User's Manual

Table Of Contents
CAMBIUM NETWORKS
Table 50 AP Security attributes
Attribute Meaning
Security Options
Wireless Security Open: All SMs requesting network entry are allowed registration.
WPA2: The WPA2 mechanism provides AES radio link encryption and SM
network entry authentication. When enabled, the SM must register using the
Authentication Pre-shared Key configured on the AP and SM.
RADIUS: Enables the connection to a pre-configured RADIUS server.
WPA2
WPA2 Pre-shared Key Configure this key on the AP. Then configure each of the network SMs with this
key to complete the authentication configuration. This key must be between 8 to
128 symbols.
RADIUS
Servers For more Radio servers, click Add. Up to 3 Radius servers can be configured on the
device with the following attributes:
IP Address: IP Address of the Radius server on the network.
Port: The Radius server port. Default is 1812.
Secret: Secret key that is used to communicate with the Radius server.
Server Retries Number of times the radio will retry authentication with the configured Radius
server before it fails authentication of the SM.
Server Timeout Timeout between each retry with the configured Radius server before it fails
authentication of the SM.
Firewalls
Layer 2 Firewall Enabled: Modifications to the Layer 2 Firewall Table are allowed and rules are
enforced.
Disabled: Modifications to the Layer 2 Firewall Table are not allowed and rules
are not enforced.
Firewall Rules When the SM is configured with SM Network Mode set to Bridge, the Layer 2
firewall table may be used to configure rules matching layer 2 (MAC layer) traffic
which result in forwarding or dropping the traffic over the radio link or Ethernet
interface.
Layer 3 Firewall Enabled: Modifications to the Layer 3 Firewall Table are allowed and rules are
enforced.
Disabled: Modifications to the Layer 3 Firewall Table are not allowed and rules
are not enforced.
Firewall Rules When the SM is configured with SM Network Mode set to NAT, the Layer 3
firewall table may be used to configure rules matching layer 3 (IP layer) traffic
which result in forwarding or dropping the traffic over the radio link or Ethernet
interface.
110