Operation Manual
Operating modes and functions
ELSA LANCOM Wireless
25
English
– prevent data transfer between specific mobile stations and the wired LAN or
– block the exchange of data packets with specific protocols.
If the 'WLAN Bridge' configuration section is not visible, switch to the complete display
of the configuration options in ELSA LANconfig with
View
왘
Options
.
Security for your configuration
A number of important parameters for the exchange of data are established in the
configuration of the device. These include the security of your network, monitoring of
costs and the authorizations for the individual network users.
Needless to say, the parameters that you have set should not be modified by
unauthorized persons. The
ELSA LANCOM Wireless
thus offers a variety of options to
protect the configuration.
Password protection
The simplest option for the protection of the configuration is the establishment of a
password. As long as a password hasn't been set, anyone can change the device’s
configuration.
The password input field can be found in the
ELSA LANconfig
in the 'Management'
configuration section on the 'Security' tab. The password prompt can be activated in a
terminal or Telnet session in the
/Setup/Config-module/password-
required
menu. In this case, the password itself is set with the command
passwd
.
Login barring
The configuration in the
ELSA LANCOM Wireless
is protected against “brute force
attacks” by barring logins. A brute-force attack is the attempt of an unauthorized person
to crack a password to gain access to a network, a computer or another device. In order
to do so, a computer can, for example, go through all the possible combinations of letters
and numbers until the right password is found.
As a measure of protection against such attacks, the maximum allowed number of
unsuccessful attempts to Login can be set. If this limit is reached, the access will be
barred for a certain length of time.
These parameters apply globally to all configuration options (Telnet, TFTP/
ELSA
LANconfig
and SNMP). If barring is activated on one port all other ports are
automatically barred too.
The following entries are provided in the configuration tool
ELSA LANconfig
for
configuring login barring in the 'Management' configuration area on the 'Security' tab or
under
/Setup/Config-module
in the menu: