Atlantic-in-a-Can

Atlantic resells support from Aruba, Fortinet, Meraki, Mist and others. These services include access to a manufactures technical assistance center (TAC). When there's a problem, however, customers often call us first. That's good with us; even if we have no formal support arrangement in place, we're happy to respond because your experience with the products and configurations we recommend is important to us.
 
Some technical support requests require a presence on the network, however. That can mean traveling to your site for a formal engagement, which typically includes a charge. We want to make "being there" easier and less expensive for you, and we want to reduce the lifetime of a technical problem. To that end, we are offering customers a service platform (we call it "Atlantic in a Can") that will provide a local support presence for us. The same platform can be used for higher levels of support, monitoring and managed These services are available for a fee and are eligible for E-Rate funds.

We have assembled a server package that "phones home" from within the customer network. It cannot be reached from the Internet. Most of its ports are shutdown. All traffic is encrypted within a layer-2 IPsec tunnel carrying a non-routable segment.
 

 
The server takes a static or DHCP address from the internal network. This address is a NAT boundary so that all traffic coming from the server is sourced from the internal network address. Via this, Atlantic can make contact with internal wireless controllers, switches or firewalls as if sitting on the internal network. A private segment is bridged back to Atlantic via an IPsec tunnel. A non-routing interface to your network provides a local connection.
Servers com in two sizes. The smaller server is a simple OrangePi-based device for remote access only. Larger servers runs a KVM-based VM environment that includes customized Zabbix proxy. Via Zabbix, we monitor critical services and operating parameters via SNMP. Atlantic can notify you by SMS when attention is warranted.