Lancom 3550 Wireless, Руководство пользователя

Страница: 66 / 81

LANCOM 3550 Wireless
Chapter 7: Security settings
66
EN
Have you secured your wireless network encryption, an ACL and
LEPS?
With the help of 802.11i, WPA or WEP, you can encrypt the data in your
wireless network with different encryption methods such as AES, TKIP or
WEP. LANCOM Systems recommends the strongest possible encryption by
using 802.11i and AES. If the WLAN client adapters do not support these,
then you should use TKIP or at least WEP. Make sure that the encryption
function in your device is activated, and that at least one passphrase or
WEP key has been entered and selected for application.

As standrad, WEP128 encryption is activated for every unconfigured
device.
To check the WEP settings, open LANconfig, go to the configuration area
and select 'WLAN security' on the '802.11i/WEP' tab to view the encryp-
tion settings for the logical and physical WLAN interfaces.

Change the default WEP password immediately after configuring the
router for the first time.
With the Access Control List (ACL) you can permit or prevent the access to
your wireless LAN by individual clients. The decision is based on the MAC
address that is permanently programmed into wireless network adapters.
To check the Access Control List, go to the configuration area in
LANconfig and select 'WLAN security' on the 'Stations' tab.
The LANCOM Enhanced Passphrase Security (LEPS) uses an additional col-
umn in the ACL to assign an individual passphrase consisting of any 4 to
64 ASCII characters to each MAC address. The connection to the access
point and the subsequent encryption with IEEE 802.11i or WPA is only
possible with the right combination of passphrase and MAC address.
Have you set the 802.1x functions for particularly sensitive data
exchange in the wireless network?
If you have a particularly sensitive data exchange in your wireless net-
work, you can use the IEEE-802.1x technology for a more extensive pro-
tection. To control or to activate the IEEE-802.1x settings, select in
LANconfig the configuration area 'User registration'.