Motorola P-7131N-FGR, Руководство по продукции

Страница: 29 / 700

Introduction 1-13
the Advanced Encryption Standard (AES). CCMP computes a Message Integrity Check (MIC) using the
proven Cipher Block Message Authentication Code (CBC-MAC) technique. Changing just one bit in a
message produces a totally different result.
WPA2-CCMP is based on the concept of a Robust Security Network (RSN), which defines a hierarchy
of keys with a limited lifetime . Messages are encrypted using a 128-bit secret key and a 128-bit block
of data. The end result is an encryption scheme as secure as any the access point provides.
For detailed information on WPA2-CCMP, see Configuring WPA2-CCMP (802.11i) on page 6-11 .
1.2.11.3 Firewall Security
A firewall keeps personal data in and hackers out. The access point’s firewall prevents suspicious
Internet traffic from proliferating the access point managed network. The access point performs
Network Address Translation (NAT) on packets passing to and from the WAN port. This combination
provides enhanced security by monitoring communication with the wired network.
For detailed information on configuring the access point’s firewall, see Configuring Firewall Settings
on page 6-13 .
1.2.11.4 VPN Tunnels
Virtual Private Networks (VPNs) are IP-based networks using encryption and tunneling providing
users remote access to a secure LAN. In essence, the trust relationship is extended from one LAN
across the public network to another LAN, without sacrificing security. A VPN behaves like a private
network; however, because the data travels through the public network, it needs several layers of
security. The access point can function as a robust VPN gateway.
For detailed information on configuring VPN security support, see Configuring VPN Tunnels on page
6-22 .
1.2.11.5 Content Filtering
Content filtering allows system administrators to block specific commands and URL extensions from
going out through the WAN port. Therefore, content filtering affords system administrators selective
control on the content proliferating the network and is a powerful screening tool. Content filtering
allows the blocking of up to 10 files or URL extensions and allows blocking of specific outbound
requests.
For detailed information on configuring content filtering support, see Configuring Content Filtering
Settings on page 6-39 .