Cisco Cisco Access Registrar 4.2 Specifikace stáhnout pdf (Strana 32)

1-6

Cisco Wireless LAN Controller Configuration Guide

OL-13826-01

Chapter 1 Overview

Layer 2 and Layer 3 LWAPP Operation

• RSN with or without Pre-Shared key.

• Cranite FIPS140-2 compliant passthrough.

• Optional MAC filtering.

The WEP problem can be further solved using industry-standard Layer 3 security solutions, such as:

• Passthrough VPNs

• The Cisco Wireless LAN Solution supports local and RADIUS MAC address filtering.

• The Cisco Wireless LAN Solution supports local and RADIUS user/password authentication.

• The Cisco Wireless LAN Solution also uses manual and automated disabling to block access to

network services. In manual disabling, the operator blocks access using client MAC addresses. In

automated disabling, which is always active, the operating system software automatically blocks

access to network services for an operator-defined period of time when a client fails to authenticate

for a fixed number of consecutive attempts. This can be used to deter brute-force login attacks.

These and other security features use industry-standard authorization and authentication methods to

ensure the highest possible security for your business-critical wireless LAN traffic.

Cisco WLAN Solution Wired Security

Many traditional access point vendors concentrate on security for the Wireless interface similar to that

described in the “Operating System Security” section on page 1-5. However, for secure Cisco Wireless

LAN Controller Service Interfaces, Cisco Wireless LAN Controller to access point, and inter-Cisco

Wireless LAN Controller communications during device servicing and client roaming, the operating

system includes built-in security.

Each Cisco Wireless LAN Controller and Cisco 1000 series lightweight access point is manufactured

with a unique, signed X.509 certificate. These signed certificates are used to verify downloaded code

before it is loaded, ensuring that hackers do not download malicious code into any Cisco Wireless LAN

Controller or Cisco 1000 series lightweight access point.

Cisco Wireless LAN Controllers and Cisco 1000 series lightweight access points also use the signed

certificates to verify downloaded code before it is loaded, ensuring that hackers do not download

malicious code into any Cisco Wireless LAN Controller or Cisco 1000 series lightweight access point.

Layer 2 and Layer 3 LWAPP Operation

The LWAPP communications between Cisco Wireless LAN Controller and Cisco 1000 series

lightweight access points can be conducted at ISO Data Link Layer 2 or Network Layer 3.

Note The IPv4 network layer protocol is supported for transport through an LWAPP controller system. IPv6

(for clients only) and Appletalk are also supported but only on 4400 series controllers and the Cisco

WiSM. Other Layer 3 protocols (such as IPX, DECnet Phase IV, OSI CLNP, and so on) and Layer 2

(bridged) protocols (such as LAT and NetBeui) are not supported.

1 2 ... 27 28 29 30 31 32 33 34 35 36 37 ... 635 636

Žádné komentáře

Cisco Cisco Access Registrar 4.2 Specifikace Strana 32