Alcatel OmniAccess Wireless System 2.1 Product Manual page 51

About the Wireless Protection System Software
The Wireless Protection System Software controls Alcatel OmniAccess WPS Switches, Alcatel Omni-
Access WPS Appliances, OmniAccess AP Access Points, and Alcatel OmniAccess Remote Edge Access
Points (OmniAccess 1200R APs). It includes robust
OmniVista AirView Software, and full
About Alcatel OmniAccess Operating System Security
Alcatel OmniAccess Operating System Security bundles Layer 1, Layer 2 and Layer 3 security compo-
nents into a simple, system-wide policy manager that creates independent security policies for each of
up to 16 Alcatel WLANs and one Third-Party WLAN. (Refer to
Note that the Standalone WPS Alcatel OmniAccess Wireless System described in
OmniAccess Wireless System
One of the barriers that made enterprises avoid deploying 802.11 networks was the inherent weakness
of 802.11 WEP (Wired Equivalent Privacy) encryption. Because WEP is so insecure, enterprises have
been looking for more secure solutions for business-critical traffic.
The 802.11 WEP weakness problem can be overcome using robust industry-standard security solutions,
such as:
•
802.1X dynamic keys with EAP (extended authorization protocol), or
•
WPA (Wi-Fi protected access) dynamic keys. The Alcatel WPA implementation includes:
-
TKIP + Michael (temporal key integrity protocol + message integrity code checksum)
dynamic keys, or
-
WEP (Wired Equivalent Privacy) keys.
The WEP problem can be further solved using industry-standard Layer 3 security solutions, such as:
•
Terminated and pass-through VPNs (virtual private networks), and
•
Terminated and pass-through L2TP (Layer Two Tunneling Protocol), which uses the IPSec (IP
security) protocol.
•
Terminated and pass-through IPSec (IP security) protocols. The terminated Alcatel IPSec
implementation includes:
-
IKE (internet key exchange),
-
DH (Diffie-Hellman) groups, and
-
Three optional levels of encryption: DES (ANSI X.3.92 data encryption standard), 3DES
(ANSI X9.52-1998 data encryption standard), or AES/CBC (advanced encryption
standard/cipher block chaining).
The Alcatel IPSec implementation also includes industry-standard authentication using:
-
MD5 (message digest algorithm), or
-
SHA-1 (secure hash algorithm-1).
•
The Alcatel OmniAccess Wireless System supports local and RADIUS MAC Address (media
access control) filtering.
•
The Alcatel OmniAccess Wireless System supports local and RADIUS user/password
authentication.
•
The Alcatel OmniAccess Wireless System also uses manual and automated Disabling to block
access to network services. In manual Disabling, the operator blocks access using client MAC
addresses. In automated Disabling, which is always active, the Alcatel OmniAccess Operating
System software automatically blocks access to network services for an operator-defined period
11/5/04
90-100831-300 Rev 2Alcatel OmniAccess Wireless Access Point Quick Installation Guide 10
Alcatel OmniAccess Operating System Security
Standalone WPS Alcatel OmniAccess Wireless System
does not support Third-Party APs.
Wireless Protection System Software
Wireless Protection System Software
Alcatel OmniAccess Operating System Security
Alcatel WLANs.)
About the Alcatel
and
functions.