Fortress Technologies ecure Wireless Access Bridge User Manuals

Table of Contents

• Table of Contents

  5
• Chapter 1 Introduction

  11
  • 1.1 Fortress Secure Wireless Access Bridge

    11
    • 1.1.1 Management Interfaces

      11
      • 1.1.1.1 Bridge GUI

        11
      • 1.1.1.2 Bridge CLI

        12
      • 1.1.1.3 SNMP

        12
  • 1.2 Network Security Overview

    12
  • 1.3 The Fortress Security System

    12
    • 1.3.1 Multi-factor Authentication™

      12
    • 1.3.2 Strong Encryption at the MAC Layer

      13
    • 1.3.3 System Components

      13
    • 1.3.4 Operating Modes

      13
      • 1.3.4.1 Normal Operating Mode

        13
      • 1.3.4.2 FIPS Operating Mode

        13
    • 1.3.5 Deployment Options

      14
  • 1.4 This Document

    15
    • 1.4.1 Document Conventions

      15
    • 1.4.2 Related Documents

      15
• Chapter 2 Installation

  16
  • 2.1 Introduction

    16
    • 2.1.1 System Requirements

      16
    • 2.1.2 Compatibility

      17
  • 2.2 Preparation

    17
    • 2.2.1 Shipped and Optional Parts

      17
    • 2.2.2 Preparing the Network

      18
    • 2.2.3 Port Locations

      18
    • 2.2.4 Safety Requirements

      18
  • 2.3 Installation Instructions

    21
  • 2.4 Outdoor Installation

    21
    • 2.4.1 Connecting the Bridge for Preconfiguration

      22
    • 2.4.2 Preconfiguring the Bridge for Outdoor Operation

      22
    • 2.4.3 Weatherizing the Bridge

      26
    • 2.4.4 Mast Mounting the Bridge

      28
    • 2.4.5 Reconnecting the Bridge for Outdoor Operation

      28
  • 2.5 Indoor Installation

    29
    • 2.5.1 Connecting the Bridge for Indoor Operation

      29
    • 2.5.2 Configuring the Bridge for Indoor Operation

      30
• Chapter 3 Configuration

  31
  • 3.1 The Bridge GUI

    31
    • 3.1.1 User Accounts

      31
    • 3.1.2 Accessing the GUI

      31
    • 3.1.3 Logging Off

      32
  • 3.2 LAN Settings

    32
    • 3.2.1 Spanning Tree Protocol

      33
    • 3.2.2 WAN Port Encryption

      33
  • 3.3 Radio Settings

    34
    • 3.3.1 Radio State, Band and Mode Settings

      35
      • 3.3.1.1 Radio State

        35
      • 3.3.1.2 Radio Band

        35
      • 3.3.1.3 Radio Mode

        35
      • 3.3.1.4 Bridge Mode

        35
    • 3.3.2 Radio Transmission and Reception Settings

      36
      • 3.3.2.1 Channel

        36
      • 3.3.2.2 Transmit Power

        36
      • 3.3.2.3 Distance

        37
      • 3.3.2.4 Preamble

        37
      • 3.3.2.5 Beacon Interval

        38
      • 3.3.2.6 Multicasting

        38
      • 3.3.2.7 Received Signal Strength Indicator

        39
    • 3.3.3 Configuring Basic Radio Settings

      39
    • 3.3.4 Virtual Radio Interface Settings

      39
      • 3.3.4.1 SSID

        40
      • 3.3.4.2 Hide SSID and Accept G Only Options

        41
      • 3.3.4.3 DTIM Period

        41
      • 3.3.4.4 RTS and Fragmentation Thresholds

        41
      • 3.3.4.5 Security Suite and Security Suite Settings

        41
      • 3.3.4.6 Configuring Virtual Radio Settings

        44
  • 3.4 802.1X Server and LAN Port Settings

    45
    • 3.4.1 802.1X Authentication Server

      45
    • 3.4.2 LAN Port 802.1X Settings

      46
  • 3.5 Bridge Passwords

    46
  • 3.6 Security Settings

    47
    • 3.6.1 Operating Mode

      48
    • 3.6.2 Secure Shell Access

      49
    • 3.6.3 Encryption Algorithm

      49
    • 3.6.4 Re-keying Interval

      50
    • 3.6.5 Access ID

      50
    • 3.6.6 Non-802.1X Authentication Global and Default Settings

      51
      • 3.6.6.1 Enabling/Disabling Authentication Globally

        52
      • 3.6.6.2 Local Authentication Server

        52
      • 3.6.6.3 External Authentication Server

        53
      • 3.6.6.4 Enabling/Disabling Device Authentication

        54
      • 3.6.6.5 Maximum Authentication Retries

        54
      • 3.6.6.6 Restart Session Login Prompt

        55
      • 3.6.6.7 Default User Authentication Settings

        56
      • 3.6.6.8 Default Device Authentication Settings

        56
  • 3.7 Blackout Mode

    57
  • 3.8 System Date and Time

    58
  • 3.9 Restoring Default Settings

    58
  • 3.10 Front-Panel Operation

    59
    • 3.10.1 Mode Selection from the Front Panel

      59
      • 3.10.1.1 Toggling the Bridge Mode Setting on Radio 2

        59
      • 3.10.1.2 Toggling the Blackout Mode setting

        60
    • 3.10.2 Rebooting the Bridge from the Front Panel

      61
    • 3.10.3 Restoring Defaults from the Front Panel

      61
• Chapter 4 Administration

  62
  • 4.1 Device Authentication

    62
    • 4.1.1 Maximum Device Authentication Retries

      62
    • 4.1.1 Default Device Authentication Settings

      63
    • 4.1.2 Individual Device Authentication Settings

      63
      • 4.1.2.1 Editing a Device

        64
      • 4.1.2.2 Deleting Devices

        65
  • 4.2 User Authentication

    65
    • 4.2.1 Maximum User Authentication Retries

      66
    • 4.2.1 Default User Authentication Settings

      66
    • 4.2.2 Individual User Authentication Settings

      66
      • 4.2.2.1 Adding a User

        67
      • 4.2.2.2 Editing a User Account

        67
      • 4.2.2.3 Deleting a User Account

        68
  • 4.3 Trusted Devices

    69
    • 4.3.1 Adding Trusted Devices

      69
    • 4.3.1 Editing Trusted Devices

      70
    • 4.3.2 Deleting Trusted Devices

      71
    • 4.3.3 Visitor Access through Trusted Devices

      71
  • 4.4 SNMP Settings

    71
    • 4.4.1 Configuring SNMP

      72
  • 4.5 Backing Up and Restoring

    72
    • 4.5.1 Backing Up the Bridge Configuration

      74
    • 4.5.2 Restoring from a Backup File

      74
  • 4.6 Software Versions and Upgrades

    75
    • 4.6.1 Viewing Current Software Version

      75
    • 4.6.2 Upgrading Bridge Software

      75
  • 4.7 Rebooting the Bridge

    77
• Chapter 5 Monitoring and Diagnostics

  78
  • 5.1 Statistics

    78
    • 5.1.1 Traffic Statistics

      79
    • 5.1.2 Interface Statistics

      79
    • 5.1.3 Radio Statistics

      80
  • 5.2 Tracking

    80
  • 5.3 AP Associations

    82
  • 5.4 View Log

    83
  • 5.5 Diagnostics

    85
    • 5.5.1 Pinging a Device

      85
    • 5.5.2 Tracing a Packet Route

      85
    • 5.5.3 Flushing the Host MAC Database

      86
    • 5.5.4 Generating a Diagnostics File

      86
  • 5.6 Front-Panel Indicators

    87
    • 5.6.1 System LEDs

      87
    • 5.6.2 Radio LEDs

      88
    • 5.6.3 Port LEDs

      89
• Chapter 6 Command-Line Interface

  90
  • 6.1 Introduction

    90
    • 6.1.1 CLI Administrative Modes

      91
    • 6.1.2 Accessing the CLI through the Serial Port

      91
    • 6.1.3 Accessing the CLI Remotely

      91
    • 6.1.4 Logging On and Off the CLI

      91
  • 6.2 Getting Help in the CLI

    92
  • 6.3 Command Syntax

    93
  • 6.4 Configuration in the Bridge CLI

    94
    • 6.4.1 LAN Settings in the CLI

      94
    • 6.4.2 Spanning Tree Protocol in the CLI

      95
    • 6.4.3 Bridge Radio Settings in the CLI

      95
      • 6.4.3.1 Virtual Radio Interface Settings in the CLI

        98
    • 6.4.4 Bridge Passwords in the CLI

      100
      • 6.4.4.1 Changing Bridge GUI Passwords in the CLI

        101
      • 6.4.4.2 Changing the Bridge CLI Password

        101
    • 6.4.5 Security Settings in the CLI

      101
      • 6.4.5.1 Encryption Algorithm in the CLI

        101
      • 6.4.5.2 Re-Keying Interval in the CLI

        102
      • 6.4.5.3 Data Compression in the CLI

        102
      • 6.4.5.4 Access ID in the CLI

        103
      • 6.4.5.5 Operating Mode in the CLI

        103
      • 6.4.5.6 WAN Port Encryption in the CLI

        103
      • 6.4.5.7 SSH Access to the CLI

        104
      • 6.4.5.8 Disabling the Bridge GUI in the CLI

        104
      • 6.4.5.9 Blackout Mode in the CLI

        104
    • 6.4.6 System Date and Time in the CLI

      105
    • 6.4.7 Restoring Default Settings in the CLI

      105
    • 6.4.8 Non-802.1X Authentication Settings in the CLI

      105
      • 6.4.8.1 Non-802.1X Authentication Server Settings

        105
      • 6.4.8.2 Non-802.1X EAP Retry Interval Setting

        106
    • 6.4.9 802.1X Authentication Settings in the CLI

      107
      • 6.4.9.1 802.1X Authentication Server Settings

        107
      • 6.4.9.2 Internal LAN Switch Port 802.1X Settings

        109
  • 6.5 Administration in the Bridge CLI

    109
    • 6.5.1 Trusted Devices in the CLI

      109
      • 6.5.1.1 Adding Trusted Devices in the CLI

        110
      • 6.5.1.2 Deleting Trusted Devices in the CLI

        110
    • 6.5.2 SNMP Settings in the CLI

      110
    • 6.5.3 Viewing the Software Version in the CLI

      111
    • 6.5.4 Restarting the Bridge in the CLI

      111
  • 6.6 Monitoring and Diagnostics in the CLI

    111
    • 6.6.1 Viewing a Summary Overview of the Bridge

      111
    • 6.6.2 Viewing System Uptime in the CLI

      112
    • 6.6.3 Partners Tracking in the CLI

      112
    • 6.6.4 Host Tracking in the CLI

      112
    • 6.6.5 AP Associations in the CLI

      113
    • 6.6.6 Viewing the System Log in the CLI

      113
    • 6.6.7 Pinging a Device

      114
    • 6.6.8 Tracing a Packet Route

      114
  • 6.7 WLAN Wireless Extension Tools

    114
    • 6.7.1 Creating a Wireless Extension Tools Script

      115
  • 6.8 Secure Automatic Configuration

    115
    • 6.8.1 Preconfiguring a New Network Deployment with SAC

      116
      • 6.8.1.1 Connecting the Bridges for Preconfiguration

        116
      • 6.8.1.2 Automatically Preconfiguring Network Bridges

        116
    • 6.8.2 Reconfiguring Network Settings with SAC

      119
    • 6.8.3 Adding and Deleting Network Bridges with SAC

      121
      • 6.8.3.1 Adding a New SAC Network Bridge

        121
      • 6.8.3.2 Deleting a Bridge from a SAC Network

        123
• Chapter 7 Specifications

  124
  • 7.1 Hardware Specifications

    124
    • 7.1.1 Performance

      124
    • 7.1.2 Physical

      124
    • 7.1.3 Environmental

      124
    • 7.1.4 Compliance

      125
    • 7.1.5 Logical Interfaces

      125
  • 7.2 RJ-45-to-DB9 Console Port Adapter

    125
• Chapter 8 Troubleshooting

  127
• Index

  129
• Glossary

  138