User's Manual

RadioFrame System Method of Procedure GSM/802.11b
Connecting to the Customer LAN
76 RadioFrame Networks, Inc.
6.2.6 Add/Remove MAC Addresses
Start by collecting a list of MAC addresses for all user devices that will be authorized to
access the customer’s LAN via the RFS 802.11. It is best to keep a permanent list (on
paper, in a spreadsheet, or other computer storage) that includes each MAC address and
a description of the device, including the name of the person who owns the device, etc.
Also refer to section 6.4 Viewing WLAN User/iRAP Associations, later in this chapter.
6.2.6.1 Adding MAC Addresses
MAC addresses are added to the list of authorized client devices in one of two ways: one,
you can enter the addresses one at a time, or two, you can enter the MAC addresses into
a text file and “upload” this list into the MAC address database.
To add an individual MAC address, enter it in the box labeled Address. Enter each MAC
address in the format described above, that is, six pairs of hexadecimal digits (for
example 00:04:16:A3:29:B7). The alphabetic values of hexadecimal digits—
A,B,C,D,E,F—may be in either upper case or lower case. For Name, enter a meaningful
device name or identifier, or the name of the person who owns the device. For VLAN,
enter the VLAN desired for that user (typically the default VLAN configured for the BCU
network connection), and then select Add Address.
To add MAC addresses from a file, either enter the file name under Import/Export File
(including drive letter and full pathname), or select the Browse… button to locate the file.
Then, select Add. This appends the MAC addresses from the file to any other MAC
addresses already entered into System Manager. The file is transferred to the BCU using
anonymous FTP. An FTP server running on the host management terminal is required.
TIP The MAC address file is stored in comma-delimited format. The format is name,
MAC address, VLAN. Here is an example:
test_user, 00:11:22:33:44:55,2
6.2.6.2 Removing MAC Addresses
To remove a MAC address, select the delete option listed next to the MAC address you
wish to remove.
To remove all MAC addresses, select the Remove All MAC Addresses button under
Remove All.
6.2.7 Network Security & Accounting
In a typical enterprise network, WEP encryption and MAC address authentication do not
provide the level of security that most users require. To help protect these networks, the
RadioFrame System offers both Wi-Fi Protected Access Support and 802.1x
authentication with dynamic WEP keys.
Wi-Fi Protected Access (WPA) provides security through data encryption and user
authentication. In order to overcome the limitations of WEP, WPA uses a Temporal Key
Integrity Protocol (TKIP) for data encryption. This provides per-packet key mixing, a
message integrity check (MIC), an extended initialization vector (IV) with sequencing
rules, and a re-keying mechanism.