
APPENDIX
E
SECURITY
Revised: 15 Feb 2017
APX E-1
ESTeem Models 195M/H/C
Overview
The
ESTeem
Models
195M,
195H
and
195C
support
multiple
security
settings
and
an
over
‐
the
‐
air,
wireless
encryption
at
256
‐
bit
AES.
All
network
security
must
be
multi
‐
layered
as
one
level
of
security
is
never
enough
to
make
sure
that
data
does
not
end
up
in
the
wrong
hands.
Please
review
the
following
security
levels
and
decide
what
is
the
most
appropriate
for
your
network.
The
ESTeem
195M/H/C
has
incorporated
the
following
security
measures:
AES
‐
CCMP
(256
‐
bit)
AES
‐
CCMP
(Advanced
Encryption
Standard
‐
Counter
Mode
CBC
‐
MAC
Protocol)
is
the
encryption
algorithm
used
in
the
IEEE
802.11i
and
WPA
‐
2
security
protocols.
This
national
encryption
standard
uses
a
256
bit
‐
AES
block
cipher
and
CCMP
technique
to
ensure
the
highest
level
of
security
and
integrity
available
on
a
wireless
network.
AES
‐
CCMP
incorporates
two
sophisticated
cryptographic
techniques
(counter
mode
and
CBC
‐
MAC)
and
adapts
them
to
Ethernet
frames
to
provide
a
robust
security
protocol
between
the
mobile
client
and
the
access
point.
AES
itself
is
a
very
strong
cipher,
but
counter
mode
makes
it
difficult
for
an
eavesdropper
to
spot
patterns,
and
the
CBC
‐
MAC
message
integrity
method
ensures
that
messages
have
not
been
tampered
with.
crypto
(on/off)
‐
This
software
command
will
enable
an
over
‐
the
‐
air,
wireless
encryption
at
256
‐
bit
AES.
All
ESTeem
195M/H/C
in
the
same
wireless
network
must
have
the
same
encryption
settings
and
keys.
passp
<Passphrase>
‐
This
software
command
will
use
the
characters
in
the
Passphrase
to
generate
the
AES
encryption
key.
The
key
is
generated
from
1
‐
64
characters
entered
after
the
passp
command
(example:
passp
12345678)
and
is
case
sensitive.
Typing
the
passp
command
without
any
arguments
will
display
the
current
Passphrase.
Limiting
Access
to
Radio
As
an
additional
security
feature
the
ESTeem
Models
195M,
195H
and
195C
can
limit
the
access
to
the
radio
configuration.
The
following
software
commands
can
be
enabled
and
disabled
as
required
for
the
application:
telnet
(on/off)
–
This
software
command
will
enable/disable
the
telnet
access
to
the
radio.
Factory
default
=
on
console
(on/off)
–
This
software
command
will
enable/disable
the
serial
console
access
to
the
radio.
Factory
default
=
on
Narrowband
Configuration
Utility
Password
The
Narrowband
Configuration
Utility
(used
to
program
the
ESTeem
Models
195M,
195H
and
195C)
can
be
password
protected
on
any
specific
computer
to
deny
changes
to
the
radio
configuration.
When
first
attempting
to
configure
an
ESTeem
195M/H/C,
the
utility
will
ask
you
to
configure
a
password
(Figure
1).
This
password
will
then
be
required
to
enter
the
configuration
utility
on
that
specific
computer.
If
you
do
not
want
to
use
the
password,
leave
the
box
blank
and
check
the
Don’t
ask
me
again
checkbox.
Figure
1:
Utility
Password
Technical
Tip
:
The
configuration
utility
password
is
a
saved
to
a
specific
computer
and
NOT
to
a
specific
radio
configuration.
Summary of Contents for 195C
Page 43: ...CHAPTER 7 ANTENNA SETUPS Revised 15 Feb 2017 7 3 ESTeem Models 195MHC...
Page 44: ...CHAPTER 7 ANTENNA SETUPS Revised 15 Feb 2017 7 4 ESTeem Models 195MHC...
Page 45: ...CHAPTER 7 ANTENNA SETUPS Revised 15 Feb 2017 7 5 ESTeem Models 195MHC...
Page 46: ...CHAPTER 7 ANTENNA SETUPS Revised 15 Feb 2017 7 6 ESTeem Models 195MHC...
Page 47: ...CHAPTER 7 ANTENNA SETUPS Revised 15 Feb 2017 7 7 ESTeem Models 195MHC...
Page 48: ...CHAPTER 7 ANTENNA SETUPS Revised 15 Feb 2017 7 8 ESTeem Models 195MHC...