Cisco CX-FEIP-1TX= Installation and con?guration Guide de l'utilisateur Page 136
- Page / 648
- Table des matières
- DEPANNAGE
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
Security planning Chapter 2: Planning considerations
2-24
phn-2513_004v000 (Oct 2012)
Planning for FIPS 140-2 operation
To prepare for FIPS 140-2 secure mode operation, generate the following cryptographic
material using a FIPS-approved cryptographic generator:
• Key of Keys
• TLS Private Key and Public Certificates. FIPS 140-2 now recommends 2048 bit keys.
• Entropy Input
• Wireless Link Encryption Key for AES
Enable the web browsers for HTTPS/TLS operation using FIPS-approved cipher
specifications.
Configure the following attributes of user accounts for the web-based management
interface to match the network security policy:
• Auto Logout Period.
• Maximum Number of Login Attempts.
• Login Attempt Lockout.
• Minimum Password Change Period.
• Password Expiry Period.
• Webpage Session Control
Configure the following attributes:
• Password complexity rules reset to ‘best practice’ values.
• User account passwords compliant with the network security policy.
• RADIUS authentication = Disabled.
Configure all of the above correctly to ensure that PTP 800 is operating in compliance
with the FIPS 140-2 validation.
FIPS validated software is available from System Release PTP800-04-00. Load standard
(non-FIPS) software from PTP800-04-00 or later before loading a FIPS software image.
- Cambium 1
- PTP 800 Series 1
- User Guide 1
- Accuracy 2
- Copyrights 2
- Restrictions 2
- License Agreements 2
- High Risk Materials 2
- Important safety information 3
- Electrical safety 4
- Primary disconnect device 4
- External cables 4
- RF exposure near the antenna 4
- Thermal safety 4
- Contents 5
- Contents 10
- PTP 800 Series User Guide 11
- List of Figures 17
- List of Figures 18
- List of Tables 23
- List of Tables 24
- About This User Guide 31
- General information 32
- Purpose 33
- Cross references 33
- Feedback 33
- Problems and warranty 34
- Security advice 36
- Warnings 37
- Cautions 37
- Caring for the environment 38
- Licensing requirements 39
- Overview 42
- System components 45
- Link types 46
- Compact modem unit (CMU) 48
- CMU interfaces 49
- Further reading on the CMU 52
- Outdoor unit (ODU) 53
- ODU interfaces 54
- Further reading on the ODU 57
- Indoor RF unit (IRFU) 58
- Transceivers 59
- Branching unit 59
- IRFU availability 59
- IRFU configuration options 60
- 1+1 Tx MHSB / Rx SD 63
- IRFU interfaces 65
- Further reading on the IRFU 66
- Antennas and couplers 67
- Remote mounting kits (RMKs) 69
- Coupler mounting kits 70
- RFU to CMU connections 74
- CMU to network connections 74
- Wireless operation 77
- Modulation modes 78
- Maximum receive power 79
- Maximum transmit power 80
- Security 80
- Management network 83
- Out-of-band local management 84
- In-band quality of service 85
- Source address learning 85
- Wireless link down alert 85
- Protocol model 86
- Protocol layers 89
- System management 91
- User account management 92
- Identity-based user accounts 92
- Password complexity 92
- Installation wizard 93
- Configuration pages 93
- RADIUS authentication 93
- Email alerts 94
- SNMPv3 security 96
- System logging (syslog) 99
- AES license 100
- Login information 101
- Flexible capacity upgrades 101
- Software upgrade 102
- Recovery mode 102
- 1+1 Hot Standby overview 104
- Primary and secondary units 105
- Single antenna per end 105
- Bridging in 1+1 links 106
- Receive Diversity 107
- FIPS 140-2 110
- FIPS 140-2 mode 111
- Link planning 114
- Site selection 115
- Wind loading 115
- Maximum IF cable length 115
- Power supply considerations 116
- PTP LINKPlanner 117
- Standards 119
- Lightning protection zones 120
- Basic requirements 121
- Grounding cable requirements 121
- Data network planning 130
- VLAN membership 131
- IP interface 131
- Layer 2 control protocols 132
- Priority schemes 132
- Ethernet priority scheme 132
- IP/MPLS priority scheme 132
- Fast Ethernet port shutdown 133
- Security planning 134
- SNMP security mode 137
- RADIUS attributes 140
- Planning 1+0 links 142
- Choosing Ethernet switches 155
- Planning 2+0 links 161
- Ordering components 169
- Ordering antennas 171
- Ordering ODUs 181
- – 38805 MHz 700 MHz 192
- Ordering RMKs and waveguides 197
- Ordering OMKs 202
- Ordering capacity upgrades 209
- Acceptance of this agreement 212
- Definitions 212
- Grant of license 212
- Conditions of use 213
- Title and restrictions 214
- Confidentiality 214
- Right to use Cambium’s name 215
- Transfer 215
- Updates 215
- Maintenance 215
- Disclaimer 216
- Limitation of liability 216
- U.S. government 217
- Term of license 217
- Governing law 217
- Assignment 218
- Survival of provisions 218
- Entire agreement 218
- Third party software 218
- NET SNMP 221
- Hardware warranty 230
- Limit of liability 231
- Equipment specifications 234
- ODU specifications 237
- IRFU specifications 240
- Waveguide flanges 242
- Waveguide flange diagrams 244
- Coupler losses and isolation 248
- Protection cable 249
- Fiber-Y kit specifications 250
- Wireless specifications 251
- Data network specifications 303
- Ethernet bridging 304
- Syslog message formats 305
- Event messages 306
- Standard SNMP MIBs 309
- Interfaces 311
- Counters 311
- Notifications 313
- Electromagnetic compliance 314
- Compliance testing 315
- European Union notification 317
- Thailand notification 317
- Radiation hazard assessment 318
- Calculation 319
- Distances from antenna 319
- FCC method 320
- Chapter 5: Installation 323
- Preparing for installation 324
- Preparing personnel 325
- Preparing inventory 325
- Preparing tools 325
- Unit pre-configuration 326
- Installing antennas and ODUs 327
- Attaching coupler to antenna 343
- Attaching ODUs to coupler 346
- Attaching coupler to RMK 348
- Attaching antenna to pole 352
- Preparing IF cables 360
- Crimping a connector 363
- Hoisting the main IF cable 371
- Using the hoist line 373
- Testing the ODU and IF cable 382
- Test preparation 383
- Testing cable loss 384
- Expected cable loss 388
- Measuring distance to fault 389
- DTF return loss example 390
- Preparation 392
- Grounding the IRFU 396
- Connecting power to the IRFU 398
- Installing the CMU 399
- Mounting the CMU 400
- Wall mounting 401
- Rack mounting 401
- Grounding the CMU 402
- ODU-based deployments 404
- IRFU-based deployments 404
- Replacing IRFU components 417
- Replacing a transceiver 419
- Remove the transceiver 420
- Install the new transceiver 421
- Replacing a branching unit 422
- Reinstall the transceiver 423
- Replacing filters 424
- Replacing a fan assembly 425
- Replacing an RF cable 426
- Remove the RF cable 427
- Install the new RF cable 427
- Updating the ARP table 433
- Out-of-band management 436
- In-band management 437
- Generating a new license key 451
- Entering a new license key 451
- Task 5: Configuring security 456
- Configuring AES encryption 457
- Configuring HTTPS/TLS 460
- Using the Security Wizard 461
- Step 1: Enter key of keys 463
- Step 3: User security banner 464
- Setting user account options 470
- Setting password complexity 473
- Changing own user password 476
- Starting Installation Wizard 491
- Configuring SNMPv3 agent 505
- Configuring SNMPv1/2c agent 514
- Task 10: Configuring syslog 522
- Task 12: Aligning antennas 526
- Prerequisites for alignment 527
- Aligning protected antennas 527
- Aligning dual-polar antennas 527
- Aligning a pair of antennas 528
- Step 6: Aligning antennas 528
- Preparing for alignment 529
- Aligning one end 530
- Aligning the other end 531
- Post-alignment actions 531
- Step 7: Completing alignment 533
- Connecting to the network 542
- Setting the real-time clock 543
- HTTPS key size warning 551
- Chapter 7: Operation 553
- Web-based management 554
- Using the menu options 556
- Viewing the system summary 558
- Viewing the system status 559
- Status attributes 561
- Logging out 566
- Managing alarms and events 567
- Alignment mode 568
- Data port disabled warning 568
- Data port fiber status 569
- Data port status 569
- Encryption Enabled Mismatch 569
- FCC capacity check 569
- Fips Operational Mode Alarm 570
- Link name mismatch 570
- Management port status 571
- Protection Interface Status 572
- RFU Common IF Synth Lock 572
- RFU Common RF Synth Lock 572
- RFU Fan 572
- RFU High Temperature 573
- RFU RF Switch 573
- RFU RF Switch Cable 573
- RFU Rx IF Synth Lock 573
- RFU Rx RF Synth Lock 574
- RFU Status 574
- RFU Tx IF Synth Lock 574
- RFU Tx RF Synth Lock 574
- SNTP Synchronization Failed 575
- Unit Out Of Calibration 575
- Wireless link status 575
- Managing email alerts 576
- Managing SNMP traps 576
- Viewing system status 588
- Viewing alarms and faults 588
- Forcing protection switches 589
- Example 590
- Example 595
- Replacing the CMU on site 601
- Managing security 603
- Displaying login information 604
- Disabling AES encryption 604
- Changing AES encryption keys 605
- Unprotected link 606
- 1+1 Hot Standby link 606
- Changing the log-out timer 608
- Managing performance 609
- Viewing diagnostics 614
- Downloading diagnostic data 616
- Maintaining the system 618
- Licensed capabilities 619
- Upgrading software 620
- Rebooting 621
- Using recovery mode 623
- Selecting recovery option 624
- Upgrading software image 626
- Erasing configuration 628
- Downgrading PTP 800 software 629
- Chapter 8: Troubleshooting 631
- CMU out of service 633
- Check IP network connection 637
- Check browser settings 638
- Installing the link 639
- Transmitter status 640
- Antenna alignment 640
- Check waveguide and antennas 641
- Check link status 641
- Check IRFU status LEDs 642
- Glossary 645
- Glossary 646
Produits connexes et manuels pour Mise en réseau Cisco CX-FEIP-1TX= Installation and con?guration
(74 pages)
Mise en réseau Cisco 1710 Spécifications
(88 pages)
(88 pages)
(139 pages)
(164 pages)
Mise en réseau Cisco PA-T3 Spécifications
(74 pages)
(74 pages)
© 2020, manymanuals.fr. Tous droits réservés | 0.209 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels