Cambium Networks PMP 450 AP, Configuration Manual

Page: 157 / 649

Chapter 1: Configuration Configuring security
Page
1-129
Disable AES 128-bit This option allows to disable the AES-128 encryption. When AES-128
Encryption is disabled, it prevents the use of AES-128 when encryption is
enabled. Since changes to other attributes (e.g. PreSharedKey
authentication settings) could cause a need for 128-bit Auth and AES-128
upon next registration, Disable AES 128-bit parameter is prevented from
being changed on the "Security" webpage while the "Reboot Required"
warning is present at the top of the Web GUI pages. The recommendation is
to complete other changes first and to ensure that all links at an AP are
running AES-256 before disabling the use of AES-128 on all units (AP and
SMs) in the sector.
When saving and loading a configuration file, Disable AES 128 is saved and
loaded as a normal attribute. It will not take effect until a reboot is triggered.
Since enabling this attribute could have the effect of preventing a link
coming up, care should be taken on networks that enable this attribute on
only some units.
Select one of the following options to either disable or use AES-128
encryption.
• AES-128 Encryption Disabled:
• AES-128 Encryption Available
Authentication Key
256-bit This authentication key is a 64-character hexadecimal string used when
Authentication Mode is set to AP PreShared Key. By default, this key is set
to
0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFF.
Note
The AES-256 parameters are visible only when the feature key is
purchased.
Select Key 256-bit This option allows operators to choose which authentication key is used:
Use Key above means that the key specified in Authentication Key is used
for authentication
Use Default Key means that a default key (based off of the SM’s MAC
address) is used for authentication
Note
The AES-256 parameters are visible only when the feature key is
purchased.
Dynamic
Authorization
Extensions for
RADIUS Enable CoA and Disconnect Message: Allows to control configuration
parameters of SM using RADIUS CoA and Disconnect Message feature.
Disable CoA and Disconnect Message: Disables RADIUS CoA and
Disconnect Message feature.
To enable CoA and Disconnect feature, the Authentication Mode should be
set to RADIUS AAA.