ESTeem 195C, User Manual, Page: 66 / 75

APPENDIX E
SECURITY
Revised: 15 Feb 2017 APX E-1 ESTeem Models 195M/H/C
Overview
The ESTeem Models 195M, 195H and 195C support multiple security settings and an over ‐ the ‐ air, wireless encryption at 256 ‐ bit
AES. All network security must be multi ‐ layered as one level of security is never enough to make sure that data does not end up
in the wrong hands. Please review the following security levels and decide what is the most appropriate for your network. The
ESTeem 195M/H/C has incorporated the following security measures:
AES ‐ CCMP (256 ‐ bit)
AES ‐ CCMP (Advanced Encryption Standard ‐ Counter Mode CBC ‐ MAC Protocol) is the encryption algorithm used in the IEEE 802.11i
and WPA ‐ 2 security protocols. This national encryption standard uses a 256 bit ‐ AES block cipher and CCMP technique to ensure
the highest level of security and integrity available on a wireless network. AES ‐ CCMP incorporates two sophisticated cryptographic
techniques (counter mode and CBC ‐ MAC) and adapts them to Ethernet frames to provide a robust security protocol between the
mobile client and the access point. AES itself is a very strong cipher, but counter mode makes it difficult for an eavesdropper to spot
patterns, and the CBC ‐ MAC message integrity method ensures that messages have not been tampered with.
crypto (on/off) ‐ This software command will enable an over ‐ the ‐ air, wireless encryption at 256 ‐ bit AES. All ESTeem 195M/H/C
in the same wireless network must have the same encryption settings and keys.
passp <Passphrase> ‐ This software command will use the characters in the Passphrase to generate the AES encryption key. The
key is generated from 1 ‐ 64 characters entered after the passp command (example: passp 12345678) and is case sensitive.
Typing the passp command without any arguments will display the current Passphrase.
Limiting Access to Radio
As an additional security feature the ESTeem Models 195M, 195H and 195C can limit the access to the radio configuration. The
following software commands can be enabled and disabled as required for the application:
telnet (on/off) – This software command will enable/disable the telnet access to the radio. Factory default = on
console (on/off) – This software command will enable/disable the serial console access to the radio. Factory default = on
Narrowband Configuration Utility Password
The Narrowband Configuration Utility (used to program the ESTeem
Models 195M, 195H and 195C) can be password protected on any
specific computer to deny changes to the radio configuration. When
first attempting to configure an ESTeem 195M/H/C, the utility will ask
you to configure a password (Figure 1). This password will then be
required to enter the configuration utility on that specific computer.
If you do not want to use the password, leave the box blank and check
the Don’t ask me again checkbox.
Figure 1: Utility Password
Technical Tip : The configuration utility
password is a saved to a specific
computer and NOT to a specific radio
configuration.