Digi WAN 3G User Manual page 208

IP filtering
A network configuration that can be enabled to establish rules allowing devices to permit or deny
specific IP addresses, networks, or devices from connection access. Also known as access
control list.
IPsec (Internet Protocol Security)
A framework for a set of protocols for security at the network or packet processing layer of
network communication. Earlier security approaches have inserted security at the application
layer of the communications model. IPsec is said to be especially useful for implementing virtual
private networks and for remote user access through dial-up connection to private networks. An
advantage of IPsec is that security arrangements can be handled without requiring changes to
individual user computers.
IPsec provides two choices of security service: Authentication Header (AH), which essentially
allows authentication of the sender of data, and Encapsulating Security Payload (ESP), which
supports both authentication of the sender and encryption of data as well. The specific
information associated with each of these services is inserted into the packet in a header that
follows the IP packet header. Separate key protocols can be selected, such as the ISAKMP/
Oakley protocol.
Internet Security Association and Key Management Protocol (ISAKMP)
A protocol that defines procedures and packet formats to establish, negotiate, modify and delete
Security Associations (SAs). SAs contain all the information required for execution of various
network security services, such as the IP layer services (such as header authentication and
payload encapsulation), transport or application layer services, or self-protection of negotiation
traffic. ISAKMP defines payloads for exchanging key generation and authentication data. These
formats provide a consistent framework for transferring key and authentication data which is
independent of the key generation technique, encryption algorithm and authentication
mechanism.
ISAKMP is distinct from key exchange protocols in order to cleanly separate the details of
security association management (and key management) from the details of key exchange. There
may be many different key exchange protocols, each with different security properties.
However, a common framework is required for agreeing to the format of SA attributes, and for
negotiating, modifying, and deleting SAs. ISAKMP serves as this common framework.
MAC address
A unique network identifier. All network devices are required to have their own unique MAC
address. The MAC address is on a sticker on your Digi device. The number is displayed as 12
hexadecimal digits, usually starting with 00:40:9D.
Management Information Base (MIB)
A formal description of a set of network objects that can be managed using the Simple Network
Management Protocol (SNMP).
Mobile Device Provisioning Wizard
A wizard for provisioning Digi Cellular Family products. Provisioning configures the Digi
Cellular Family device with the required configuration used to access the mobile network.
2 0 8