ZyXEL Communications USG110, Руководство пользователя

Страница: 831 / 1090

Chapter 43 Object
ZyWALL USG Series User’s Guide
831
Figure 572 Rogue AP Example
In the example above, a corporate network’s security is compromised by a rogue AP ( RG ) set up by an
employee at his workstation in order to allow him to connect his notebook computer wirelessly ( A ). The
company’s legitimate wireless network (the dashed ellipse B ) is well-secured, but the rogue AP uses
inferior security that is easily broken by an attacker ( X ) running readily available encryption-cracking
software. In this example, the attacker now has access to the company network, including sensitive
data stored on the file server (
C ).
Friendly APs
If you have more than one AP in your wireless network, you should also configure a list of “friendly” APs.
Friendly APs are other wireless access points that are detected in your network, as well as any others that
you know are not a threat (those from recognized networks, for example). It is recommended that you
export (save) your list of friendly APs often, especially if you have a network with a large number of
access points.
43.5 ZyMesh Overview
This section shows you how to configure ZyMesh profiles for the Zyxel Device to apply to the managed
APs.
ZyMesh is a Zyxel proprietary protocol that creates wireless mesh links between managed APs to expand
the wireless network. Managed APs can provide services or forward traffic between the Zyxel Device
and wireless clients. ZyMesh also allows the Zyxel Device to use CAPWAP to automatically update the
configuration settings on the managed APs (in repeater mode) through wireless connections. The
managed APs (in repeater mode) are provisioned hop by hop.
The managed APs in a ZyMesh must use the same SSID, channel number and pre-shared key. A manged
AP can be either a root AP or repeater in a ZyMesh.