Some of the technical content on this site is only available in English.

System requirements

Server configuration

Item	Requirement
Cameras per server	150 (to provide a response time of 2 seconds or less for every user when access requests are made simultaneously by all Orion Devices. In this context "simultaneously" means within a 10 second window)
Network interfaces	There must be only a single network interface beginning with "en". This is the default on our required OS below. This must also be a wired connection.
CPUs	Min. 3.6 GHz 16vCPU (provides a response time of 2 seconds or less for each access request)
Memory	32 GB
Storage	Mirrored SSD - 480 GB We strongly recommend that physical storage is encrypted.
Architecture	Intel/AMD x64
Operating system	Ubuntu Server 24.04 LTS. This must be the minimized install option. The install process hardens the server, installing and configuring a firewall and OS updates.
Firewall	The Orion Server requires the following inbound traffic to be allowed from the UCMe CU devices on the following ports: `UDP/123` - NTP `TCP/443` - HTTPS.

Network configuration

An Access Control Virtual LAN should be created to separate the Orion Devices from corporate and guest networks. This can be the same network used by other Salto network devices. The network subnet size is dictated by the number of Orion Devices on the network.

The network should be configured for no inbound or outbound traffic with the single exception of the Orion Server. The Orion server requires outbound traffic on the following ports:

123 - to allow the Orion Server to synchronize time.
443 - to enable access to Orion Enrolment Service, download software updates for the server and Orion Devices from Orion Connect and provide diagnostic and performance information.
8883 - to enable MQTT connectivity with Orion Connect for system commissioning, monitoring and updates.

A DHCP server is required to allocate IP addresses to the Orion Devices, with a reserved IP address allocated to the Orion Server.

The Orion Server requires a DNS server. The Orion Devices, however, do not use DNS. Instead, they are provided with the IP address of the Orion Server during the commissioning phase. For this reason, the Orion Server IP must not change.

The Orion Server requires an NTP server to maintain its system clock.

Item	Requirement
VLAN	An isolated (V)LAN is required for all cameras and locks.
Physical characteristics	Cat 5e or Cat 6 network with Gigabit switches.
IP subnet	Must be large enough to allocate addresses to all locks, camera units and servers/controllers Must not be in the range: `172.31.255.0/24`.
Outbound ports	Restrict to: `123` - NTP `443` - HTTPS/TLS `8883` - MQTT/mTLS Should also only permit Orion Servers to access outbound ports. Orion Devices do not require access outside of the VLAN.
DHCP	DHCP is required to provide IP addresses to UCMe devices. The Orion Server must have a reserved IP address that can not change once UCMe devices have been commissioned.
DNS	The Orion Server requires access to DNS.

Contents