Lancom DSL Series Manual

Contents

Lancom DSL Series Manual Manual pdf 73 page image

LANCOM Wireless DSL – LANCOM Wireless ADSL Chapter 8: Security settings73ENMoreover, this technology makes enables a secured dispatch and a regularautomatic change of WEP keys. In this way IEEE 802.1x improves the protec-tion efforts of WEP.In Windows XP the IEEE-802.1x technology is already integrated by default.For other operating systems 802.1x client software is available.8.1.6 IPSec over WLANBy means of IPSec over WLAN a radio network can be optimally secured inaddition to the already introduced securing mechanisms.In order to run IPSec over WLAN you have to upgrade the base stations of thewith the LANCOM VPN option and the LANCOM Advanced VPN Client, whichruns under the operating systems Windows 98ME, Windows 2000 and Win-dows XP. For other operating systems client software from other manufactur-ers is available. The drivers for the LANCOM AirLancer wireless adapter arealready equipped with a 802.1x client.8.1.7 Tips for handling keysThe security of encryption procedures can be substantially increased the bypaying attention to some important rules for handling keys. Keep keys as secret as possible.Never note a key. Popular, but completely unsuitable are for example:notebooks, wallets and text files in PCs. Do not share a key unnecessarily. Select a random key.Use randomized keys of character and number sequences. Keys from thegeneral linguistic usage are insecure. Change a key immediately in case of suspicion.It is time to change the key of the Wireless LAN if an employee with accessto a key leaves your company. The key should also be renewed in case ofsmallest suspicion of a leak.8.2 The security settings wizardAccess to the configuration of a device permits not only to read out criticalinformation such as WEP key or Internet password. Rather, also the entire set-tings of the security functions (e.g. firewall) can be altered then. So an unau-thorized configuration access endangers not only a single device, but theentire network.