In partnership with

SD-WAN Installation Phase 1 – Dual LTE

Objective of Project

The objective of this dispatch is to confirm the site has the important devices ( (1)Fortinet 40F,
(2) Cradle Point), test the primary and the secondary cradlepoints and the Zscaler Certificate on the
Android Tablet.

1
 SD-WAN & FortiGate Installation/TU

Materials Needed:

Minimum 300ft cat5e or cat6 plenum, Cat5e/6 terminations, Laptop PC (Windows 10) with
administrator login, laptop with ethernet port (Windows 10, 10/100/1000 gigabit network card or
better) and admin rights, RJ45 to USB console cable, hotspot, charger, PuTTY or hyperterminal installed,
assorted CAT6 patch cables

Pre-Visit: Download the Zoom app on your phone. You will need to log into the bridge via the Zoom app
for the install

Step 1: Upon Arrival

1. Introduce yourself to the site manager (must bring ID and work order). If you cannot get in
contact with someone, call into the bridge in Step 3
● Masks are required

● Store Main Phone Number: 7127325655

2. Please TAKE PHOTOS of the current network equipment and rack prior to starting any work
● Site either has 8-port or 24-port switch. If the site has an 8-port, it may be found within
a drawer onsite. Ask MOD if you cannot locate the switch

Step 2: Locate Equipment & Test Circuit/Cradlepoint

1. Locate Equipment
● (1) FortiGate FG-40F firewall

● (1) Cradlepoint CBA850 (may be existing onsite already)

o Confirm serial number of CP. Note in closeouts if it is different than below
o CBA850 MAC Address: MM160129301293
● (1) Cradlepoint L950 MAC: MM214300009005
2. Rack FortiGate
● Mount FortiGate firewall inside the customer rack (preferred), code for rack is 000
o If shelf only, place on top of existing Cisco switch
3. TEST BOTH CRADLEPOINT CBA850 and L950 PRIOR TO MOVING ON TO NEXT STEP
a. Cradle Point Testing: Confirm surf VIA STATIC IPs
i. Connect laptop to modem and assign static IPs, if you cannot surf, call into
Granite Mobility Queue to escalate

2
 ● Carrier: Verizon

● Circuit ID:

● IP: 63.40.131.200

● Gateway: 63.40.131.1

● Subnet Mask: /24

● If there are issues with the Cradle Point, please call into Bridge noted on page 3

Step 3: Call into Bridge

1. Call into Bridge as soon as you are ready, but no later than (ETA)
2. Join Zoom Meeting: link and dial in are listed below:

https://us06web.zoom.us/j/89995699663?pwd=NEM4Yk1kQmZlQ2U4bGYwc3cwZWx1UT09

Meeting ID: 899 9569 9663

Passcode: 916498

---

One tap mobile

+19292056099 Meeting ID: 89995699663# Passcode: *916498# US (New York)
+13017158592 Meeting ID: 89995699663# Passcode: *916498# US (Washington DC)

---

Dial by your location

• +1 929 205 6099 US (New York)
• +1 301 715 8592 US (Washington DC)
• +1 305 224 1968 US
• +1 309 205 3325 US
• +1 312 626 6799 US (Chicago)
• +1 646 931 3860 US
• +1 719 359 4580 US
• +1 253 205 0468 US
• +1 253 215 8782 US (Tacoma)
• +1 346 248 7799 US (Houston)
• +1 360 209 5623 US
• +1 386 347 5053 US
• +1 507 473 4847 US
• +1 564 217 2000 US

3
• +1 669 444 9171 US
• +1 669 900 6833 US (San Jose)
• +1 689 278 1000 US

Meeting ID: 899 9569 9663

Passcode: 916498

Cradlepoint SOW
a) Work with Granite mobility team to connect laptop into CP 850 & CP 950 to complete the
following deliverables for BOTH Cradle Points.
b) Take note and pictures of the following deliverables:
a. Primary Carrier – Which carrier is selected as primary
i. CP 850 – should have Verizon active in slot 1
ii. CP 950:
1. Slot 1 Verizon
2. Slot 2 T-Mobile
3. Separate box ATT
iii. SIM Number
b. Speed test (upload/download)
c. Multiple tests from different locations within the store
i. Should be able to have enough cabling to be able to find location with best
service available. Confirm with store MOD that the location is not in their way
and works for them.
ii. Please take note and pictures of exactly where in the store the CP is located.
Please ensure cabling is clean and not in the way.
iii. Provide which sim cards are used in the CBA850 and L950

Tablet Testing:
3. Verify dial tone and inbound/outbound calling before making any changes onsite
4. Power on the ANDROID TABLET. Confirm the serial number of the android tablet and take a
picture of it

a. Confirm with the site contact if they have ever used the android tablet before
i. You can advise the MOD that the iPad will no longer be used
b. PIN is 4548
c. Confirm if certificate is present: Navigate to Tablet Settings > Biometrics and security >
Other security settings > View security certificates > at bottom of screen, switch from
System to User by tapping User. Confirm that the Zscaler root certificate is listed. If it is,
proceed with step 4. If it does not work, wait a few minutes and resync by going
through step f again.
d. If the certificate is not present: press the leftmost physical button on the tablet and
search for the “Company Portal” app. Launch Company Portal (don’t sign in), tap the 3

4
 dots in the top right corner, tap Settings, and tap Sync under Management Policy.
Repeat step D.
e. Confirm that the tablet can access the internet and Confirm if the tablet can print
i. If they cannot, let bridge know and move on to next step for Fortinet TU

Post Installation
1. Fully complete the Maurice Store Sign Off checklist (Any items not checked off will be considered
incomplete and may result in return visit). This is located on Page 5-6.
2. Send all deliverables/checklist to the following form prior to leaving site.
o https://app.smartsheet.com/b/form/d8662d210ec3425db92ef403ceb16603

3. You may now leave the site and send in your closeouts to Granite, as long as approval is given from the
Granite or Maurices contacts on the bridge

Maurice Store Sign Off Checklist (Page 2)

Maurices Address:

Install Issue/Store Concerns:

5
 Granite/Maurice Deliverables:

Pictures – (check off)

Existing Network Equipment (pre-install): ______
8/24 Port Switch (8 port may be in drawer onsite) _______
Cradlepoint: ______
Serial number of Android Tablet (should be a sticker on device) _______
Racked Fortinet Device: ______
New Circuit modem: ______
Speed Test for circuit: ______
Post-Install, closeup: ______
Post-Install, wide view: ______
Info – (check off)
Check out with Maurices IT Team: ______
Package old equipment for return and handed to MOD: ______
Filled out full checklist (pg. 5): ______
Signed SOW (pg. 6): ______

The undersigned acknowledge the above to be accurate to the best of their ability.

Maurices Store Manager ________________________ ________________________ ________

33 Print Name Signature Date

Install Technician ________________________ ________________________ ________

Print Name Signature Date