User's Manual

XL, XLE, XLV BreadCrumb
®
User Guide Rajant Corporation
Warning Be sure to include the BCAdmin workstation in the ACL so that you can continue administering the
network!
3.7.3.2.2 Setting the Access ID
The Access ID is a shared credential used by the IMCrypto client to negotiate encryption keys. All devices that
are to communicate with one another must share a common Access ID.
To set the Access ID on a BreadCrumb device, the BCAdmin workstation must be connected to the BreadCrumb
device via the BreadCrumb device’s Ethernet port. This is in order to prevent the transmission of the Access ID
over an unsecured wireless connection that the Access ID will help to protect.
Important: In order to communicate to a BreadCrumb device via the BreadCrumb device’s Ethernet port, the
BreadCrumb device’s Ethernet interface must be placed into Bridge Mode in the BreadCrumb device’s
Reachback settings. If a BreadCrumb device does not have an Ethernet port, you cannot set its Access ID.
If your BCAdmin workstation is connected to a BreadCrumb device via Ethernet, be sure that the BCAdmin
workstation’s radio is disabled in order to guarantee that the Ethernet connection is in fact being used.
To set the Access ID on a BreadCrumb device, open the General tab of its Properties window and click the button
‘Change Access ID’ .You will be presented with a window resembling the following:
Figure 18. Set Access ID Window
If the button is disabled, check to ensure that you have registered the IMCrypto client and that you are
communicating with the BreadCrumb via its Ethernet interface.
You must know the current Access ID in order to set a new one. The default Access ID on a BreadCrumb device
is ‘0000000000000000’ (16 zeros).
You must supply the new Access ID twice in order to prevent the inadvertent setting of an unknown Access ID.
Important: The Access ID change in a BreadCrumb device has an immediate effect. If you change the
Access ID on a BreadCrumb device that has IMCrypto encryption already running, you
will have to change your BCAdmin workstation’s Access ID to match it in order to
communicate with the BreadCrumb device again.
3.7.4 ENCRYPTING WIRED TRAFFIC
The BreadCrumb devices’ IMCrypto support includes the ability to encrypt traffic from a wired network provided
that the BreadCrumb device’s Ethernet interface is in either Gateway Mode or Gateway (Ingress) Mode. With
IMCrypto enabled on a BreadCrumb device in one of these modes, encryption of wired traffic entering the
wireless network and decryption of wireless traffic entering a wired network is completely automatic.
- 31 -