LANCOM 1722 VoIP – LANCOM 1723 VoIP – LANCOM 1724 VoIP – LANCOM 1823 VoIP Chapter 11: Security settings114EN11.1.4 Access control by MAC addressEvery network device has a unique identification number. This identificationnumber is known as the MAC address (Media Access Control) and it is uniqueworldwide.The MAC address is programmed into the hardware. Wireless LAN devicesfrom LANCOM Systems display their MAC number on the housing.Access to an infrastructure network can be limited to certain wireless LANdevices by defining MAC addresses. The access points have filter lists in (ACL– access control list) for storing authorized MAC addresses.11.1.5 IPSec over WLANWith the help of the IPSec-over-WLAN technology in addition to the securitymeasures described already, a wireless network for the exchange of especiallysensitive data can be optimally secured. Required for this is a base stationwith VPN support and the LANCOM Advanced VPN Client that operates undercurrent Windows and MAC OS versions. Client software from third parties isavailable for other operating systems.11.2 Security settings WizardAccess to the configuration of a device allows access to more than just criticalinformation (e. g. Internet password). Far more critical is that settings forsecurity functions (e.g.the firewall) can be altered. Unauthorized access is notjust a risk for the device itself, but for the entire network.Your LANCOM offers password-protected access to its configuration. This isactivated during the initial basic configuration simply by entering a password.If the wrong password is entered a certain number of times, the device auto-matically blocks access to the configuration for a fixed period. You can modifythe critical number of attempts and also the duration of the lock. By default,the device locks for five minutes after five incorrect entries of the password.Along with these basic settings, you can use the Security settings Wizard tocheck the settings of your wireless network (if so equipped).