GE MDS ORBIT MCR, Technical Manual, Page: 119 / 463

MDS 05-6632A01, Rev. F MDS Orbit MCR/ECR Technical Manual 119
adr-threshold -70;
encryption-protocol 2.0;
}
Security Configuration
The default security mode, as shown above, is none. The following configures the NX915 module to use
data compression, pre-shared key authentication with the passphrase “mypassphrase” and aes128-ccm
encryption.
% set interfaces interface NxRadio nx-config data-compression lzo security encryption
aes128-ccm security-mode psk passphrase mypassphrase
% show interfaces interface NxRadio nx-config | details
modem-mode 500kbps;
device-mode remote;
network-name MyNetwork;
data-compression lzo;
header-compression false;
power 30;
security {
security-mode
psk;
encryption aes128-ccm;
passphrase mypassphrase;
}
advanced-config {
lna-state
high-sensitivity;
stale-packet-timeout 1500;
data-retries 3;
nic-id 0;
gateway-id 0;
arp-cache false;
adr-mode none;
adr-threshold -70;
encryption-protocol 2.0;
}
The following configures the NX915 module to use data compression, EAP authentication and aes128-
ccm encryption. The EAP mode currently supports only EAP-TLS. This requires configuring the
appropriate PKI Certificates and Keys to use in the TLS authentication. This information is selected from
the PKI configuration.
% set interfaces interface NxRadio nx-config data-compression lzo security encryption
aes128-ccm security-mode eap eap-mode eap-tls pki ca-cert-id CACert key-id DevicePrivKey
cert-id DevicePubCert
% show interfaces interface NxRadio nx-config | details
modem-mode 500kbps;
device-mode remote;
network-name MyNetwork;
data-compression lzo;
header-compression false;
power 30;
security {
security-mode
eap;
encryption aes128-ccm;
eap-mode eap-tls;