Table of Contents
Advertisement
LANCOM WLC series
Chapter 5: Security settings
124
ICMP). It is especially convenient to set up the filters with the aid of
LANconfig. Under 'Firewall/QoS', the 'Rules' tab contains the functions for
defining and editing filter rules.
Have you excluded certain stations from accessing the device?
A special filter list can be used to limit access to the device's internal func-
tions via TCP/IP. The phrase "internal functions" refers to configuration
sessions via LANconfig, WEBconfig, Telnet or TFTP. As standard this table
contains no entries, meaning that computers with any IP address can use
TCP/IP and Telnet or TFTP to commence accessing the device. The first time
an IP address is entered with its associated netmask, the filter is activated
and only the IP addresses contained in this entry are entitled to make use
of internal functions. Further entries can be used to extend the circle of
authorized parties. The filter entries can describe individual computers or
even entire networks. The access list can be found in the LANconfig in the
configuration area 'TCP/IP' on the 'General' tab.
Do you store your saved LANCOM configuration to a safe location?
Protect your saved configurations in a location that is safe from unauthor-
ized access. Otherwise, byway of example, an unauthorized person may
load your stored configuration file into another device and they can access
the Internet at your expense.
Concerning the exchange of your particularly sensitive data via
wireless LAN; have you set up the functions offered by IEEE
802.1x?
If you move especially sensitive data via wireless LAN you can provide
even stronger security by using the IEEE 802.1x technology. To check or
activate the IEEE 802.1x settings in LANconfig select the configuration
area '802.1x'.
Is the storage of configuration files adapted to your security
requirements?
For self-sufficient operations, the configuration for a WLAN interface
being managed by a LANCOM WLAN Controller is stored in flash memory
for a certain time only, or even in the RAM only. This device configuration
is deleted if contact to the WLAN Controller is lost or if the power supply
is interrupted for longer than the set time period.
Have you ensured that the reset button is safe from accidental
configuration resets?
Some devices simply cannot be installed under lock and key. There is con-
sequently a risk that the configuration will be deleted by mistake if a co-
worker presses the reset button too long. The behavior of the reset button
Advertisement
Table of Contents
