Secure Socket Layer (Ssl) - Nomadix AG 5000 User Manual

As part of Nomadix' commitment to provide outstanding carrier-class network
management capabilities to its family of public access gateways, we offer secure
management through the NSE's standards-driven, peer-to-peer IPSec tunneling with
strong data encryption. Establishing the IPSec tunnel not only allows for the secure
management of the Nomadix gateway using any preferred management protocol, but
also the secure management of third party devices (for example, WLAN Access
Points and 802.3 switches) on private subnets on the subscriber side of the Nomadix
gateway. See also, "Enabling Secure Management {VPN Tunnel}" on page
Two subsequent events drive the secure management function of the Nomadix
gateway and the devices behind it:
Establishing an IPSec tunnel to a centralized IPSec termination server (for
1.
example, Nortel Contivity). As part of the session establishment process, key
tunnel parameters are exchanged (for example, Hash Algorithm, Security
Association Lifetimes, etc.).
The exchange of management traffic, either originating at the NOC or from
2.
the edge device through the IPSec tunnel. Alternatively, AAA data such as
RADIUS Authentication and Accounting traffic can be sent through the
IPSec tunnel. See also,
The advantage of using IPSec is that all types of management traffic are supported,
including the following typical examples:
ICMP - PING from NOC to edge devices
Telnet - Telnet from NOC to edge devices
Web Management - HTTP access from NOC to edge devices
SNMP
SNMP GET from NOC to subscriber-side device (for example, AP)
SNMP SET from NOC to subscriber-side device (for example, AP)
SNMP Trap from subscriber-side device (for example, AP) to NOC

Secure Socket Layer (SSL)

This feature allows for the creation of an end-to-end encrypted link between your
NSE-powered product and wireless clients by enabling the Internal Web Server
(IWS) to display pages under a secure link—important when transmitting AAA
information in a wireless network when using RADIUS.
SSL requires service providers to obtain digital certificates from VeriSign™ to create
HTTPS pages. Instructions for obtaining certificates are provided by Nomadix.
24
"RADIUS-driven Auto Configuration" on page
AG 5000
117.
22.
Introduction