AOS-W 6.5.3.x | User Guide PAPIEnhanced Security | 687
Chapter 29
PAPIEnhanced Security
Starting from AOS-W 6.5.1.0, a minor security enhancement is made to Process Application Programming
Interface (PAPI) messages. With this enhancement, PAPI endpoints authenticate the sender by performing a
sanity check of the incoming messages using MD5 (hash).
All PAPI endpoints—access points, Mobility Access Switches, switches, Analytics and Location
Engine (ALE), HPE-AOS-W Switch-based switches, and OmniVista—must use the same secret key.
The PAPI Enhanced Security configuration provides protection to Alcatel-Lucent devices, OmniVista, and
ALEagainst malicious users sending fake messages that results in security challenges.
PAPI Enhanced Security does not solve all the PAPI security issues.
Topics in this chapter include:
Interoperability on page 687
Configuring PAPIEnhanced Security on page 687
Verifying PAPIEnhanced Security on page 688
Interoperability
The following list of references provides the Alcatel-Lucent devices interoperability information with respect to
PAPI Enhanced security feature:
n For information on interoperability with OmniVista, refer to the OmniVista 8.2.0.3 Release Notes.
n For information on interoperability with Analytics and Location Engine (ALE), refer to the Analytics and
Location Engine 2.0.0.6 Release Notes.
n For interoperability with Mobility Access Switches, refer to the AOS-W 7.4.1.5 Release Notes.
n For interoperability with HPE-AOS-W Switch-based switches, refer to HPE's Management Configuration
Guide 16.02.
OmniVista Management Platforms–AMP 8.0.11.2 and AMP 8.2.3–support PAPI Enhanced Security.
Configuring PAPIEnhanced Security
You can configure the PAPI Enhanced Security feature from either the WebUI or the CLI.
In the WebUI
Perform the following steps to enable the PAPI Enhanced Security feature and configure a PAPI key in the
WebUI:
1. Go to Configuration > Network > Controller > System Settings.
2. Under the PAPI Security section, perform the following steps:
a. Select Yes for the Enhanced Security Mode Enabled option.
b. Enter a key in the PAPI Key text box.
c. Re-enter the PAPI key in the Retype PAPI Key text box.
3. Click Apply.
To Next Page
Loading...