Digi TX54, User Manual

Page: 288 / 1087

Hotspot Hotspot DHCP server
TX54 User Guide 288
Hotspot DHCP server
When the hotspot is enabled on the TX54 device, it automatically enables a DHCP server. During
hotspot configuration, you assign an IPv4 address to the hotspot, and the DHCP server then uses the
subnet of the hotspot's IP address, along with the hotspot's subnet mask, to assign IPv4 addresses to
clients that connect to the hotspot.
To prevent the hotspot's DHCP server from assigning IP addresses that are already in use elsewhere in
your local network, the hotspot must use a subnet that is not currently being used in your local
network.
Hotspot security
A typical hotspot is an open network. This means that traffic transferred between the hotspot and the
hotspot clients is not encrypted and can be intercepted by a packet sniffer or similar technology.
However, the sample HTML login pages provided with your TX54 device use CHAP-MD5
authentication, providing a level of security during the authentication process. Additionally, websites
that use the HTTPS protocol provide end-to-end encryption between the browser and the web server.
Hotspot clients are typically untrusted and only given access to the WAN interface on the device. The
hotspot firewall zone settings prevent hotspot clients from accessing any of the other interfaces on
the device (such as the LAN and VPN interfaces). Additionally, the hotspot zone prevents hotspot
clients from accessing the device itself (for example, via the web interface or SSH).