HP RM-20 - Manual (Page 18)

SmartShare
®
User Manual
– 17 –
Security Considerations
Physical Access
The SmartShare should be installed in a locked patch panel. Anyone with physical
access to the SmartShare can power it off, disconnect it or change the configuration
via the Serial port.
Password Protection
The SmartShare configuration menu is password protected. Keep your password safe.
Firewall
The SmartShare firewall prevents potential intruders on the Internet from accessing
computers on the local network.
The firewall does not prevent users on the local network from downloading virus or
other malware from the Internet to their computers. Users on the local network should
protect their computers with anti-virus software.
The firewall does not prevent intruders connected on the local network from accessing
other computers on the local network. Switches and wireless access points in the local
network should prevent intruders and other users on the local network from accessing
each other’s computers. For further information, please refer to the chapter about
protecting local users from each other.
Protecting Local Users from Each Other
When installing and configuring the local network infrastructure, i.e. switches and
wireless access points, it should be considered if the local network should be open
(where all local users can connect to each other and share files etc.) or protected
(where all local users are separated from each other, and each user only has access to
the Internet and local servers).
User separation has different names, depending on equipment and vendor. In
switches, look for “source-port filters” (HP ProCurve terminology), “Private VLANs”
(Cisco terminology) or similar. In wireless access points, look for “AP isolation”,
“client isolation” or similar.
User separation does not affect the SmartShare, and the SmartShare works equally
well with both open and protected networks.
Troubleshooting and FAQ
Q: After the SmartShare was installed, some of the computers on the local network
can no longer access the Internet.
A: This is probably because the computers still have the old configuration from the
previous Internet router. In Microsoft Windows, start a Command Prompt (Start ->
Run; cmd.exe), and run the command
ipconfig /release and then run the
command ipconfig /renew .
Q: There is no connectivity from the LAN to the WAN after the LAN has been
configured on the SmartShare.
A: The LAN can not use the same IP address range as the WAN. Verify that the
configuration doesn’t conflict.