background image

SPEEDLAN TM

24

11 Mb RF Security Setup

 – These settings are used to encrypt data that will be transmitted by the 11 Mb RF

port and also to decrypt data that is received by 11 Mb RF port. You may define up to 4 encryption keys to be
used for decrypting incoming data and one key for encrypting outgoing data.

Check the box labeled “Enable Encryption” to enable the encryption features.  You will still need to define at
least one encryption key before your wireless traffic will be transmitted using wireless data encryption.

The 

Encryption Key

 can be defined using either:

5 alphanumeric characters in the range of “a-z”, “A-Z”,
and “0-9”

A 10 digit hexadecimal value using the range “A-F” and
“0-9”.  If you choose to use the hexadecimal method, use
the prefix “0x” (zero, x) in defining the key

Examples:

Alphanumeric:  

a5F2z

Hexadecimal:  

0xA95F2BR39K

Write down the values you enter as Encryption Keys and store
them in a secure place.  The values you enter will only be visible
when they are entered for the first time.  Each time this option is
displayed after the initial setup, the values will appear only as

xxxxxxxxxx

Warning:  This setting must be set to the same value on all
XE units you wish to have communicate together.  Failure
to set them to the same value will prevent any communications from taking place. (e.g. for multipoint
to work properly, the base station AND all of the satellite units must use the same Encryption Key
setting.

There is also an option to 

Deny non encrypted Data

.  This feature is disabled by default and is designed

primarily for multipoint SPEEDLAN installations where it may not be necessary to run using data encryption at
all locations.  If you enable this option, any data received by this SPEEDLAN TM unit will not be passed to the
wired network interface.

Standard

 – This setting limits the card to providing 2 Mbps of bandwidth. The receiver sensitivity of the radio

with this setting is –89 dBm.  You must use this setting if you want your XE unit to communicate with an older
SPEEDLAN unit that uses a 2 Mbps radio.

Low

 - This setting limits the card to providing 1 Mbps of bandwidth. The receiver sensitivity of the radio with

this setting is –92 dBm.

Warning:  This setting must be set to the same value on all XE units you wish to have communicate
together.  Failure to set them to the same value will prevent any communications from taking place.

Summary of Contents for SPEEDLAN TM 6000

Page 1: ...PEEDLAN SPEEDLAN SPEEDLAN TM 6000 OPERATOR S MANUAL Version 1 0 Last revised June 2000 Division 941 358 9283 941 355 0219 FAX 800 721 9283 www speedlan com sales speedlan com 1748 Independence Blvd C...

Page 2: ......

Page 3: ...may be purchased for 10 of the original list price Terms of the Extended Warranty include Spare in the Air privileges to allow the use of parts or a spare unit temporarily Spare in the Air Loaner Unit...

Page 4: ...remedies Wave Wireless shall not be liable for any direct indirect special incidental or consequential damages whether based on contract tort or any legal theory OTHER IMPORTANT STATEMENTSAND WARNINGS...

Page 5: ...ProtocolFiltering 27 Ethernet Protocols 27 MACFiltering 28 PermitEthernetMulticasts 28 PermitEthernetBroadcasts 29 StormThresholds 29 Tunnel Partners 30 Outgoing NAT 49 6 IP ROUTER SETUP 53 IP Router...

Page 6: ......

Page 7: ...SPEEDLAN TM INTRODUCTION...

Page 8: ......

Page 9: ...uter contained in the SPEEDLAN TM is intended to provide network security between a local LAN and a campus or enterprise wide network and since using multiple bridges in a Spanning Tree could compromi...

Page 10: ...rks Learned Table Lockdown Expanded IP ARP Support Automatic Broadcast Storm Protection and Notification SNMP Features IP ping Support IP SNMP Support MIB II Ethernet Inteface SNMP and Bridge MIB IP S...

Page 11: ...SPEEDLAN TM 11 USING CONFIGURATOR...

Page 12: ......

Page 13: ...ote SPEEDLANTM configuration opened with the Configuration Utility before any configurationfunctionsmaybeperformed Afteryouhaveopenedtheremotedeviceandconfiguredit youcan then save your configuration...

Page 14: ...nConfigFile Thisfunctionisusedtoopenaconfigurationfilefromdisk OpenRemoteConfig Thisopenstheconfigurationfiledirectlyfromaremotedevice Save Config Saves the configuration you are working on to the pla...

Page 15: ...SPEEDLAN TM 15 CONFIGURING SPEEDLAN TM...

Page 16: ......

Page 17: ...outing will work properly only if the routes are set up in the IP Route Menu If the routes are not set up properly before you save the configuration the bridge will become inoperable Default is off En...

Page 18: ...ion It is not shipped standard as part of the XE units If you did not purchase it when you originally bought the SPEEDLAN TM units it can be purchased later as a software upgrade Data encryption is di...

Page 19: ...sses into one or more global public network IP addresses This means that outsiders will onlyviewthesingle ormoreifdesignated IPnetworkaddressassignedforglobalviewingontheInternet For more informatoin...

Page 20: ...portion of the configurationwhichcontrolshowtheindividualinterfacesareconfigured TheAdvanced Interface Setup has a few more advanced settings but essentially they are the same set up screen Note that...

Page 21: ...alsosupportsfull duplexoperationwhenconnected to either a 10 or 100 Mbps LAN port The default setting is for Half Duplex The interface can be configured to operate inFullDuplexusingtheoptionsonthisset...

Page 22: ...communicate directly with the base station The base station is respon sible for repeating packets that need travel between the satellite stations The Non Polling Base Station does notallocatebandwidt...

Page 23: ...RFInterface Setup Network ID The Network ID is a security setting that allows the SPEEDLAN TM unit to reject packets from other wireless bridgesinthearea Althoughthebridgingorroutingtablewould reject...

Page 24: ...he values will appear only as xxxxxxxxxx Warning This setting must be set to the same value on all XE units you wish to have communicate together Failure to set them to the same value will prevent any...

Page 25: ...SPEEDLAN TM BRIDGING SETUP...

Page 26: ......

Page 27: ...figured to pass all net work protocols When you press the Edit button you will be presented with a list of protocolswhichyoucanselectforfiltering Afterselectingtheprotocols highlightthem onthisscreena...

Page 28: ...esetypesofpackets whichareconsideredbadpackets Ourstudieshaveshownthat a common failure mode of many Ethernet interfaces and net workingsoftwareistotransmitpacketslikethese Ifyoudonot need to permit S...

Page 29: ...ble that contains each source address and the interface number that address was received on If a source address is later seen on a different interface the bridge will immediately change the interface...

Page 30: ...s determined to be over The storm will be determined to be over when 30 seconds have passed in which every one second periodhaslessthenthestatedthresholdin broadcast or multicast packets The set tings...

Page 31: ...rt mechanism for data between them The encapsulated data packets can be optionally encrypted to make the virtual private network more secure Encrypt Bridge Tunnel Packets If purchased brouters from Wa...

Page 32: ...SPEEDLAN TM 32...

Page 33: ...SPEEDLAN TM 33 Setting Up the IP Addresses IP Host Setup...

Page 34: ...ddresscontains32bitsofinformation whichisdividedintothefollowing Two sections the network address and the node address also known as the host address To keep it simple lets call it four bytes octets N...

Page 35: ...or a total of 65 534 nodes Class C addresses use 24 bits 3 octets for the network portion and 8 bits two octets for the node or host section of the address This provides 16 7 million networks with 256...

Page 36: ...eate multiple networks within one ClassA B or C network Each data link octet contains its own unique identifier also known as the subnet Also each node on the same data link must belong on the same su...

Page 37: ...and D as well Router D knows exactly which subnet to transfer or turn the packets to by reading its IP and subnet mask address Note that each subnet on this network is 255 255 255 192 Why is 192 the...

Page 38: ...is DHCP DynamicHostConfigurationProtocol DHCP allowsnetworkadministrators you toassignstaticor dynamic IP addresses for the period of time needed to connect to the Internet Think of DHCP as leasing a...

Page 39: ...when there is a translation among an Internet Protocol IP address used within one network designated as inside network to a different IP addresses within another network designated as outside network...

Page 40: ...will be re addressed as 204 101 20 3 public address of SPEEDLAN TM When the packet returns to the SPEEDLAN TM and then back to the private network the packet will be re addressed the IP address of the...

Page 41: ...k that you would like to be available on the public network For example if a web server on a server is IPAddress 10 0 0 3 you can create a pair that will specify that all requests received on the publ...

Page 42: ...lick Scan The Scan dialog box appears Select the appropriate brouter and click OK Click OKagain Amessageboxappearsconfirmingthatthe Configurationhasbeenreadfromthe Bridge i e 128 104 224 1 Click OK To...

Page 43: ...ained from the network administrator IPhost or hostprovider Default Router IP If you have an established network use the IP address for the router already set up for that network If you do not have an...

Page 44: ...face drop down list Make sure that you select the interface that the DHCP server is located on Note The information for Default TTL should already be entered The IP host on the Internet sends out each...

Page 45: ...Translation This feature enables a company to map the private networks IP addresses into one or more global public network IP addresses This meansthatoutsiderswillonlyviewthesingle ormoreifdesignated...

Page 46: ...r computer Note Click Select to view the IP Mask List Select the appropriate IP Mask and click OK 5 Enterthedomainnameinformation 1st DNS ServerIP This setting will specify the client s 1st DNS Server...

Page 47: ...see pages 54 and 55 TosetupoutgoingNAT dothefollowing 1 From the Setup menu choose General Setup The General Setup dialog box appears 2 Select the Enable Outcoming NetworkAddress Translation check bo...

Page 48: ...ho in the private network made a request to an address in the public network This translates the IP addresses from one side to another hiding the private network from the public This means that the pu...

Page 49: ...p menu choose General Setup The General Setup dialog box appears 2 Select the Enable Incoming NetworkAddressTranslation check box Click OK 3 From the Setup menu choose Incoming NetworkAddressTranslati...

Page 50: ...e outside or public network will be translated to the appropriate private IP address This may be necessary if you have a server or workstation or computer that needs to be connected to a remote networ...

Reviews: