GE GFK-2489 - Manual (Page 65)

3-32 TranSphere TS Wireless Extended Range IP Networking Transceivers – January 2008 GFK-2489
3
Security Configuration
The TS Wireless system contains built-in security features for your transceivers and the
network. These options start with controlling remote access to the network via Telnet, Web
browser, and SNMP. Other areas include multiple levels of encryption and MD5-level security
for HTTP connections. The Security Configuration Menu contains all of the settings related to
these functions.
Encryption must be turned OFF prior to upgrading TS Wireless Remote radios with the new
firmware. Failure to turn encryption off results in loss of communication between an AP and
TS Wireless Remote radios. Once the firmware upgrade is complete, encryption may be re-
enabled.
Additionally, any changes to encryption settings should be made first at all Remote radios,
then at the AP. This prevents a loss of communication between the AP and Remote radios
due to security mismatches. Communication loss requires a personal visit to each affected
remote site, where restoration can be performed at the Remote itself (see Chapter 4: Remote
Radio Management
).
Security Configuration Menu
The Security Configuration Menu allows settings of several parameters related to network
access, user credentials, and encryption. A review of each item on the menu is important to
safeguarding your network from unauthorized access. Review these settings occasionally to
make sure they are applicable to the current state of your network.
Security Configuration Menu
A) Approve Remotes disabled H) Encryption Phrase --------
B) Encryption Enable disabled I) HTTP Security Mode Basic Auth
C) HTTP Access enabled J) Auto Key Rotation disabled
D) Telnet Access enabled K) Force Key Rotation
E) SNMP Mode v1-v2-v3 L) Max Remotes 100
F) Approved Remotes List N) User Passwords
G) Remote Access Mgr disabled N) Remote Access IP 224.254.1.10
Select a letter to configure an item, <ESC> for prev menu
▪ Approve Remotes —Enables authentication of Remote radios before granting access to
the network. Enabling forces the entra-NET radio to check the Approved Remotes List
(described below) before continuing the authorization process. Before enabling this option,
at least one entry must already exist in the Approved Remotes List. [Enabled, Disabled;
Disabled]