Users Manual

ALL

EFFECTIVITY

Page 5-30

22 Apr 2019

23-15-49

SYSTEM DESCRIPTION, INSTALLATION, AND MAINTENANCE MANUAL

ASPIRE-400

AND

(2) There is no requirement for the ACD to take any action if its certificate appears in the

Certificate Revocation List.

(3) When the safety Channel Card indicates it has successfully registered and attached to

the BGAN network the ACD automatically commands the Channel Card to create an

ACD context with the following properties:

(a) Using the following ORT defined Access Point Names (APN)s

(b) for the Secure Gateway

(d) Background with priority

(e) QoS Parameters: traffic class (Background), Maximum bit rate Upload, Maximum

bit rate Download

(f) No IP Header Compression.

B. IPsec Tunnel creation

(1) When the PDP SB primary context is established, the ACD Datalink Gateway

automatically:

(a) Performs DNS lookup for the ORT-defined Security Gateway Domain Name

string to determine the IP address of the GSGW;

(b) Uses HTTP GET to the GSGW IP address to obtain latest certificates and CRLs;

authentication provided by the Smart Card;

(d) Through the established IPsec VPN tunnel logs on to GDGW for the ORT-

defined services, using the AAPv2 protocol, then reports "Join" to the CMU for

the successfully established services.

C. AAP (Safety Data Gateway) Log On

(1) When making a AAP logon request, the ACD populates one of the following logon

reasons:

(a) 1st logon after Factory Settings Restart

(b) 1st logon after power up

(d) Automatic logon (except 1st logon after power up)

(e) Satellite handover

(f) Logon after using a lower priority satellite link (non-preferred service) e.g. after

dwell timer ac_aap_t4 expired

(g) Log on after entering SB coverage

(h) Log on after failure

DRAFT

3rd rvw Draft as of:

29 January, 2020