Table of Contents
Advertisement
1-13
Introduction
to derive other keys. Messages are encrypted using a 128-bit secret key and a 128-bit block of data.
the end result is an encryption scheme as secure as any the access point provides.
For detailed information on WPA2-CCMP configurations, see
Configuring WPA2-CCMP (802.11i) on
page
6-24.
1.2.8.7 Firewall Security
A firewall keeps personal data in and hackers out. The access point firewall prevents suspicious
Internet traffic from proliferating the access point managed network. The access point performs
network address translation (NAT) on packets passing to and from the WAN port. This combination
provides enhanced security by monitoring communication with the wired network.
For detailed information on configuring the access point firewall, see
Configuring Firewall Settings
on page
6-27.
1.2.8.8 VPN Tunnels
Virtual Private Networks (VPNs) are IP-based networks using encryption and tunneling providing
users remote access to a secure LAN. In essence, the trust relationship is extended from one LAN
across the public network to another LAN, without sacrificing security. A VPN behaves like a private
network; however, because the data travels through the public network, it needs several layers of
security. The access point can function as a robust VPN gateway.
For detailed information on configuring VPN security support, see
Configuring VPN Tunnels on page
6-36.
1.2.8.9 Content Filtering
Content filtering allows system administrators to block specific commands and URL extensions from
going out through the access point WAN port only. Therefore, content filtering affords system
administrators selective control on the content proliferating the network and is a powerful screening
tool. Content filtering allows the blocking of up to 10 files or URL extensions and allows blocking of
specific outbound HTTP, SMTP, and FTP requests.
For detailed information on configuring content filtering support, see
Configuring Content Filtering
Settings on page
6-52.
1.2.9 VLAN Support
A Virtual Local Area Network (VLAN) is a means to electronically separate data on the same access
point from a single broadcast domain into separate broadcast domains. By using a VLAN, you can
Advertisement
Table of Contents
