User guide

Managing Your Canopy Network March 2005
Through Software Release 6.1
Issue 1 Page 295 of 425
Canopy System User Guide
22 SECURING YOUR NETWORK
22.1 ISOLATING APS FROM THE INTERNET
Ensure that the IP addresses of the APs in your network
◦ are not routable over the Internet.
◦ do not share the subnet of the IP address of your user.
RFC 1597, Address Allocation for Private Subnets, reserves for private IP networks three
blocks of IP addresses that are not routable over the Internet:
◦ Class A has one reserved network, 10.0.0.0 to 10.255.255.255.
◦ Class B has 16 reserved networks, 172.16.0.0 to 172.31.255.255.
◦ Class C has 256 reserved networks, 192.168.0.0 to 192.168.255.255.
An example of a securely configured private IP network is displayed in Figure 116.
Figure 116: Example of private IP network