RDL-3000 User Manual
70-00158-01-DRAFT Proprietary Redline Communications © 2010 Page 128 of 142 November 25, 2010
Web: Configuration screen -> Wireless Security Configuration:
X.509 Authentication Enable
Note: Save the configuration to activate changes.
Example
Load certificate files and key from the TFTP server at 192.168.25.10 to the RDL-3000 having
MAC address 00 09 02 01 C1 9A.
192.168.25.2# load file 192.168.25.10 usr_wacert_00-09-02-01-C1-9A.der usr tftp
192.168.25.2# load file 192.168.25.10 usr_wcert_00-09-02-01-C1-9A.der usr tftp
192.168.25.2# load file 192.168.25.10 usr_wkey_00-09-02-01-C1-9A.der usr tftp
192.168.25.2# show files usr
dsa_key.pem size=672 md5=fa9bd7a1f465fd7e9fed30150b0608c4
usr_wkey.der size=1194 md5=1c5c5ddd0f08604a3b48cf41a8570557
usr_wacert.der size=1144 md5=ff0ce6923fc67a02d1e7bc6fa4856f94
usr_wcert.der size=999 md5=82b115af9dba510e5af8ce558e964265
192.168.25.2# reboot
...
192.168.25.2# set x509auth on
192.168.25.2# save config
7.3 AES Encryption
AES 128 bit wireless encryption is a standard feature on all RDL-3000 systems. AES
246-bit wireless encryption is an optional feature that may be purchased separately.
AES encryption is not supported on RDL-3000 systems.
7.3.1 Out of Box Operation
AES encryption is not supported out of box. Each RDL-3000 system to be use AES
encryption must meet the following requirements:
1. AES 128-bit:
An options key enabled for AES 128-bit operation must be obtained (no charge),
loaded on the RDL-3000, and be the currently active options key. AES 128-bit
operation is a standard feature for RDL-3000 systems.
2. AES 256-bit:
An options key enabled for AES 256-bit operation must be purchased, loaded on the
RDL-3000, and be the currently active options key. AES 256-bit operation is a
chargeable upgrade for RDL-3000 systems.
7.3.2 Enabling AES
Use the following steps to setup and enable AES encryption:
1. Obtain an AES-enabled upgrade options key for all communicating RDL-3000
systems.
2. Copy the new options key to each RDL-3000 and set this to be the active key.
See section 4.7.3: Product Options on page 90.
3. Choose the same AES encryption setting on all communicating RDL-3000 systems.
A data link can be established only between systems with identical security settings.
Web: Configuration screen -> Wireless Security Configuration: Encryption Type
(None, 64-Bit, AES 128, AES 192, AES 256)
4. Enter the shared key to be used for all communicating RDL-3000 units.
5. Save the configuration to active changes.
To Next Page
