User manual

Chapter 2 - Managing a Single Device/Cell Security Parameters Page

AlvariCRAFT Device Manager 141 User Manual

Data Encryption Option The Data Encryption Option allows enabling or disabling data

encryption. When enabled, all data frames, including frames using

management protocols such as Telnet, FTP, TFTP, SNMP, DHCP and

ICMP, are encrypted.

The AU/BU and all the SUs/RB it serves should be configured to the

same Data Encryption Option. Mixed operation is not supported.

A unit with Data Encryption Option enabled can accept non-encrypted

data frames

In an AU (except to AUS), the Maximum Number of Associations

must be set to a value of 124 or lower to enable Data Encryption. As

long as Data Encryption is enabled, the Maximum Number of

Associations cannot be set to a value higher than 124.The Maximum

Number of Associations Limit (512 when Data Encryption is disabled,

124 when Data Encryption is enabled) is indicated in the

“Air

Interface General Page” on page 31

Security Mode The Security Mode option enables selecting the algorithm to be used

for encrypting the authentication messages and/or data frames.

The following encryption algorithm are available:

 WEP (Wireless Equivalent Privacy). WEP is defined in the IEEE

802.11 Wireless LAN standard and is based on the RSA's RC4

encryption algorithm.

 AES OCB (Advanced Encryption Standard). AES is defined by the

National Institute of Standards and Technology (NIST) and is

based on Rijndael block cipher. AES OCB (Offset Code Book) is a

mode that operates by augmenting the normal encryption process

by incorporating an offset value.

 FIPS 197 is certified for compliance with Federal Information

Processing Standards. It provides encryption and message

integrity in one solution and implements the Advanced Encryption

Standard using Rijndael block cipher.

The FIPS 197 encryption algorithm is a licensed feature, and is

available only in AUs/BUs with the required license. FIPS 197 can be

supported only in units with HW revision C or higher. FIPS 197

feature license is not available for AUS unit.