Installing The C - AirTight C-65 Installation Manual

3.

Installing the C-65

When the C-65 functions as a WIPS sensor, it monitors your network and communicates with the server to guard
your corporate network against over-the-air attacks
Clients can connect to your corporate network in wireless mode through the C-65 AP(s).
The C-65 must be plugged into your corporate network to perform the above-mentioned operation.
As a WIPS sensor, C-65 can be configured in one of the following two modes:
•
Sensor Mode: This is the default mode. In this mode, the device can be connected to a trunk port
(802.1Q capable) on a switch. The device then monitors the VLANs that are configured on that trunk port
and are chosen by the user. In this mode, an C-65 can monitor up to 16 VLANs. The wireless interface of
the sensor is enabled for WIPS operations.
•
Network Detector (ND) Mode: This mode needs to be explicitly configured. In this mode, the device can
be connected to a trunk port (802.1Q capable) on a switch. The device then monitors the VLANS that are
configured on that trunk port and are chosen by the user. In this mode, an C-65 can monitor up to 100
VLANs. The wireless interface of the ND is disabled.
Important: To prevent disconnection or tampering by unauthorized personnel, it is extremely important to install
the device such that it is difficult to unplug the device from the network or from the power outlet.
Zero-Configuration of C-65 as Sensor
Zero-configuration is supported under the following conditions:
•
The device is in sensor mode.
•
A DNS entry wifi-security-server is set up on all the DNS servers. This entry should point to the IP
address of the server. By default, the device looks for the DNS entry wifi-security-server.
•
Sensor is placed on a subnet that is DHCP enabled.
Important: If the sensor is placed on a network segment that is separated from the server by a firewall, you must
first open port 3851 for User Datagram Protocol (UDP) and Transport Control Protocol (TCP) bidirectional traffic
on that firewall. This port number is assigned to AirTight
multiple servers, zero-configuration is not possible. In this case, you must manually configure the sensors. Refer
to Manually Configuring C-65
The steps to install the sensor with no configuration (zero-configuration) are as follows.
1. Mount the sensor.
2. Power on the sensor.
3. Connect the sensor to the network.
Connecting C-65
This involves mounting the C-65, powering on the device, and connecting it to the wired network.
Mount C-65
Take a configured C-65, that is, ensure that a static IP is assigned to the device or the settings have been
changed for DHCP. Note the MAC address and the IP address of the device in a safe place before it is installed in
a hard-to-reach location. The MAC address of the device is printed on a label at the bottom of the product.
Recommended: You should label the devices using MAC addresses or at least your own convention. For
example, use serial numbers, so that you can easily identify the devices.
C-65 Installation Guide
for further details.
®
Networks. If multiple sensors are set up to connect to
9