ページ1に含まれる内容の要旨
Fortress Security System
Secure Wireless
Access Bridge
User Guide
www.fortresstech.com
© 2006 Fortress Technologies
ページ2に含まれる内容の要旨
ページ3に含まれる内容の要旨
Fortress Bridge Fortress Secure Wireless Access Bridge 2.6.1 Copyright © 2006 Fortress Technologies, Inc. All rights reserved. This document contains proprietary information protected by copyright. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, without written permission of Fortress Technologies, 4023 Tampa Road, Suite 2000, Oldsmar, FL 34677, except as specified in the Product Warranty and License Terms. FORTRESS TECHNOLOGIES,
ページ4に含まれる内容の要旨
Fortress Bridge DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE
ページ5に含まれる内容の要旨
Fortress Bridge: Table of Contents Table of Contents 1 Introduction 1 Fortress Secure Wireless Access Bridge . . . . . . . . . . . . . . . . . . . . .1 Management Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Bridge GUI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1 Bridge CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ページ6に含まれる内容の要旨
Fortress Bridge: Table of Contents Installation Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Outdoor Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Connecting the Bridge for Preconfiguration . . . . . . . . . . . . . . . . . . . . . . . . 12 Preconfiguring the Bridge for Outdoor Operation . . . . . . . . . . . . . . . . . . . . 12 Weatherizing the Bridge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ページ7に含まれる内容の要旨
Fortress Bridge: Table of Contents 802.1X Server and LAN Port Settings . . . . . . . . . . . . . . . . . . . . . . 35 802.1X Authentication Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 LAN Port 802.1X Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 Bridge Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 Security Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ページ8に含まれる内容の要旨
Fortress Bridge: Table of Contents Trusted Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Adding Trusted Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Editing Trusted Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Deleting Trusted Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Visitor Access through Trusted Devices . . . . . .
ページ9に含まれる内容の要旨
Fortress Bridge: Table of Contents Getting Help in the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Command Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Configuration in the Bridge CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84 LAN Settings in the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84 Spanning Tree Protocol in the CLI . . . . . . . . . . . . . . . . . . . . . .
ページ10に含まれる内容の要旨
Fortress Bridge: Table of Contents Secure Automatic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . .105 Preconfiguring a New Network Deployment with SAC . . . . . . . . . . . . . . . . 106 Connecting the Bridges for Preconfiguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106 Automatically Preconfiguring Network Bridges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106 Reconfiguring Network Settings with SAC . . . . . . . . . . . . . . .
ページ11に含まれる内容の要旨
Fortress Bridge: Introduction Chapter 1 Introduction 1.1 Fortress Secure Wireless Access Bridge The Fortress Secure Wireless Access Bridge is an all-in-one network access device with the most stringent security available today built in. It can serve as a wireless bridge, a WLAN access point, and an eight-port LAN switch, while performing all the functions of a Fortress controller device: encrypting wireless traffic and providing Multi-factor Authentication for devices on the network it pro
ページ12に含まれる内容の要旨
Fortress Bridge: Introduction 1.1.1.2 Bridge CLI The Bridge’s command-line interface provides administration and monitoring functions via a command line. It is accessed over the network via the Bridge’s IP address or through a terminal connected directly to the Bridge’s serial Console port. 1.1.1.3 SNMP The Bridge supports versions 1 and 2 of the Simple Network NOTE: You cannot configure SNMP Management Protocol (SNMP) Internet standard for network management on a For- management. The Fortre
ページ13に含まれる内容の要旨
Fortress Bridge: Introduction 3) User authentication requires the user of a connecting device to enter a recognized user name and valid creden- tials, a password, for example, or a digital certificate. The Fortress Security System can authenticate users locally or through existing user-authentication provisions. 1.3.2 Strong Encryption at the MAC Layer Fortress ensures network privacy at the Media Access Control (MAC) sublayer, within the Data Link Layer (Layer 2) of the Open System Interco
ページ14に含まれる内容の要旨
Fortress Bridge: Introduction 1.3.5 Deployment Options The Fortress Security System is flexible and expandable. Figure 1.1 Example Point-to-Multipoint Deployment of the Fortress Secure Wireless Access Bridge 4
ページ15に含まれる内容の要旨
Fortress Bridge: Introduction The Bridge can provide a secure edge for a WLAN (or infrastructure-mode) deployments, as shown in Figure 1.1 1.4 This Document WARNING: can cause physical in- This user guide assumes its users have a level of expertise jury or death to you consistent with a professional Network Administrator. and/or your equipment. 1.4.1 Document Conventions This is a task-oriented document, and the procedures it CAUTION: can cor- contains are, wherever possible, self-contained an
ページ16に含まれる内容の要旨
Fortress Wireless Access Bridge: Installation Chapter 2 Installation 2.1 Introduction The Fortress Secure Wireless Access Bridge is a full-featured NOTE: Only essen- tial configuration Fortress controller device, providing strong data encryption and settings, as required for Multi-factor Authentication™, including native RADIUS basic installation, are authentication, to users and devices on the network it secures. covered in this chapter. The Bridge additionally comprises three, independent n
ページ17に含まれる内容の要旨
Fortress Wireless Access Bridge: Installation 2.1.2 Compatibility The Fortress Bridge is fully compatible with Fortress Secure Client versions 2.4 and higher. 2.2 Preparation 2.2.1 Shipped and Optional Parts Included in each Fortress Bridge shipment are: Fortress Secure Wireless Access Bridge, comprising: one eight-port Ethernet LAN switch one PoE Ethernet WAN port two USB ports one 802.11 a/b/g multi-mode radio one 802.11a radio two lightning arrestor modules one universal AC-to-48V DC
ページ18に含まれる内容の要旨
ページ19に含まれる内容の要旨
Fortress Wireless Access Bridge: Installation General: This equipment must be installed by qualified WARNING: The Bridge contains a service personnel according to the applicable installation 3V (7 year) lithium bat- codes. Do not locate the Bridge or antennas near power tery for time-keeping lines or power circuits. When installing an external antenna, purposes. It is not in- take extreme care not to come into contact with such tended to be operator- circuits as they can cause serious injur
ページ20に含まれる内容の要旨
Fortress Wireless Access Bridge: Installation PoE powered from a remote 802.11af (13 Watt) PoE midspan source. Circuit Overloading: The Bridge includes a 48 V main resettable fuse specified at 1.8 A. Lightning/Electrostatic Protection: The Bridge’s antenna ports conform to IEC1000-4-5 10 KV 8/20us waveform. The WAN port conforms to IEC-61000-4-2 8 KV waveform with 58 V additional transient protection. Grounding: The Bridge features a rear panel grounding stud which, on Bridges with exte
