Task 5: Configuring Security
PTP 450 Configuration and User
pmp-0815 (August 2015)
3-43
Table 21
Security tab of BHS
Attribute
Meaning
Authentication Key
Only if the BHM to which this BHS registers requires an
authentication, specify the key that the BHS will use when
authenticating. For alpha characters in this hex key, use only
upper case.
Encryption Setting
Specify the type of airlink security to apply to this BHS. The
encryption setting must match the encryption setting of the
BHM.
None
provides no encryption on the air link.
DES
(Data Encryption Standard): An over-the-air link
encryption option that uses secret 56-bit keys and 8 parity
bits. DES performs a series of bit permutations, substitutions,
and recombination operations on blocks of data. DES
encryption does not affect the performance or throughput of
the system.
AES
(Advanced Encryption Standard)
:
An over-the-air link
encryption option that uses the Rijndael algorithm and 128-bit
keys to establish a higher level of security than DES. AES
products are certified as compliant with the Federal
Information Processing Standards (FIPS 197) in the U.S.A.
Web, Telnet, FTP
Session Timeout
Enter the expiry in seconds for remote management sessions
via HTTP, telnet, or FTP access to the BHS.
IP Access Control
You can permit access to the BHS from any IP address (
IP
Access Filtering Disabled
) or limit it to access from only
one, two, or three IP addresses that you specify (
IP Access
Filtering Enabled
). If you select
IP Access Filtering
Enabled
, then you must populate at least one of the three
Allowed Source IP
parameters or have no access permitted
from any IP address
Allowed Source IP
1
to 3
If you selected
IP Access Filtering Enabled
for the
IP
Access Control
parameter, then you must populate at least
one of the three
Allowed Source IP
parameters or have no
access permitted to the BHS from any IP address. You may
populate as many as all three.
If you selected
IP Access Filtering Disabled
for the
IP
Access Control
parameter, then no entries in this parameter
are read, and access from all IP addresses is permitted.
A subnet mask may be defined for each entry to allow for
filtering control based on a range of IP addresses.
