Fortress Technologies BreadCrumb Wireless Network manual Access Control Lists ACLs, Wep, Key

Page 42

Chapter 5. Using BCAdmin™

WEP

WEP (Wired Equivalency Protocol) was the first scheme to provide security for 802.11 communications. Although since its release it has been determined to contain serious weaknesses, WEP remains an effective means to prevent casual eavesdropping.

WEP settings are made network-wide; all BreadCrumb devices and wireless clients must agree on a WEP key in order to establish and maintain communications.

To enable WEP on a BCWN, make sure that all of the BreadCrumbs to configure are visible in BCAdmin. Then choose Security, then WEP Settings to display the following window:

Figure 5-12. WEP Configuration Window

1.WEP

This dropdown allows the administrator to enable or disable WEP on all BreadCrumb devices currently visible in BCAdmin.

2.Key

A 40-bit or 104-bit hexadecimal key is specified in this field. If this field is left blank, WEP can be enabled using a previously configured key.

Access Control Lists (ACLs)

A BCWN may be configured with a network-wide Access Control List (ACL) to specify a list of devices to allow or disallow on the network. Each device communicating on the network (e.g., each BreadCrumb radio or laptop radio card) has a unique identifier known as a MAC address. ACLs consist of lists of these addresses to specify permitted or forbidden devices.

When enabled, the ACL may be in two modes: Deny by Default and Allow by Default. In Deny by Default mode, client devices and BreadCrumb devices are not permitted on the network unless they are

36

Image 42
Contents For the BreadCrumb Wireless Network Release Rajant CorporationPage Table of Contents Using BCAdmin TroubleshootingConfiguration Examples List of Tables List of FiguresPreface Purpose and ScopeUser Information What is a BreadCrumb? IntroductionBreadCrumb Devices Mesh by Channel and Essid Mobility through MeshingMesh a Definition ExampleMeshing Example 1 Full Connectivity Known Issues New Features Performance / Process ImprovementsIssues Resolved Upgrading to VersionInstalling / Upgrading BCAdmin Upgrading BreadCrumb FirmwareUpgrading to Version Flash Update Procedure for Version 2 and Version 3 Systems Version 3 Power InputUpgrading to Version Models XLV XLEBreadCrumb ME ModelsAvailable BreadCrumb Models External Connectors BreadCrumb WEBreadCrumb WE External Connectors BreadCrumb SEBreadCrumb SE External Connectors BreadCrumb XLBreadCrumb XL External Connector BreadCrumb XLVBreadCrumb XLV External Connectors BreadCrumb XLEBreadCrumb XLE External Connectors front Channel Assignments Deployment ConsiderationsAddressing BreadCrumb Device AddressesPhysical Placement and Other Considerations Line Of SightDeployment Considerations Device power To Device power Distance Best-Case Distances by Radio PowerDistance Weather InterferenceAltitude Using BCAdmin Screen LayoutUsing BCAdmin Topology AreaAnatomy of the BreadCrumb Box BreadCrumb Device NameNumber of Peers Time Since Last UpdateAnatomy of the Client Box Number of ClientsAnatomy of a Connection Line 802.11b Channel Line ColorBCAdmin Line Styles Legend Info Area Redundant Connection ExampleConfiguring Individual BreadCrumbs Link Detail TabsType General SettingsName LocationManual GPS Settings Latitude and Longitude Using BCAdmin ColorBattery Warning minutes AirFortress Encryption AES-256 and Set Access IDChannel Radio SettingsAccess Point MeshNone Reachback SettingsReachback Interface EthernetMode Using BCAdmin RadioRadio 2 ad hoc AutomaticAlternate Gateway Using BCAdmin Gateway IngressDisabled WEP KeyForwarding Settings 11. BreadCrumb Properties Forwarding TabSecurity Example Port Forwarding Configuration for a Web ServerAccess Control Lists ACLs WEPKey Deny by default allow only permitted devices Allow by default deny only forbidden devicesAES-256 Encryption with AirFortress Registering AirFortressSetting the Access ID 14. Set Access ID WindowHarris SecNET11 Encrypting Wired TrafficZeroizing the Access ID Enabling/Disabling AirFortress EncryptionBCAdmin Preferences SecNet11 Key FillingBreadCrumb inactivity threshold seconds Mapping with Fugawi Tracker Unencrypted Point-to-Multipoint Connecting Remote Wired LANsConfiguration Examples Encrypted Point-to-PointConvoy with UAV-Based Camera for Forward Observation Configuration ExamplesEncrypting a Video Feed Configuration Examples Individual BreadCrumbs TroubleshootingBreadCrumb Wireless Network Sporadic Network ConnectivitySporadic Network Connectivity Issues BreadCrumb Device Cannot Connect to BcwnTroubleshooting BCAdminRestoring Default Settings Factory Reset BreadCrumb-BCWN Connectivity IssuesFactory Reset Button Case Study Military Exercise in Thailand Joint Exercise NetworkBCAdmin screen during exercise showing BreadCrumb network Case Study Military Exercise in ThailandBalloon with Camera and BreadCrumb 802.11b BCAdminGlossary BreadCrumb / BreadCrumb DeviceMAC Address PeerPending peer Reachback Appendix A. Status Indicator LED Color Blinking/Solid StatusTable A-1. LED Status Indications Appendix B. Radio Frequencies 802.11b Channel Frequency GHzTable B-1 .11b Channel Frequency Table Appendix C. Customer Service