Colubris Networks CN3000 Administrator's Manual page 5

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Table of Contents - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Chapter 8
NOC authentication
Main benefits ...........................................................................................174
Activating a remote login page with NOC authentication..........................175
Colubris-AVPair value string ..............................................................175
Placeholders ......................................................................................175
How it works............................................................................................177
Addressing security concerns ..................................................................178
Securing the remote login page .........................................................178
Authenticating with the login application ...........................................178
Authenticating the CN3000 ................................................................178
NOC authentication list ......................................................................178
Setting up the certificates ........................................................................179
Install certificates on the web server..................................................179
Define attributes.................................................................................179
Install a certificate on CN3000 ...........................................................179
Authenticating customers ........................................................................180
Example 1 ..........................................................................................180
Example 2 ..........................................................................................180
Simple NOC authentication example ........................................................182
Configuration procedure ....................................................................182
Forcing customer logouts ........................................................................184
Chapter 9
SNMP interface
Configuring the SNMP interface...............................................................186
To configure SNMP options ...............................................................186
Attributes ...........................................................................................186
Agent .................................................................................................187
Traps ..................................................................................................187
Security..............................................................................................187
Standard MIBs .........................................................................................188
Management consoles .......................................................................188
MIB II support details ........................................................................188
Colubris Enterprise MIB ...........................................................................190
Chapter 10
SSL certificates
Overview of SSL certificates ....................................................................192
SSL authentication.............................................................................192
DNS and the CN3000's SSL certificate...............................................192
About certificate warning messages ........................................................194
Installing a new SSL certificate ................................................................196
Step 1: Creating an SSL certificate...........................................................197
Certificate tools ..................................................................................197
Obtaining a registered certificate........................................................197
Becoming a private CA.......................................................................199
Creating a self-signed certificate ........................................................202
Viewing the certificate ........................................................................203
Verifying the certificate ......................................................................204
Step 2: Preparing the certificate chain .....................................................205
Step 3: Converting a certificate to PKCS #12 format................................206
Step 4: Installing a new SSL certificate ....................................................207
Manual installation.............................................................................207
Automatic installation ........................................................................207
Step 5: Installing certificates in a browser ...............................................208
Internet Explorer ................................................................................208
Netscape Navigator ............................................................................212
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 5 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Chapter 11
173 Configuration parameters
Default wireless profile ............................................................................214
Access point ......................................................................................214
Radio .................................................................................................215
Wireless port .....................................................................................215
Wireless protection ..........................................................................216
Dynamic keys.....................................................................................217
Wireless profile list ..................................................................................218
WLAN profiles....................................................................................218
Wireless profile settings ..........................................................................219
Access point ......................................................................................219
HTML-based user logins....................................................................220
RADIUS accounting ...........................................................................220
Wireless protection ..........................................................................220
Traffic tunnelling (GRE)......................................................................221
Wireless links list .....................................................................................223
Wireless link configuration ................................................................223
Wireless link configuration ......................................................................224
Settings..............................................................................................224
Security..............................................................................................224
Addressing.........................................................................................224
Wireless neighborhood ............................................................................225
Wireless neighborhood ......................................................................225
LAN port configuration ............................................................................227
185
Link....................................................................................................227
Internet connection ..................................................................................228
Assign IP address via.........................................................................228
Link settings ......................................................................................228
Network address translation (NAT) ....................................................229
PPPoE client ......................................................................................229
DHCP client........................................................................................231
Static addressing ...............................................................................232
DHCP services .........................................................................................233
DHCP services ...................................................................................233
DHCP server ............................................................................................234
Addresses ..........................................................................................234
Settings..............................................................................................234
191
DHCP relay agent .....................................................................................235
DHCP relay agent settings .................................................................235
Bandwidth control....................................................................................236
Outgoing traffic throttle......................................................................236
IP routes ..................................................................................................237
Active routes ......................................................................................237
Default routes ....................................................................................237
Persistent routes................................................................................238
DNS/WINS settings..................................................................................239
DNS servers.......................................................................................239
GRE tunnel List ........................................................................................240
Defined GRE tunnels ..........................................................................240
GRE tunnel definition ...............................................................................241
Tunnel settings...................................................................................241
NAT List ...................................................................................................242
NAT mappings ...................................................................................242
NAT static mapping..................................................................................243
Mapping definition .............................................................................243
RIP configuration.....................................................................................244
RIP.....................................................................................................244
Authentication options .............................................................................245
CN3000 RADIUS authentication.........................................................245
HTML-based user logins....................................................................246
RADIUS accounting ...........................................................................246
213