User's Manual

Installation and User Guide: Airgo Access Point 145
7
Managing Security
This chapter describes the encryption and authentication features of the Airgo Access Point and
explains how to set the security configuration. The chapter includes the following topics:
• Introduction
• Security Elements
• Data Encryption
• Zone Privacy
• Configuring Wireless Security
• Configuring Authentication Zones
• Configuring Administrator Security
• Viewing Security Statistics
• Configuring Advanced Parameters
• Configuring Zone Privacy
Introduction
Airgo Networks offers the strongest available security options for wireless networking, as listed
here and illustrated in Figure 104:
• AP Security verifies the identity of individual APs and authorizes them to be part of the
wireless network. APs can be enrolled individually or pre-enrolled as a group. The process uses
a certificate and password to fully verify the identity of the AP. By clearly identifying which
APs belong to the authorized set, the enrollment process can also help identify unauthorized or
rogue APs.
• Administrator security authorizes designated users to access the configuration and management
capabilities of the AP using https, SSH, or SNMPv3 for the web interface, CLI, or network
management system.
• User security encompasses authentication and encryption. Authentication verifies the identity
of individual users and gives them access to the network, restricted to specific network service
profiles. Once the network and authenticated users are in place, data encryption protects the
privacy of user data transmitted over the wireless network.
• Guest access security provides password or custom access control for guest users, including the
configuration of a guest VLAN for Internet access and session management.
NOTE: For information on security for access point enrollment, refer to Chapter 9,
“Managing the Network.”