Recommendations for configuration of WiFi routers
48
BEETLE /moPOS "Getting Started"
9
Recommendations for configuration of WiFi routers
For connecting mobile devices and POS Device HUB’s a market-usual WiFi router needs to be
used. Some recommendations and prerequisites need to be fulfilled to have a working con-
figuration.
The WiFi router is not a Wincor Nixdorf product. Usual WiFi routers from the market can be
used as long as they meet the requirements and recommendation for communication with
mobile tablets.
•
The WiFi router shall use a strong encryption such as WPA/WPA2 with at least AES is
used.
Even in context of PCI conform environments the weak encryption WEP is prohibited.
PCI DSS version 2.0 specifies that WEP must not be used as a security control for
wireless networks.
•
Make sure a password with sufficient length is used for the WiFi connectivity.
•
The WiFi router should use DHCP for assigning TCP/IP addresses to the tablet(s) and
the POS device HUB(s). In case DHCP protocol is used make sure
that in the router a
hard binding of TCP/IP addresses to the MAC address of devices is enabled.
That is,
the device will get always the same IP address by the router during startup of net-
work communication.
•
For security reasons it is recommended to forbid routing ALL ports from the WiFi
network to the LAN network. However, for usage of BEETLE /moPOS some ports are
required to be routed:
Port
Meaning
80
http access (used also for WebSockets)
443
Allow Access of HTTPS WebGUI of POS Device HUB from tablet
1131
JavaPOS (UPOS) interface to the POS Device HUB
8025
Admin Server access