Chapter 7
Security
Winlink 1000’s integrated advanced encryption support provides
enhanced air interface security for carriers and private networks by
ensuring user data protection with one of the most sophisticated
commercially available combined encryption and authentication
techniques, CCM/AES. This technique combines message
authentication (preventing anti-spoofing and replay protection) with
commercial encryption, and complies with the IEEE 802.11i (phase iii)
security recommendations.
CCM/AES uses a symmetric 128-bit encryption key (EK), and a nonce,
and provides both message encryption and authenticating signature.
The nonce mechanism enables the receiver to remember already
received genuine messages and reject all replayed messages.
Initial encryption and authentication is based on a user-defined master
key (Link Password). While standard Wireless LAN encrypts only the
Ethernet Payload, the AES encrypts both the source and destination
MAC addresses.
Entering and Changing Passwords
There are two passwords necessary to use the WinLink system:
•
Management Password required for running the Management
software
•
Link Password used for encryption purposes. This link
password is entered when installing or configuring the link.
Changing the Management Password
Æ
To change the management password
1.
From the Tools menu, select Change Password.
The Change Password dialog box appears.
2.
Enter the current password, and the new password.
3.
Click
OK
to confirm.