Mitel WAP54GP manual Security Threats Facing Wireless Networks

Page 50

Wireless-G Access Point with Power Over Ethernet

SSID. There are several things to keep in mind about the SSID:

1.Disable Broadcast

2.Make it unique

3.Change it often

Most wireless networking devices will give you the option of broadcasting the SSID. While this option may be more convenient, it allows anyone to log into your wireless network. This includes hackers. So, don’t broadcast the SSID.

Wireless networking products come with a default SSID set by the factory. (The Linksys default SSID is “linksys”.) Hackers know these defaults and can check these against your network. Change your SSID to something unique and not something related to your company or the networking products you use.

Change your SSID regularly so that any hackers who have gained access to your wireless network will have to start from the beginning in trying to break in.

MAC Addresses. Enable MAC Address filtering. MAC Address filtering will allow you to provide access to only those wireless nodes with certain MAC Addresses. This makes it harder for a hacker to access your network with a random MAC Address.

WEP Encryption. Wired Equivalent Privacy (WEP) is often looked upon as a cure-all for wireless security concerns. This is overstating WEP’s ability. Again, this can only provide enough security to make a hacker’s job more difficult.

There are several ways that WEP can be maximized:

1.Use the highest level of encryption possible

2.Use “Shared Key” authentication

3.Change your WEP key regularly

WPA. Wi-Fi Protected Access (WPA) is the newest and best available standard in Wi-Fi security. Two modes are available: Pre-Shared Key and RADIUS. Pre-Shared Key gives you a choice of two encryption methods: TKIP (Temporal Key Integrity Protocol), which utilizes a stronger encryption method and incorporates Message Integrity Code (MIC) to provide protection against hackers, and AES (Advanced Encryption System), which utilizes

asymmetric 128-Bit block data encryption. RADIUS (Remote Authentication Dial-In User Service) utilizes a RADIUS server for authentication and the use of dynamic TKIP, AES, or WEP.

Appendix B: Wireless Security

IMPORTANT: Always remember that each device in your wireless network MUST use the same encryption method and encryption key or your wireless network will not function properly.

44

Security Threats Facing Wireless Networks

Image 50
Contents Wireless- G How to Use this User Guide Copyright and TrademarksTable of Contents Frequently Asked Questions Appendix a TroubleshootingAppendix B Wireless Security List of Figures Front Panel21 Administration Factory Default Introduction WelcomeWhat’s in this User Guide? Wireless-G Access Point with Power Over Ethernet Roaming Planning Your Wireless NetworkNetwork Topology Network Layout Front Panel Back Panel Connections for Setup OverviewWall-Mount Option Placement OptionsStand Option Accessing the Utility Login ScreenNavigating the Utility SetupWireless Status AP ModeAdministration IP Settings Setup TabNetwork Setup Setup Time Tab TimeWireless Basic Wireless Settings Tab Wireless NetworkWireless-G Access Point with Power Over Ethernet Disabled Wireless Wireless Security TabWireless Security WPA-Personal aka WPA-PSKWPA2-Personal WPA2-Personal MixedWPA-Enterprise WPA2-Enterprise11 Wireless Wireless Security WPA2 Enterprise Mixed WPA2-Enterprise MixedRadius Select MAC Address From Networked Computers Wireless Wireless Connection Control TabWireless Connection Control Wireless Advanced Wireless Settings Tab Advanced WirelessWireless-G Access Point with Power Over Ethernet AP Mode Tab MAC Address17 Wireless Repeater 18 Site Survey Web Access Administration Management TabAP Password Local AP PasswordWireless-G Access Point with Power Over Ethernet Administration Log Tab LogWireless-G Access Point with Power Over Ethernet Factory Default Administration Factory Default TabAdministration Firmware Upgrade Tab Firmware UpgradeAdministration Reboot Tab RebootAdministration Config Management Tab Config ManagementLocal Network Status Local Network TabInformation Status Wireless Tab 26 Status WirelessStatus System Performance Tab WiredWireless System PerformanceWireless-G Access Point with Power Over Ethernet Appendix a Troubleshooting Frequently Asked QuestionsWhat Ieee 802.11g features are supported? What is the ISM band? Does the Access Point function as a firewall? Security Threats Facing Wireless Networks Appendix B Wireless SecuritySecurity Precautions Security Threats Facing Wireless Networks Wireless-G Access Point with Power Over Ethernet Figure C-1 Firmware Upgrade Appendix C Upgrading FirmwareNetwork Neighborhood/My Network Places Appendix D Windows HelpShared Resources Appendix E Glossary Wireless-G PCI Adapter with SpeedBooster Wireless-G PCI Adapter with SpeedBooster Wireless-G PCI Adapter with SpeedBooster Wireless-G PCI Adapter with SpeedBooster Appendix F Specifications Operating Humidity Storage HumidityAppendix G Warranty Information Limited WarrantyAppendix H Regulatory Information FCC StatementWireless-G Access Point with Power Over Ethernet Wireless-G Access Point with Power Over Ethernet Wireless-G Access Point with Power Over Ethernet Wireless-G Access Point with Power Over Ethernet Dual-Band Wireless Access Point Information section in this Guide Appendix I Contact InformationNeed to contact Linksys?

WAP54GP specifications

The Mitel WAP54GP is a high-performance wireless access point designed to provide seamless connectivity and robust network capabilities for small to medium-sized enterprises. This device is particularly noteworthy for its comprehensive feature set that addresses the growing demand for reliable wireless communication within business environments.

One of the standout features of the WAP54GP is its ability to support Power over Ethernet (PoE), enabling the access point to receive power through the same Ethernet cable that connects it to the network. This eliminates the need for separate power sources, simplifying installation and reducing clutter. The device supports IEEE 802.3af standards for PoE, making it versatile for various deployment scenarios.

The WAP54GP operates on both the 2.4 GHz and 5 GHz frequency bands, leveraging dual-band technology to provide enhanced performance and flexibility. This dual-band functionality not only allows for increased bandwidth but also minimizes interference, making it ideal for environments with numerous wireless devices. The device supports the latest Wi-Fi standards, including 802.11n, ensuring high data transfer rates and improved range.

Another significant aspect of the WAP54GP is its easy management capabilities. The access point comes with a user-friendly web-based interface that allows network administrators to configure settings effortlessly, monitor network performance, and troubleshoot issues. It also supports multiple SSIDs, enabling businesses to segment their networks for different user groups, enhancing security and access control.

Security is a key consideration for any wireless network, and the WAP54GP addresses these concerns with robust measures. It supports advanced encryption protocols such as WPA2 and WPA3, ensuring that user data remains protected against unauthorized access. Additionally, the device incorporates features like MAC address filtering and wireless intrusion detection, providing an extra layer of security.

In terms of scalability, the WAP54GP can be easily integrated into existing network infrastructure. It is designed to work with various network topologies and can be deployed in both standalone and clustered configurations. This flexibility allows businesses to scale their wireless networks according to their growing needs, making it an ideal choice for organizations looking for a long-term, adaptable solution.

Overall, the Mitel WAP54GP is a powerful and multifunctional wireless access point that delivers impressive performance, robust security, and easy management. With its dual-band capabilities, PoE support, and scalable design, it is well-suited to meet the dynamic needs of modern business environments, ensuring reliable connectivity for all users.