Appendix 2 security – Toshiba Magnia Z310 User Manual
Page 119
112
Appendix 2 Security
Because it is difficult to define the communication area of a wireless LAN network because of the
wireless (radio) characteristics, the definition is likely to be vague. Depending on where the
equipment is installed or how the office is constructed, the network area may extend to outside
the site. This means that communication data leaks to the outside of the site, and illegal access
from outside the site may be allowed. Even if the network area remains in the site, if visitors come
into the site, illegal access from the parking lot or lobby may occur.
Therefore, it is important to enhance security when working with a wireless LAN network.
The following explains the points that are important for enhancing security. You should implement
not just one of the following security measures, but as many as possible. Having multiple security
measures in place increases the level of security.
· Network name (ESSID)
The network name (ESSID) is a group name that logically identifies the wireless LAN network.
Because it is not a password but an identifier, its security is not enhanced.
Memo
The default is MAGNIA. If it is not changed, a third person may connect to the access point easily
. Please change it.
For the configuration, see the following section.
[3.2.2.2 [Basic Setting] tab]
· Don't accept station with network name "ANY"
This product, allows clients which have no ESSID configured or whose ESSID is “ANY” to connect
to the access point. Although this function aims at being easily connectable to the access point
even if the client’s ESSID is not set up, it also may lead to unauthorized access to the access
point..
Memo
The default is to accept clients with network name “ANY” Please change it.
If this option is activated (clients using the network name “ANY” are rejected), the Access Point is
not visible to client configuration software (e. g. in Windows XP’s configuration pages, the Access
Point does not appear in the list “Available Networks”.)
.
For the configuration, see the following section.
[3.2.2.2 [Basic Setting] tab]
· Filtering by MAC address
The MAC address is the hardware address assigned to the wireless LAN card.
Only the stations
which have their MAC address registered can connect to the network. This prevents access to the
network by co-incidence. But it is not useful for stations imitating another MAC address.