Extreme Networks Altitude 4000 Series, Справочное руководство, Страница: 237 / 521

WEP 128 Keyguard
Altitude
TM
4000 Series Access Point System Reference Guide
237
Default WEP 128 or Keyguard keys are as follows:
- Key 1 101112131415161718191A1B1C
- Key 2 202122232425262728292A2B2C
- Key 3 303132333435363738393A3B3C
- Key 4 404142434445464748494A4B4C
1. Select OK when completed to update the WLAN’s WEP 128 encryption configuration. Select Reset
to revert the screen back to its last saved configuration.
WEP 128 and Keyguard Deployment Considerations
“WEP 128 Keyguard”
Before defining a WEP 128 supported configuration on a WLAN, refer to the following deployment
guidelines to ensure the configuration is optimally effective:
●
Extreme Networks recommends additional layers of security (beyond WEP) be enabled to minimize
the likelihood of data loss and security breaches. WEP enabled WLANs should be mapped to an
isolated VLAN with Firewall policies restricting access to hosts and suspicious network applications.
●
WEP enabled WLANs should only be permitted access to resources required by legacy devices.
●
KeyGuard is not supported on Altitude 4511 model access points.
●
If WEP support is needed for WLAN legacy device support, 802.1X EAP authentication should be
also configured in order for the WLAN to provide authentication and dynamic key derivation and
rotation.
Configuring WLAN Firewall Support
“Wireless LANs”
A Firewall is a mechanism enforcing access control, and is considered a first line of defense in
protecting proprietary information within an access point managed WLAN. The means by which this is
accomplished varies, but in principle, a Firewall can be thought of as mechanisms both blocking and
permitting data traffic. For a Firewall overview, see
“Wireless Firewall” on page 295 .
WLANs use Firewalls like Access Control Lists (ACLs) to filter/mark packets based on the WLAN from
which they arrive, as opposed to filtering packets on Layer 2 ports. An ACL contains an ordered list of
Access Control Entries (ACEs). Each ACE specifies an action and a set of conditions (rules) a packet must
satisfy to match the ACE. The order of conditions in the list is critical because the wireless controller
stops testing conditions after the first match.
IP based Firewall rules are specific to source and destination IP addresses and the unique rules and
precedence orders assigned. Both IP and non-IP traffic on the same Layer 2 interface can be filtered by
applying both an IP ACL and a MAC
A MAC Firewall rule uses source and destination MAC addresses for matching operations, where the
result is a typical allow, deny or mark designation to WLAN packet traffic.
Keys 1-4 Use the Key #1-4 areas to specify key numbers. For WEP 128 (104-bit
key), the keys are 26 hexadecimal characters in length. Select one of
these keys for default activation by clicking its radio button.
Restore Default WEP
Keys If you feel it necessary to restore the WEP algorithm back to its default
settings, select the
Restore Default WEP Keys button.