Security Settings - Lancom 1751 UMTS Manual

110584_LC-1751-UMTS-MANUAL-EN.book Page 42 Tuesday, February 26, 2008 5:16 PM
LANCOM 1751 UMTS
Chapter 4: Security settings

4 Security settings

Your LANCOM device has numerous security functions. You find in this chapter
all information needed for an optimal protection of the base station.

4.1 Tips for handling keys
The security of encryption procedures can be substantially increased the by
paying attention to some important rules for handling keys.
4.2 The security settings wizard
Access to the configuration of a device permits not only to read out critical
information (e.g. Internet password). Rather, also the entire settings of the
security functions (e.g. firewall) can be altered then. So an unauthorized con-
figuration access endangers not only a single device, but the entire network.
Your LANCOM has a password protection for the configuration access. This
protection is already activated during the basic configuration by entering a
password.
The device locks access to its configuration for a specified period of time after
a certain number of failed log-in attempts. Both the number of failed attempts
and the duration of the lock can be set as needed. By default, access is locked
for a period of five minutes after the fifth failed log-in attempt.
42
You can carry out the configuration of security settings very quickly
and conveniently with the Security Wizards in LANconfig and
WEBconfig.
Keep keys as secret as possible.
Never note a key. Popular, but completely unsuitable are for example:
notebooks, wallets and text files in PCs. Do not share a key unnecessarily.
Select a random key.
Use randomized keys of character and number sequences. Keys from the
general linguistic usage are insecure.
Change a key immediately in case of suspicion.
It is time to change the key of the Wireless LAN if an employee with access
to a key leaves your company. The key should also be renewed in case of
smallest suspicion of a leak.
LEPS prevents the global spread of passphrases.
Activate LEPS to enable the use of individual passphrases.