Справочник Пользователя для 3e Technologies International Inc. 531AP

Скачать
Страница из 104
3e-531AP Wireless Access Point
Chapter 1: Introduction
29000125-001 C
1
Chapter 1: Introduction
This manual covers the installation and operation of the 3e Technolo-
gies International’s 3e-531AP Wireless Access Point, which conforms to 
the requirements of FIPS PUB 140-2, Security Requirements for Crypto-
graphic Modules. The 3e-531AP Wireless Access Point provides a connec-
tion between an Ethernet LAN and a wireless LAN (WLAN). The wireless 
LAN can include mobile devices such as handheld Personal Data Assis-
tants (PDAs), mobile web pads, and wireless laptops as long as they have 
the 3e-010F Crypto Client software installed. (The 3e-010F Crypto Client 
software is sold with the 3e-110 long range PC Card or sold separately for 
use with other compatible PC Cards.)
The 3e-531AP  incorporates Power over Ethernet (PoE), IEEE 802.3af, 
and the highest security functionality including the ability to manage RF 
centrally and to even shut off RF to wireless devices entirely, should that 
be necessary. The PoE solution eliminates the need for internal gateway 
power supply units (AC-DC converters) and 110-220V cabling installa-
tions for the gateway operation. In the 3e-531AP, however, the capability 
to switch to AC power has been provided as a backup in the event the 
Power over Ethernet hub is lost or unavailable. The device detects power 
failure and automatically switches to AC current with minimal wireless 
connection interruption using the power cord provided. (Note: a power 
cord does not have to be plugged in to the 3e-531AP  during setup, but it 
is recommended that it be kept available for use in case of failure of the 
PoE Power Supply.)
The PoE interface on the 3e-531AP  is compatible with commercial 
vendor “injected power” hub units (also known as Ethernet Power Sup-
ply or Power over Ethernet Hub) interfaces. 
The 3e-531AP  conforms to the FIPS 140-2 specifi cation. It includes 
the following cryptographic modules: AES/3DES for wireless encryption; 
dynamic key exchange (Diffi e-Hellman module 1024) for wireless com-
munication; and HTTPS/TLS, for secure web communication. The 3e-
531AP  contains three cryptographic modules and ports: Ethernet WAN 
uplink interface for communication to the wired LAN backbone; Ethernet 
LAN local port for communication to a local wired LAN; and wireless 
LAN port for wireless communication to local clients. The authorized 
roles supported are Crypto Offi cer Role and Administrator Role. Crypto-
graphic services provided include; AES and 3DES for wireless; SHA-1 for 
authentication; HMAC SHA-1 for keyed authenticated fi rmware upgrade;