background image

Chapter 5. Using BCAdmin™

These buttons allow individual devices to be added to or removed from the currently selected device
list.

Note: The BreadCrumbs and Administrators tabs in the ACL are automatically merged into the Permitted
Devices and Forbidden Devices lists. Separate tabs are only provided in order to ensure that the administrator
has fully considered the ramifications of setting an ACL.

Warning

Be sure to include the BCAdmin workstation in the ACL so that you can continue
administering the network!

AES-256 Encryption with AirFortress

Fortress Technologies provides FIPS 140-2-certified encryption via its AirFortress secure client software.
This can be installed on any number of client devices without any modifications whatsoever to the
BCWN configuration. However, in order for client devices to receive IPv4 addresses from the
BreadCrumb devices’ embedded DHCP servers, or for an AirFortress-encrypted workstation to
communicate to a BreadCrumb device using BCAdmin, Rajant provides support for AirFortress
encryption within the BreadCrumb devices themselves.

Contact your Rajant Account Representative to obtain the AirFortress secure client software for your
laptops and handheld computers.

Important: When a BreadCrumb device is running with AirFortress enabled internally, only clients using the
AirFortress client may communicate over the BCWN.

Tip: For more information about the AirFortress secure client, visit http://www.fortresstech.com.

Registering AirFortress

In order to enable AirFortress support on a BreadCrumb device, its internal driver must be activated via a
one-time registration process. To do this, right-click on a BreadCrumb device in BCAdmin and choose

Diagnostics and Maintenance

, then

Register AirFortress Encryption

. If this

menu option is not presented, Fortress is already registered on that BreadCrumb device.

38

Summary of Contents for BreadCrumb Wireless Network

Page 1: ...BreadCrumb Wireless Network User Guide For the BreadCrumb Wireless Network Release 8 4 Rajant Corporation...

Page 2: ...Wireless Network User Guide For the BreadCrumb Wireless Network Release 8 4 by Rajant Corporation Copyright 2005 2006 Rajant Corporation Revision History Revision 1 1 February 20 2006 Revision 1 0 Oct...

Page 3: ...and Version 3 Systems 6 3 Models 8 BreadCrumb ME 9 External Connectors 10 BreadCrumb WE 10 External Connectors 10 BreadCrumb SE 11 External Connectors 11 BreadCrumb XL 12 External Connectors 12 BreadC...

Page 4: ...isabling AirFortress Encryption 39 Encrypting Wired Traffic 40 Zeroizing the Access ID 40 Harris SecNET11 40 SecNet11 Key Filling 41 BCAdmin Preferences 41 Mapping with Fugawi Tracker 42 6 Configurati...

Page 5: ...mb XLV External Connectors 14 3 6 BreadCrumb XLE External Connectors front 15 3 7 BreadCrumb XLE External Connectors back 15 5 1 BCAdmin Screen at Startup No Network 20 5 2 The BreadCrumb Box 22 5 3 T...

Page 6: ...followed by a guide to BCAdmin the management application used to configure BreadCrumb devices before or during a deployment Finally common deployment scenarios are described and concise step by step...

Page 7: ...etworks that must be established quickly and with minimal effort for short term use e g a network established to provide First Responder support at the site of a disaster Mobile Wireless Networks Netw...

Page 8: ...d Note Although all BreadCrumb devices can be Access Points most Access Points do not provide any meshing capabilities Traditional Access Points simply allow wireless devices within range to connect t...

Page 9: ...se that you change the ESSID of BreadCrumb device C to lonely The network will adjust to this change resulting in the following configuration Note that BreadCrumb device C can no longer communicate wi...

Page 10: ...increasing overall channel bandwidth Enhanced radio frame fragmentation process Issues Resolved A compatibility issue with the latest version of Java has been resolved The problem manifested as the i...

Page 11: ...inux using the link provided by your Rajant Account Manager 3 Run the installer for Windows or install the rpm for Linux and follow any instructions provided on your screen Upgrading BreadCrumb Firmwa...

Page 12: ...arameters like name and location are reset to their default values after the upgrade The user should record these and other parameters to reload into the BreadCrumb devices after the software installa...

Page 13: ...dmin installed is permitted in the device s ACL list and is designated as an administrator Important settings that were lost in the flash may be re keyed but do not reboot the BreadCrumb device until...

Page 14: ...aced as necessary incl vehicle mount contains embedded MPEG video encoder long range use Dimensions 6 x 3 75 x 7 5 7 25 x 4 75 x 2 5 8 25 x 6 5 x 3 5 9 x 6 5 x 4 9 x 6 5 x 4 12 x 12 x 2 5 Weight 1 5lb...

Page 15: ...red Yes waiver required Yes waiver required No Integrated Antennas None 5dBi omnidi rectional 4x2dBi dipole None None None External Antenna Connectors SMA F None 1xfemale N type optional connected to...

Page 16: ...WE The BreadCrumb WE is functionally identical to a 1 radio BreadCrumb ME with a higher gain antenna integrated battery and a case more suited to attach to worn gear Individuals wearing a BreadCrumb W...

Page 17: ...adios and ethernet interface enable the full suite of BreadCrumb features with the exception of long range and integrated video encoder while its size allows it to be easily transported to and placed...

Page 18: ...stances of 7 miles 11 2km or more and lower speed communications at even greater range BreadCrumb XLs have been rapidly deployed In Air Traffic Control towers On mountaintops On ships Important The ra...

Page 19: ...dCrumb XL with the exception that it also accepts unfiltered vehicle power 6 40VDC as a power source This allows long range communication within and among vehicle convoys and bases and enables the bri...

Page 20: ...umb XLV by including an MPEG video encoder and an external BNC video connector A composite video source can be connected to the BreadCrumb XLE and its video stream will be available to other devices o...

Page 21: ...Chapter 3 Models External Connectors Figure 3 6 BreadCrumb XLE External Connectors front Figure 3 7 BreadCrumb XLE External Connectors back 15...

Page 22: ...eld Rajant ensures during manufacturing that these addresses are not duplicated between any two BreadCrumb devices Addresses assigned to BreadCrumb devices can be viewed using BCAdmin Note that BreadC...

Page 23: ...nt and Other Considerations Commonly occurring environmental factors have a significant impact on performance and behavior of the BreadCrumb Wireless Network LOS Line of Sight obstructions distance we...

Page 24: ...readCrumb device 200mW with external antenna Up to 5km 3 1 miles BreadCrumb device 200mW with external antenna BreadCrumb device 1W Up to 10km 6 2 miles BreadCrumb device 1W BreadCrumb device 1W Up to...

Page 25: ...work performance and can come from many different sources including Other BreadCrumb devices placed too closely together Other RF devices such as microwave devices cordless phone base stations radio t...

Page 26: ...ators BCAdmin is an application allowing an administrator to perform several tasks on a BreadCrumb Wireless Network including Monitor its status Configure network wide settings Configure individual Br...

Page 27: ...ssible perhaps because no BreadCrumb devices are turned on or the workstation has not associated with any When BCAdmin is able to communicate to a BCWN the network topology is shown in the Topology Ar...

Page 28: ...resent BreadCrumb devices The smaller blocks with blue outlines represent client devices Detailed information for a BreadCrumb device can be viewed in the Info Area by selecting the BreadCrumb device...

Page 29: ...may indicate a problem with the network its deployment the local radio environment or other factors 3 Number of Peers A peer is simply another BreadCrumb device to which a BreadCrumb device has meshe...

Page 30: ...address To set a nickname right click on the client device and choose Set Client Nickname Anatomy of a Connection Line If your BCWN has more than one BreadCrumb device your Topology Area probably inc...

Page 31: ...olor connecting two BreadCrumb devices The speeds will be represented in the line styles as specified in the BCAdmin Line Styles Legend in the previous section Transmission direction of each link is r...

Page 32: ...The top portion of the Info Area shows a summary of the selected BreadCrumb device s configuration as pictured below Figure 5 6 BreadCrumb Summary Panel In this example you can see that the selected B...

Page 33: ...en turned on and are not yet fully booted or are only reachable via an extremely poor link The same information is available in each list The following figure shows an example listing of BreadCrumb co...

Page 34: ...fication of the BreadCrumb device within BCAdmin Any changes to this name are immediately reflected on the screens of other BCAdmin users 2 Type This allows the administrator to note the type model of...

Page 35: ...gy Area alerting administrators that a battery must be changed 7 DHCP Server Each BreadCrumb device provides an internal DHCP server see the Section called DHCP in Chapter 4 for a description of its a...

Page 36: ...Section called Channel Assignments in Chapter 4 or radios may be fixed to specific channels If one radio is set to use automatic channel selection so must all of a BreadCrumb device s other radios Imp...

Page 37: ...orks both wired and wireless Figure 5 10 BreadCrumb Properties Reachback Tab The available settings are 1 Reachback Interface This dropdown selects the network interface on the BreadCrumb device that...

Page 38: ...In Automatic Mode the interface attempts to obtain an IPv4 address using DHCP If it obtains an address reachback is configured to use Gateway Mode if it does not reachback is configured to use Bridge...

Page 39: ...the BreadCrumb DHCP servers There may be at most one Primary Gateway in a BCWN Alternate Gateways do not assign themselves the 10 0 0 1 address and provide their own addresses as a gateway to their o...

Page 40: ...gateways Figure 5 11 BreadCrumb Properties Forwarding Tab To forward traffic through a BreadCrumb device in Gateway Mode or Gateway Ingress mode you must know The IPv4 port s used by the forwarded tra...

Page 41: ...using port 80 the default for web traffic The external port range is therefore 80 80 2 Protocol Web traffic uses TCP not UDP so only the TCP checkbox should be checked 3 IP Address This is the IP addr...

Page 42: ...is dropdown allows the administrator to enable or disable WEP on all BreadCrumb devices currently visible in BCAdmin 2 Key A 40 bit or 104 bit hexadecimal key is specified in this field If this field...

Page 43: ...lows the administrator to select from three different policies No access control allow all devices This disables ACLs on the BCWN Deny by default allow only permitted devices This policy only allows d...

Page 44: ...4 addresses from the BreadCrumb devices embedded DHCP servers or for an AirFortress encrypted workstation to communicate to a BreadCrumb device using BCAdmin Rajant provides support for AirFortress en...

Page 45: ...via ethernet be sure that the BCAdmin workstation s radio is disabled in order to guarantee that the ethernet connection is in fact being used To set the Access ID on a BreadCrumb device open the Gene...

Page 46: ...work and decryption of wireless traffic entering a wired network is completely automatic Tip In addition to providing secure wireless extension of a wired network this feature can be used to encrypt c...

Page 47: ...igure 5 15 BCAdmin Preferences Window The first three fields are described in this section The remaining fields are described below in the Section called Mapping with Fugawi Tracker 1 BreadCrumb inact...

Page 48: ...formation from BreadCrumb devices either manually set by an administrator or obtained via GPS to the Fugawi Tracker mapping application Each BreadCrumb device s asset ID within Fugawi Tracker is its B...

Page 49: ...ction called Encrypted Point to Point 5 For further security enable ACLs and or WEP to prevent other devices from accessing the BCWN Note This will only protect your traffic from inadvertent or casual...

Page 50: ...efault gateway address later e AirFortress Encryption Enabled 4 Configure your Network B devices to use the Network B BreadCrumb device s ethernet address as their default gateway 5 Add intermediate B...

Page 51: ...ed from a network camera with ethernet support It is useful for administrators to configure all of their cameras in exactly the same way so as to minimize any BreadCrumb device specific configuration...

Page 52: ...to work around this and set the Access ID 1 Using a BCAdmin workstation connected wirelessly to the BCWN configure the BreadCrumb device to use Bridge Mode on its ethernet interface 2 Reboot the Bread...

Page 53: ...for the BreadCrumb device and its associated wireless clients Monitory battery usage and charge replace batteries as necessary Light precipitation or fog beginning after initial deployment of the BCWN...

Page 54: ...BreadCrumb devices comprising the network have AirFortress encryption enabled ensure that the client does as well Table 7 2 Sporadic Network Connectivity Issues BreadCrumb Device Cannot Connect to BC...

Page 55: ...unicate with that BreadCrumb device for 60 seconds This could be due to several factors LOS obstructions Dead or failing BreadCrumb battery BreadCrumb device is rebooting Fortress encryption settings...

Page 56: ...umb device coming up in its default state will obtain an ACL from any BreadCrumb device to which it connects If you are trying to correct an ACL problem by restoring a BreadCrumb device s default sett...

Page 57: ...here was a camera on one helicopter as well streaming live video as it performed its duties Finally there was a UAV flown that was equipped with video to its base station Using a new addition to the R...

Page 58: ...the BreadCrumb network most importantly by the ease and speed of deployment when compared to other wireless technologies they have tried The network consisted of cameras placed on a mountain top and a...

Page 59: ...8 5 Soldier communicating over BCWN using Microsoft NetMeeting Rajant employees also returned to Phuket where Rajant BreadCrumb devices had been left this past January to aid in the tsunami relief eff...

Page 60: ...mmunicate wirelessly with a network All radios in a BreadCrumb usually provide AP functionality 802 11b A wireless networking standard providing raw data rates of up to 11Mbps BCAdmin The BreadCrumb W...

Page 61: ...single network Also referred to as a network name LAN Local Area Network MAC Media Access Control MAC Address A unique identifier usually of the form 11 22 33 44 55 66 associated with an individual n...

Page 62: ...reachback A connection to another network such as the Internet an office network or a TOC TAN Tactical Area Network TOC Tactical Operations Center UAV Unmanned Aerial Vehicle 56...

Page 63: ...color LED to indicate the BreadCrumb state Use the following table to interpret the LED output Color Blinking Solid Status Red Solid Starting up Red Blinking Error Blue Solid No Peers Green Blinking A...

Page 64: ...allocated for use in the U S These channels and their frequencies are listed in the following table 802 11b Channel Frequency GHz 1 2 412 2 2 417 3 2 422 4 2 427 5 2 432 6 2 437 7 2 442 8 2 447 9 2 4...

Page 65: ...u encounter regarding this release Please forward all feedback regarding the BreadCrumb system functionality to support rajant com Other than speaking with a Rajant representative this is the best way...

Reviews: