Inmarsat POP

A satellite pop environment is offering the operator full control over the provided satellite services - AP assignments, Terminal Firewalls, VPN routing, Value added services, throttling...

INMARSAT POP - Functionality Overview

An Inmarsat POP need to handle some basic functionalities across:

  • Peering with Inmarsat MMP and peering with Internet MMP
  • Fully redundant infrastructure – Routers, Firewalls, Radius servers
  • Radius authentication based on IMSI and standard authentication
  • Provisioning across firewalls, radius servers, POP service handling
  • IP management through IPAM – Firewall profiles per terminal session

RADIUS Functionality

Inmarsat I4 + 4G services require authentication:

  • Inmarsat or 4G operator will request authentication
  • A standard 3GPP radius request will be send
  • Radius server will authenticate based on IMSI
  • IP addresses will be assigned to terminals
  • A single terminal can get multiple IP addresses

FIREWALL Functionality

Connecting satellite terminals to Internet require firewalls and routing

  • Advanced Juniper SRX firewalls deliver security and routing
  • Firewalls provide operator security as well as seperate security zones
  • Radius server on seperate zone, Value Added services seperated
  • Terminal firewalls based on profiles being provisioned
  • Complete end customer self care across each single terminal

HOSTING

  • POP hosting is one of the expensive parts:
  • POP peering need to be where Inmarsat are located
  • POP hosting is typically with Equinix hosting locations
  • A POP require relative little space – like 1/4 rack
  • Fireprotection, redundant power, redundant cabling
  • Hosting is not a part of our delivery

PEERING

  • Peering with Inmarsat MMP and peering with Internet
  • Fully redundant infrastructure – Routers, Firewalls,
  • Radius authentication based on IMSI as well as stand
  • Provisioning across firewalls, radius servers, POP
  • IP management through IPAM
  • Firewall profiles per terminal

REDUNDANCY

Delivering a highly professionel service need redundancy:

  • Peering fiber connections to Inmarsat replicated
  • Internet BGP failover fiber connections
  • Firewalls installed with RETH and keep alive
  • Redundant radius servers – completly seperated
  • IP management / Provisioning fully redundant

PROVISIONING

Adding a new terminal, assigning a static IP need provisioning:

  • POP Manager provide the needed linked between Unity and POP
  • Provision terminal firewall profiles – and firewall self care
  • Radius provisioning across both radius servers
  • Value Added service provisioning managed by POP Manager
  • Advanced firewall management managed directly

UNIVERSAL SATELITTE DATA POP ENVIRONMENT THAT HANDLE INMARSAT BGAN, FBB, SBB, GSPS, LINK, M2M, GX, IRIDIUM CERTUS, THURAYA IP, INTELSAT, VIASAT VSAT, 4G AND LTE AUTHENTICATION, ROUTING AND SECURITY.