNS settings of the cellular modem. This is used when custom cellular network settings (such as DataLink or custom APNs) are used on the cellular modem.
Configuring LAN/WiFi Command Description Alternate Primary DNS Alternate primary DNS address. This is optional. If the primary DNS is unavailable, this DNS address will be used. Alternate Secondary DNS Alternate secondary DNS address. This is optional. If the secondary DNS is unavailable, this DNS address will be used. VRRP VRRP allows multiple routers to act as the default gateway router for a subnet which reduces the possibility of a single point of failure.
AirLink Helix User Guide 36 2140847
8 8: Configuring AirLink Helix • VPN VPN The Helix Box can act as a Virtual Private Network (VPN) client, providing enterprise VPN access to any device connected to the Helix RT even when a device has no VPN client capability on its own. The Helix supports up to two tunneling protocols, IPsec and GRE. Both can be used at the same time if configured properly. The Helix also supports split tunnels with one encrypted tunnel and one open tunnel. A sample server subnet for a split tunnel would be 172.16.1.
AirLink Helix User Guide Command Description VPN 1 Type Tunnel Disabled or IPsec tunnel. Use this option to enable or disable the VPN tunnel. If custom settings are used, they will be saved and the tunnel can be disabled and reenabled without needing to reenter any of the settings. The IPsec VPN employs the IKE (Internet Key Exchange) protocol to set up a SecurityAssociation (SA) between the Helix and a Cisco (or Cisco compatible) enterprise VPN server.
Configuring AirLink Helix Command Description Perfect Forward Secrecy Yes or No. Provides additional security through a DH shared secret value. When this feature is enabled, one key cannot be derived from another. This ensures previous and subsequent encryption keys are secure even if one key is compromised. IPSec Key Group DH1, DH2, or DH5. Determines how the Helix VPN creates an SA with the VPN server.
AirLink Helix User Guide Command Description Remote (IP Addmask) The default configuration is 0.0.0.0/0 which will direct all traffic over the GRE tunnel. GRE TTL GRE time to live (TTL) value is the upper bound on the time that a GRE packet can exist in a network. In practice, the TTL field is reduced by one on every router hop. This number is in router hops not in seconds.
9 9: Configuring Security • Security Security Most security features can be configured on the Security page. It is recommended you change the default password for ACEmanager. Port Forwarding and DMZ To add a rule, fill in the outside port (ie, 8080), the protocol (TCP or UDP), the host (or internal) IP, and the private port (the port on the inside of the network). Some cellular carriers restrict port access. Check with your cellular carrier if you have problems setting this up.
AirLink Helix User Guide Port Filtering - Outbound Figure 9-2: ACEmanager: Security - Port Filtering-outbound Command Port Filtering Outbound Description Independent of the IP filtering, this mode can be enabled to block ports specified. When enabled, all ports not matching the rule will be blocked depending on the mode.
10 10: Configuring Services • Services Services The services sections allows configuration of external services that extend the functionality of the Helix. ACEnet ACEnet is a remote management service that can be used to remotely configure and view the status of Helix boxes and other ALEOS compatible devices. For more information about this service, go to: http://www.sierrawireless.com/Product/airlink/acenet.
AirLink Helix User Guide ACEmanager Figure 10-2: ACEmanager: Services - ACEmanager Command Description Enable ACEmanager Enable ACEmanager on Tethered Host and Wifi or ALL (includes OTA). ACEmanager Port Port for accessing ACEmanager is 9191. Dynamic DNS Dynamic DNS allows a Helix Box WAN IP address to be published to a third-party service. Be aware of the Dynamic DNS abuse policy when setting this up to ensure that the Helix is not blocked from the service.
Configuring Services Command Description Password Password for Dynamic DNS provider. Interval Enter Interval in Sec. Be careful when entering this information to match the recommendations from your Dynamic DNS provider. Full Domain Name Full domain name provided by your Dynamic DNS provider. An example is, helixrt.noip.org for instance. Landing Page When Landing page is configured, an internet connection is blocked until the landing page is viewed from the web browser.
AirLink Helix User Guide Figure 10-5: ACEmanager: Services - Management (SNMP) Command SNMP community String 46 Description The SNMP Community String acts like a password to limit access to the device’s SNMP data. • string = string of no more than 20 characters (default = public).
11 11: Configuring Admin • Admin Admin The admin section of the Helix allows the box to be reset to defaults, the password to be changed, and debug mode. Figure 11-1: ACEmanager: Service - Admin It is highly recommended to change the default password of the Helix. To change the default password, 1. Enter the user name (admin). 2. Enter the old password. 3. Enter the new password twice. 4. Click on Change Password You will be prompted to restart the Helix.
AirLink Helix User Guide Click Reset to Factory Defaults to initiate the process to reset the Helix to its default settings. After clicking on the button, the Helix will reset and you can connect to ACEmanager with the default username and password. Debug Debug mode allows direct control over the cellular module for additional control, technical support, and custom settings. Enabling this mode will disable the onboard cellular module control.
Configuring Admin Log The log file is a system log of the helix unit. Log 0 is the current data and Log 1 to 5 is the archived data. The Refresh tab will refresh the display with current data. Clear tave will clear the log displayed. Figure 11-4: ACEmanager: Admin - Log Rev 3.0D May.
AirLink Helix User Guide 50 2140847
12 12: Technical Specifications • • • • • • WAN LAN Routing Administration Hardware Physical WAN • WAN fail-over of landline backhaul (DSL, cable, etc.) • WAN Alive maintains persistent cellular connection • Dynamic DNS client compatible with third-party DDNS services LAN • Ethernet 10/100 megabit, 2 ports • Configurable LAN IP address • MAC filtering • Configurable DHCP server • Wi-Fi 802.
AirLink Helix User Guide Hardware • FCC CFR47 PART 15 SUBPART C (FCC) compliant · MC5727 id is N7N-MC5725 · MC8790 id is N7NMC8790 · WLM54G WiFi PCI card id MK8CPX-05-WLM54G. • Power, Status, Activity LEDs • Outlet Power adapter (12VDC, 1.5 amp) Physical 52 • Compact, rugged case • Dimensions: 6.25"x1.3875"x7.0625" (case, not including antenna) • Weight: 2.
13 13: Regulatory Information Federal Communications Commission Notice (FCC United States) Electronic devices, including computers and wireless modems, generate RF energy incidental to their intended function and are therefore subject to FCC rules and regulations. This equipment has been tested to, and found to be within the acceptable limits for a Class A digital device, pursuant to part 15 of the FCC Rules.
AirLink Helix User Guide Cet appareillage numérique de la classe B répond à toutes les exigences de l'interférence canadienne causant des règlements d'équipement. L'opération est sujette aux deux conditions suivantes: 1. ce dispositif peut ne pas causer l'interférence nocive, et 2. ce dispositif doit accepter n'importe quelle interférence reçue, y compris l'interférence qui peut causer l'opération peu désirée.
Regulatory Information The Declaration of Conformity made under Directive 1999/5/EC is available for viewing at the following location in the EU community. Sierra Wireless 39677 Eureka Drive Newark, CA USA 94560 The device is a Class A device for use in commercial environment. WEEE Notice If you purchased Product Name in Europe, please return it to your dealer or supplier at the end of its life. WEEE products may be recognised by their wheeled bin label on the product label. Rev 3.0D May.
AirLink Helix User Guide 56 2140847