Inmarsat POP
A satellite pop environment is offering the operator full control over the provided satellite services - AP assignments, Terminal Firewalls, VPN routing, Value added services, throttling...

INMARSAT POP - Functionality Overview
An Inmarsat POP need to handle some basic functionalities across:
- Peering with Inmarsat MMP and peering with Internet MMP
- Fully redundant infrastructure – Routers, Firewalls, Radius servers
- Radius authentication based on IMSI and standard authentication
- Provisioning across firewalls, radius servers, POP service handling
- IP management through IPAM – Firewall profiles per terminal session
RADIUS Functionality
Inmarsat I4 + 4G services require authentication:
- Inmarsat or 4G operator will request authentication
- A standard 3GPP radius request will be send
- Radius server will authenticate based on IMSI
- IP addresses will be assigned to terminals
- A single terminal can get multiple IP addresses
FIREWALL Functionality
Connecting satellite terminals to Internet require firewalls and routing
- Advanced Juniper SRX firewalls deliver security and routing
- Firewalls provide operator security as well as seperate security zones
- Radius server on seperate zone, Value Added services seperated
- Terminal firewalls based on profiles being provisioned
- Complete end customer self care across each single terminal
HOSTING
- POP hosting is one of the expensive parts:
- POP peering need to be where Inmarsat are located
- POP hosting is typically with Equinix hosting locations
- A POP require relative little space – like 1/4 rack
- Fireprotection, redundant power, redundant cabling
- Hosting is not a part of our delivery
PEERING
- Peering with Inmarsat MMP and peering with Internet
- Fully redundant infrastructure – Routers, Firewalls,
- Radius authentication based on IMSI as well as stand
- Provisioning across firewalls, radius servers, POP
- IP management through IPAM
- Firewall profiles per terminal
REDUNDANCY
Delivering a highly professionel service need redundancy:
- Peering fiber connections to Inmarsat replicated
- Internet BGP failover fiber connections
- Firewalls installed with RETH and keep alive
- Redundant radius servers – completly seperated
- IP management / Provisioning fully redundant
PROVISIONING
Adding a new terminal, assigning a static IP need provisioning:
- POP Manager provide the needed linked between Unity and POP
- Provision terminal firewall profiles – and firewall self care
- Radius provisioning across both radius servers
- Value Added service provisioning managed by POP Manager
- Advanced firewall management managed directly