Manuals / Dell / Computer Equipment / Network Card

Dell W-AP93, W- AP92, W-AP105, AP-92, AP-175 manual Wireless Client Services, Unauthenticated Services

Models: W-AP105 AP-105 AP-175 W-AP175 AP-93 W- AP92 W-AP93 AP-92

1 45

Download 45 pages 52.12 Kb

Page 37

	Service	Description	CSPs Accessed (see section 6
			below for complete description of
			CSPs)

			∙ 802.11i AES-CCM key
			∙	802.11i GMK
			∙	802.11i GTK

	Use of WPA pre-shared key for	When the module is in mesh
	establishment of IEEE 802.11i	configuration, the inter-module	∙	WPA2 PSK
	keys	mesh links are secured with	∙	WPA2 PSK
	keys	mesh links are secured with
		802.11i. This is authenticated
		with a shared secret

4.2.3 Wireless Client Services

The following module services are provided for the Wireless Client role in each of FIPS approved modes defined in section 3.3.

	Service	Description	CSPs Accessed (see section 6
			below for complete description of
			CSPs)

	Generation and use of 802.11i	In all modes, the links between	∙	802.11i PMK
	cryptographic keys	the module and wireless client are	∙	802.11i PTK
		secured with 802.11i.	∙	802.11i PTK
		secured with 802.11i.
			∙	802.11i EAPOL MIC
				Key
			∙	802.11i EAPOL
				Encryption Key
			∙ 802.11i AES-CCM key
			∙	802.11i GMK
			∙	802.11i GTK

	Use of WPA pre-shared key for	When the module is in advanced
	establishment of IEEE 802.11i	Remote AP configuration, the	∙	WPA2 PSK
	keys	links between the module and the	∙	WPA2 PSK
	keys	links between the module and the
		wireless client are secured with
		802.11i. This is authenticated
		with a shared secret only.

	Wireless bridging services	The module bridges traffic
		between the wireless client and	None
		the wired network.	None
		the wired network.

4.2.4 Unauthenticated Services

The module provides the following unauthenticated services, which are available regardless of role. No CSPs are accessed by these services.

37

Image 37

Dell W-AP93, W- AP92, W-AP105, AP-92, AP-175, AP-93, W-AP175, AP-105 manual Wireless Client Services, Unauthenticated Services

Contents

Version Feb Aruba Networks Crossman Ave Sunnyvale, CA Page AP-105 Series Aruba Dell Relationship Acronyms and AbbreviationsAP-175 Series Security Levels Physical Security ROLES, Authentication and Services Aruba Dell Relationship IntroductionAcronyms and Abbreviations IPSec GHz AP-92 Product OverviewPhysical Description Aruba Part Number Dell Corresponding Part Number PWR AP-92 Indicator LEDs Label Function Action StatusEnet Label Function Action Status AP-93 AP-93 Indicator LEDs Label Function Action Status AP-105 Series AP-105 Wireless Access Point AP-105 Indicator LEDs Label Function Action Status AP-175 Series AP-175 Wireless Access Point Physical Description Function Action Status Position AP-175 Indicator LEDs Label Security Levels Module ObjectivesPhysical Security Applying TELs AP-92 Tel placement front view 2 AP-92 TEL Placement Aruba AP-92 Tel placement right view Aruba AP-92 Tel placement bottom view 3 AP-93 TEL Placement Aruba AP-93 Tel placement left view Aruba AP-93 Tel placement top view 4 AP-105 TEL Placement Aruba AP-105 Tel placement left view Aruba AP-105 Tel placement bottom view 5 AP-175 TEL Placement Aruba AP-175 Tel placement back view Aruba AP-175 Tel placement top view Inspection/Testing of Physical Security Mechanisms Modes of Operation Configuring Remote AP Fips Mode Enable Fips mode on the AP. This accomplished by going to Configuring Remote Mesh Portal Fips Mode Configuring Remote Mesh Point Fips Mode Operational Environment Verify that the module is in Fips mode Fips 140-2 Logical Interfaces Module Physical Interface Logical Interfaces Crypto Officer Authentication Roles, Authentication and ServicesRoles Wireless Client Authentication User AuthenticationStrength of Authentication Mechanisms Authentication Mechanism Strength WPA2-PSK Crypto Officer Services ServicesWPA2 PSK KEK PMK User ServicesPTK Eapol MIC Unauthenticated Services Wireless Client Services ∙ FTP ∙ Tftp ∙ NTP Non-FIPS Approved Algorithms Cryptographic Algorithms Hmac Critical Security Parameters RNG AES-CCM PSK GTK GMK Self Tests For an AES Atheros hardware Post failure