Psion Teklogix 9160 G2 Manual do Utilizador descarregar pdf (Página 117)

Chapter 10: Configuring Security

Understanding Security Issues On Wireless Networks

Psion Teklogix 9160 G2 Wireless Gateway User Manual 93

The following sections describe how to configure Security settings on the 9160 G2 Wireless

Gateway.

10.1 Understanding Security Issues On Wireless Networks

Wireless mediums are inherently less secure than wired mediums. For example, an Ethernet

NIC transmits its packets over a physical medium such as coaxial cable or twisted pair. A

wireless NIC broadcasts radio signals over the air allowing a wireless LAN to be easily

tapped without physical access or sophisticated equipment. A hacker equipped with a

laptop, a wireless NIC, and a bit of knowledge can easily attempt to compromise your wire-

less network. One does not even need to be within normal range of the access point. By

using a sophisticated antenna on the client, a hacker may be able to connect to the network

from many miles away.

The 9160 G2 Wireless Gateway provides a number of authentication and encryption

schemes to ensure that your wireless infrastructure is accessed only by the intended users.

The details of each security mode are described in the sections below.

See also the related topic, Appendix B: “Security Settings on Wireless Clients/RADIUS

Server” .

10.1.1 How Do I Know Which Security Mode To Use?

In general, we recommend that on your Internal network you use the most robust security

mode that is feasible in your environment. When configuring security on the access point,

you first must choose the security mode, then in some modes an authentication algorithm,

and whether to allow clients not using the specified security mode to associate.

Wi-Fi Protected Access (WPA) with Remote Authentication Dial-In User Service (RA-

DIUS) using the CCMP (AES) encryption algorithm provides the best data protection

available and is clearly the best choice if all client stations are equipped with WPA suppli-

cants. However, backward compatibility or interoperability issues with clients or even with

other access points may require that you configure WPA with RADIUS with a different en-

cryption algorithm or choose one of the other security modes.

That said, however, security may not be as much of a priority on some types of networks. If

you are simply providing internet and printer access, as on a guest network, setting the secu-

rity mode to None (Plain-text) may be the appropriate choice. To prevent clients from

accidentally discovering and connecting to your network, you can disable the broadcast

SSID so that your network name is not advertised. If the network is sufficiently isolated

from access to sensitive information, this may offer enough protection in some situations.

This level of protection is the only one offered for guest networks, and also may be the right

1 2 ... 112 113 114 115 116 117 118 119 120 121 122 ... 435 436

Sem comentários

Psion Teklogix 9160 G2 Manual do Utilizador Página 117