Installation Guide

PMP 450i and PTP 450i Configuration and User
Task 5: Configuring security
Encrypting radio transmissions
Cambium fixed wireless broadband IP systems employ the following form of
encryption for security of the wireless link:
• DES (Data Encryption Standard): An over-the-air link encryption option that uses
secret 56-bit keys and 8 parity bits. DES performs a series of bit permutations,
substitutions, and recombination operations on blocks of data. DES encryption does
not affect the performance or throughput of the system.
• AES (Advanced Encryption Standard): An over-the-air link encryption option that
uses the Rijndael algorithm and 128-bit keys to establish a higher level of security
than DES. AES products are certified as compliant with the Federal Information
Processing Standards (FIPS 197) in the U.S.A.
Managing module access by passwords
Adding a User for Access to a Module
From the factory, each module has a preconfigured administrator-level account in
the name root, which initially requires no associated password. When you upgrade
a module:
• an account is created in the name admin.
• both admin and root inherit the password that was previously used for access to the
module:
o the Full Access password, if one was set.
o the Display-Only Access password, if one was set and no Full Access
password was set.
Each module supports four or fewer user accounts, regardless of account levels.
The available levels are
• ADMINISTRATOR, who has full read and write permissions. This is the level of the
root and admin users, as well as any other administrator accounts that one of them
creates.
• INSTALLER, who has permissions identical to those of ADMINISTRATOR except
that the installer cannot add or delete users or change the password of any other
user.
• TECHNICIAN, who has permissions to modify basic radio parameters and view
informational web pages
• GUEST, who has no write permissions and only a limited view of General Status tab.
The ability to view information of General Status tab can be controlled by the "Site
Information Viewable to Guest Users" under the SNMP tab.
80 pmp-0957 (April 2015)