LANCOM L
-
300 Access Point Serie
Chapter 4: Security settings
48
EN
The IEEE-802.1x technology has already been fully integrated since Windows
XP. Client software exists for other operating systems. The drivers for the
LANCOM AirLancer wireless cards feature an integrated 802.1x client.
4.1.6
IPSec over WLAN
With the help of the IPSec-over-WLAN technology in addition to the security
measures described already, a wireless network for the exchange of especially
sensitive data can be optimally secured. Required for this is a base station
with VPN support and the LANCOM Advanced VPN Client that operates under
Windows 2000, XP and Windows Vista™. Client software from third parties is
available for other operating systems.
4.2
Tips for the proper treatment of keys and passphra-
ses
By observing a few vital rules on the treatment of keys you can significantly
increase the security of encryption techniques.
Keep your keys as secret as possible.
Never write down a key. Popular but completely unsuitable are, for
example: Notebooks, wallets and text files on the computer. Do not pass
on a key unless it is absolutely necessary.
Choose a random key.
Use long random strings that combine letters and numbers (at least 32 to
a maximum of 63 characters). Keys that are normal words are not secure.
If you suspect anything, change the key immediately.
When an employee with access to a key leaves the company, then it is
high time to change the wireless LAN key. Even if there is the slightest sus-
picion of a leak, renew the key.
LEPS avoids the global distribution of passphrases.
Activate LEPS to enable the use of individual passphrases.
4.3
The security settings wizard
Access to the configuration of a device permits not only to read out critical
information (e.g. Internet password). Rather, also the entire settings of the
security functions (e.g. firewall) can be altered then. So an unauthorized con-
figuration access endangers not only a single device, but the entire network.
