Cascade Networks Inc. 5200UNII Manual De Usuario
ADVANCED FEATURES
These features may be utilized in the Canopy System but are not required for basic operation.
SECURITY - DES ENCRYPTION
Standard Canopy modules provide Data Encryption Standard (DES) encryption. DES is a secret
key encryption scheme using a 56 bit key. The basics of DES are that it performs a series of bit
permutations, substitutions, and recombination operations on blocks of data using a secret key.
key encryption scheme using a 56 bit key. The basics of DES are that it performs a series of bit
permutations, substitutions, and recombination operations on blocks of data using a secret key.
On the Canopy system, encryption of the over the air link is enabled or disabled per Access Point
module or per Backhaul timing master module. The Canopy modules contain unique factory
programmed secret keys to establish the encrypted link. If an authentication key (must be the same
key on each end of the backhaul link) has been entered using the Backhaul Configuration page,
then that key is also used to establish the DES encryption key. Encryption does not affect the
performance or throughput of the system.
module or per Backhaul timing master module. The Canopy modules contain unique factory
programmed secret keys to establish the encrypted link. If an authentication key (must be the same
key on each end of the backhaul link) has been entered using the Backhaul Configuration page,
then that key is also used to establish the DES encryption key. Encryption does not affect the
performance or throughput of the system.
SECURITY - AES ENCRYPTION
Motorola also offers Canopy products that provide Advanced Encryption Standard (AES)
encryption. Like DES, AES is a secret key encryption scheme, but AES uses the Rijndael algorithm
and 128 bit keys to establish a higher level of security than DES.
encryption. Like DES, AES is a secret key encryption scheme, but AES uses the Rijndael algorithm
and 128 bit keys to establish a higher level of security than DES.
Due to the level of security provided by AES, the US government has established export controls
on communications products that use AES. These export controls may mean that outside of the US
AES products are only available in certain regions – check with your Canopy distributor or reseller
for availability in your area.
on communications products that use AES. These export controls may mean that outside of the US
AES products are only available in certain regions – check with your Canopy distributor or reseller
for availability in your area.
Canopy AES products run the same software as DES products, so the features available are
exactly the same and work the same with the only exception being that the AES products provide
AES instead of DES encryption when enabled for encryption on the Configuration screen. All the
interface screens, Status pages, Configuration pages, etc. are identical. As new software features
become available on DES products, the same software and the same features will be available for
AES products.
exactly the same and work the same with the only exception being that the AES products provide
AES instead of DES encryption when enabled for encryption on the Configuration screen. All the
interface screens, Status pages, Configuration pages, etc. are identical. As new software features
become available on DES products, the same software and the same features will be available for
AES products.
DES backhauls are available in both 10 Mbps and 20 Mbps signaling rates. AES backhauls are
only available with a 10 Mbps signaling rate.
only available with a 10 Mbps signaling rate.
Canopy DES products are not upgradeable to AES. To have the option of AES encryption, you
must purchase AES products.
must purchase AES products.
Canopy AES products use a different FPGA load than DES products. However, the FPGA will be
upgraded as needed to provide new features or services similar to the DES products.
upgraded as needed to provide new features or services similar to the DES products.
The same as with DES, encryption of the over the air link is enabled or disabled per Access Point
module or per Backhaul timing master module. The Canopy modules contain unique factory
programmed secret keys to establish the encrypted link. If an authentication key (must be the same
key on each end of the backhaul link) has been entered using the Backhaul Configuration page,
then that key is also used to establish the AES encryption key.
module or per Backhaul timing master module. The Canopy modules contain unique factory
programmed secret keys to establish the encrypted link. If an authentication key (must be the same
key on each end of the backhaul link) has been entered using the Backhaul Configuration page,
then that key is also used to establish the AES encryption key.
Canopy AES products and DES products do not interoperate when enabled for encryption, as DES
and AES are different encryption schemes. An AES AP with encryption enabled can only
communicate with AES SMs, and similarly an AES Backhaul timing master module with encryption
enabled can only communicate with an AES Backhaul timing slave module. However, if encryption
is disabled, AES modules can communicate with DES modules.
and AES are different encryption schemes. An AES AP with encryption enabled can only
communicate with AES SMs, and similarly an AES Backhaul timing master module with encryption
enabled can only communicate with an AES Backhaul timing slave module. However, if encryption
is disabled, AES modules can communicate with DES modules.