Cambium Networks PMP 450 AP, Планирование и руководство по установке

Страница: 182 / 287

Chapter 3: System planning Security planning
Page
3-52
Table 92 Ports filtered per protocol selections
Port Configuration
450 Platform Family supports access to various communication protocols and only the ports required
for these protocols are available for access by external entities. Operators may change the port
numbers for these protocols via the radio GUI or SNMP.
Table 93 Device default port numbers
Port Usage Port Usage Device
21 FTP Listen Port AP, SM
80 HTTP Listen Port AP, SM
443 HTTPS Listen Port AP, SM
161 SNMP port Listen Port AP, SM
162 SNMP trap port Destination Port AP, SM
514 Syslog Server port Destination Port AP, SM
1812 Standard RADIUS port Destination Port AP
1813 Standard RADIUS accounting port Destination Port AP, SM
Encrypting downlink broadcasts
An AP can be enabled to encrypt downlink broadcast packets such as the following:
Protocol Selected Port Filtered (Blocked)
SMB
Destination Ports UDP: 137, 138, 139, 445, 3702 and 1900
Destination Ports TCP: 137, 138, 139, 445, 2869, 5357 and 5358
SNMP Destination Ports TCP and UDP: 161 and 162
Bootp Client Source Port 68 UDP
Bootp Server Source Port 67 UDP
User Defined Port 1.3 User defined ports for filtering UDP and TCP
IPv4 Multicast Block IPv4 packet types except other filters defined
IPv6 Multicast Block IPv6 packet types except other filters defined
ARP Filter all Ethernet packet type 806
Upstream Applies packet filtering to traffic coming into the FEC interface
Downstream Applies packet filtering to traffic destined to exit the FEC interface