PMP 450 Planning Guide
Security planning
This section describes how to plan for PMP 450 networks to operate in secure mode.
Isolating APs from the Internet
Ensure that the IP addresses of the APs in your network
•
are not routable over the Internet.
•
do not share the subnet of the IP address of your user.
RFC 1918, Address Allocation for Private Subnets, reserves for private IP networks three blocks of IP addresses
that are not routable over the Internet:
•
/8 subnets have one reserved network, 10.0.0.0 to 10.255.255.255.
•
/16 subnets have 16 reserved networks, 172.16.0.0 to 172.31.255.255.
•
/24 subnets have 256 reserved networks, 192.168.0.0 to 192.168.255.255.
Managing module access by passwords
Adding a user for access to a module
From the factory, each module has a preconfigured administrator-level account in the name
root
, which initially
requires no associated password. This is the same
root
account that you may have used for access to the module
by
ftp
. When you upgrade a module
•
an account is created in the name
admin
.
•
both
admin
and
root
inherit the password that was previously used for access to the module:
o
the
Full Access
password, if one was set.
o
the
Display-Only Access
password, if one was set and no Full Access password was set.
If you use Wireless Manager, do not delete the root account from any module. If you use an NMS that
communicates with modules through SNMP, do not delete the root account from any module unless you first can
confirm that the NMS does not rely on the root account for access to the modules.
Each module supports four or fewer user accounts, regardless of account levels. The available levels are
•
ADMINISTRATOR, who has full read and write permissions. This is the level of the
root
and
admin
users,
as well as any other administrator accounts that one of them creates.
•
INSTALLER, who has permissions identical to those of ADMINISTRATOR except that the installer cannot
add or delete users or change the password of any other user.
•
TECHNICIAN, who
pmp-0047 (March 2014)
1-127
Summary of Contents for PMP 450
Page 1: ...Cambium PMP 450 Planning Guide System Release 13 1 ...
Page 13: ...PMP 450 Planning Guide pmp 0047 March 2014 1 3 ...
Page 42: ...PMP 450 Planning Guide Figure 14 Custom Frequency tab of the SM 1 32 pmp 0047 March 2014 ...
Page 58: ...PMP 450 Planning Guide Figure 16 AP web based management screenshot 1 48 pmp 0047 March 2014 ...
Page 82: ...PMP 450 Planning Guide 1 72 pmp 0047 March 2014 ...
Page 155: ...PMP 450 Planning Guide pmp 0047 March 2014 1 145 ...