System information

26 221 02-FGB 101 544 Uen A - September 2008
5.2.12 IPsec/VPN Termination
The W3x terminals support one IPsec/VPN tunnel using Site-to-Site
configuration (Tunnel mode). An IPsec VPN serves as a point-to-point
tunnel interface allowing the W3x terminals to send some or all of its WAN
traffic across an encrypted tunnel rather than in clear text.
ESP is used to encrypt the payload part of an IP packet and ensures origin
authenticity, integrity and confidentiality. 3DES and AES-128 are used as
encryption algorithms and SHA-1 and MD5 as hash algorithms. NAT
traversal is supported when IPsec is enabled.
5.2.12.1 IKE
IKE is the protocol for setting up a shared session secret from which
cryptographic keys then can be derived. The W3x terminals support IKE v1
with pre-shared key as method of authentication. 3DES and AES-128 are
used as encryption algorithms and SHA-1 and MD5 as integrity/hash
algorithms. Group 2 is supported as Diffie-Hellman group identifier.
5.2.13 IP Quality of Service
The QoS service in the W3x terminals support the Stochastic Fair Queuing
(SFQ) scheduling algorithm which makes sure that no single session can
dominate outgoing bandwidth.
The QoS feature applies for upstream traffic only.
5.3 USB Services
The W3x terminals may function as a network storage device or printer
server for LAN/WLAN hosts using Windows File and Printer sharing (also
known as SMB or CIFS).
When an external hub is connected to the USB connector, the W3x
terminals support connection of up to two storage devices and one printer
at the same time. Both USB 1.1 and 2.0 (full speed and high-speed) are
supported.
The W3x terminals use Samba as the base to implement file and printer
sharing through SMB/CIFS.
5.3.1 File Sharing
A USB disk drive or memory stick that is connected to the USB connector
on the W3x terminals is automatically mounted and shared over the LAN
(and WLAN, if enabled).
The included files are shared with all devices belonging to the same
workgroup and all users have full read/write (including delete) access to the
shared files. Only the first partition of a storage device is automatically
mounted and shared.
The file system on a shared device needs to be of a supported type.
Currently the following types are supported: