Sierra Wireless AirLink RV50 Series User Manual page 33

Rev 1 Dec. 17
AirLink gateway
LAN
Router configured for
PCI compliance
Figure 2-22: Sample PCI compliant network
The PCI compliant network must be set up so that:
• The USBnet is on a different subnet from the point-of-sale-terminal.
• All security protocols must be established from the point-of-sale terminal to
the payment processor.
• Payment card terminals must be on a dedicated LAN or VLAN.
• The AirLink gateway must be connected to a router that is configured for PCI
compliance.
Note: The serial port on the AirLink gateway has no access to the IP data path and does
not need to be disabled.
If you are using the AirLink gateway for a payment card industry application, to
meet PCI Data Security Standard compliance requirements the following steps
must be done by a PCI certified service company.
For each gateway:
1. Connect the AirLink gateway to a router that has been configured for PCI
compliance.
2. Log in to ACEmanager. (User name is user; default password is 12345.)
Change the password regularly, in accordance with PCI recommendations.
3. Go to the Admin tab and change the default password.
Do not share the ACEmanager password.
4. Go to Applications > ALEOS Application Framework and set the ALEOS
Application Framework field to Disable.
33
Internet
Cellular WAN
WAN
LAN
Wireless Access Point
PoS
Gateway Configuration
Payment Processor
Retail store
DSL Gateway
PoS
Wi-Fi
41111088