Sercomm WAP121 Wireless-N Access Point with Power over Ethernet User Manual

Sercomm Corporation Wireless-N Access Point with Power over Ethernet

a href="https://usermanual.wiki/Sercomm" itemprop="url"> Sercomm >

User manual 2 of 4

:LUHOHVV6HWWLQJVWPS SetupCisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 71REVIEW DRAFT  Version 2—CISCO CONFIDENTIALPIN ControlA client may also enroll with a registrar by using a PIN. For example, the AP administrator may start an enrollment transaction for a particular VAP by entering the PIN of a client. When the client detects the WPS-enabled device, its user can then supply its PIN to the AP to continue the enrollment process. After the WPS protocol has completed, the client securely joins the network. The client can also initiate this process.As with the PBC method, if the AP begins the enrollment transaction and no client attempts to enroll after 120 seconds, the AP terminates the pending transaction.2SWLRQDO8VHRI,QWHUQDO5HJLVWUDUAlthough the AP supports an internal registrar for WPS, its use is optional. After an external registrar has configured the AP, the AP acts as a proxy for that external registrar, regardless of whether the AP’s internal registrar is enabled (it is enabled by default). /RFNGRZQ&DSDELOLW\Each AP stores a WPS-compatible device PIN in nonvolatile RAM. WPS requires this PIN if an administrator wants to allow an unconfigured AP (that is, one with only factory defaults, including WPS being enabled on a VAP) to join a network. In this "out-of-box" scenario, the administrator obtains the PIN value from the UI of the AP.The administrator may wish to change the PIN if network integrity has been compromised in some way. The AP provides a method for generating a new PIN and storing this value in NVRAM. In the event that the value in NVRAM is corrupted, erased, or missing, a new PIN is generated by the AP and stored in NVRAM.The PIN method of enrollment is potentially vulnerable by way of "brute force" attacks. A network intruder could, in theory, try to pose as an external registrar on the wireless LAN and attempt to derive the AP's PIN value by exhaustively applying WPS-compliant PINs. To address this vulnerability, in the event that a registrar fails to supply a correct PIN in three attempts within 60 seconds, the AP prohibits any further attempts by an external registrar to register the AP on the WPS-enabled VAP for 60 seconds. However, wireless client stations may enroll with the AP's internal registrar, if enabled, during this “lockdown” period. The AP also continues to provide proxy services for enrollment requests to external registrars.The AP adds an additional security mechanism for protecting its device PIN. Once the AP has completed registration with an external registrar, and the resulting WPS transaction has concluded, the device PIN is automatically regenerated.
:LUHOHVV6HWWLQJVWPS SetupCisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 72REVIEW DRAFT  Version 2—CISCO CONFIDENTIAL9$3&RQILJXUDWLRQ&KDQJHVThe WPS protocol on a WPS-enabled VAP may configure the following parameters:•Network SSID•Key management options (WPA-PSK, or WPA-PSK and WPA2-PSK)•Cryptography options (CCMP/AES, or TKIP and CCMP/AES)•Network (public shared) keyIf a VAP is enabled for WPS, these configuration parameters are subject to change, and are persistent between reboots of the AP.([WHUQDO5HJLVWUDWLRQThe AP supports the registration with WPS external registrars (ER) on the wired and wireless LAN. On the WLAN, external registrars advertise their capabilities within WPS-specific information elements (IEs) of their beacon frames; on the wired LAN, external registrars announce their presence via UPnP. WPS v2.0 does not require registration with an ER to be done explicitly through the AP’s user interface. The AP administrator can register the AP with an ER by: 1. Initiating the registration process on the AP by entering the ER’s PIN on the AP.2. Registering the AP by entering the AP's PIN on the user interface of the ER.127( The registration process can also configure the AP as specified in 9$3&RQILJXUDWLRQ&KDQJHVSDJH if the AP has declared within the WPS-specific IEs of its beacon frames or UPnP messages that it requires such configuration. The AP is capable of serving as a proxy for up to three external registrars simultaneously.([FOXVLYH2SHUDWLRQRI:367UDQVDFWLRQVAny one VAP on the AP can be enabled for WPS. At most, one WPS transaction (for example, enrollment and association of an 802.11 client) can be in progress at a time on the AP. The AP administrator can terminate the transaction in progress from the web-based AP configuration utility. The configuration of the VAP, however, should not be changed during the transaction; nor should the VAP be changed during the authentication process. This restriction is recommended but not enforced on the AP.
Download:
Mirror Download [FCC.gov]
Document ID1592040
Application IDkNIe6n/l55ReI3/Mx/yytA==
Document DescriptionUser manual 2 of 4
Short Term ConfidentialNo
Permanent ConfidentialNo
SupercedeNo
Document TypeUser Manual
Display FormatAdobe Acrobat PDF - pdf
Filesize23.23kB (290395 bits)
Date Submitted2011-12-01 00:00:00
Date Available2011-12-01 00:00:00
Creation Date2011-11-29 15:27:29
Producing SoftwareAcrobat Distiller 6.0 (Windows)
Document Lastmod2011-11-29 15:27:40
Document Titleuntitled
FCC ID Filing: P27-WAP121

Navigation menu