Home » ZyXEL Manuals » Networking » ZyXEL ENC » Manual Viewer

ZyXEL ENC User Guide - Page 335

Advantages of Certificates, Self-signed Certificates, Factory Default Certificate, Certificate File

Get ZyXEL ENC PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 335 highlights

Chapter 9 Maintenance 2 Tim keeps the private key and makes the public key openly available. This means that anyone who receives a message seeming to come from Tim can read it and verify whether it is really from him or not. 3 Tim uses his private key to sign the message and sends it to Jenny. 4 Jenny receives the message and uses Tim's public key to verify it. Jenny knows that the message is from Tim, and that although other people may have been able to read the message, no-one can have altered it (because they cannot re-sign the message with Tim's private key). 5 Additionally, Jenny uses her own private key to sign a message and Tim uses Jenny's public key to verify the message. The ENC uses certificates based on public-key cryptology to authenticate users attempting to establish a connection, not to encrypt the data that you send after establishing a connection. The method used to secure the data that you send through an established connection depends on the type of connection. For example, a VPN tunnel might use the triple DES encryption algorithm. The certification authority uses its private key to sign certificates. Anyone can then use the certification authority's public key to verify the certificates. A certification path is the hierarchy of certification authority certificates that validate a certificate. The ENC does not trust a certificate if any certificate on its path has expired or been revoked. Certification authorities maintain directory servers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled expiration is called a CRL (Certificate Revocation List). The ENC can check a peer's certificate against a directory server's list of revoked certificates. The framework of servers, software, procedures and policies that handles keys is called PKI (public-key infrastructure). Advantages of Certificates Certificates offer the following benefits. • The ENC only has to store the certificates of the certification authorities that you decide to trust, no matter how many devices you need to authenticate. • Key distribution is simple and very secure since you can freely distribute public keys and you never need to transmit private keys. Self-signed Certificates You can have the ENC act as a certification authority and sign its own certificates. Factory Default Certificate The ENC generates its own unique self-signed certificate when you first turn it on. This certificate is referred to in the GUI as the factory default certificate. Certificate File Formats Any certificate that you want to import has to be in one of these file formats: • Binary X.509: This is an ITU-T recommendation that defines the formats for X.509 certificates. ENC User's Guide 335

Section	Page
Enterprise Network Center	1
About This User's Guide	3
Document Conventions	5
Contents Overview	7
Table of Contents	9
User’s Guide	15
Web Configurator	17
1.1 Web Configurator Requirements	17
1.2 Web Configurator Access	18
1.3 Web Configurator Screens Overview	19
1.3.1 Title Bar	20
1.3.2 Main Menu Screens	21
1.3.3 OTV and Map	25
1.3.4 Main Window	34
1.3.5 Right-click Menus	34
1.3.6 Common Icons	44
1.3.7 Working with Tables	45
Tutorials	47
2.1 Acknowledge Device Events	47
2.2 Firmware Upgrade for Multiple Devices	48
2.3 Configuration Backup for Multiple Devices	53
2.4 Configuration Restore to a Device	55
2.5 Script Distribution to Multiple Devices	58
2.6 ENC Backup and Performing a Complete Auto- Discovery with Filters	60
2.7 Event Actions Triggered By Received Events	63
2.8 Performance Monitoring for Interfaces	66
2.9 Configure VLAN Settings	70
2.10 Register Multiple NWA1300-N Series APs	74
2.10.1 Method 1	75
2.10.2 Method 2	77
2.10.3 Method 3	78
2.11 Different Map Views for Different Users	80
Technical Reference	83
Dashboard	85
3.1 Overview	85
3.2 The Dashboard Screen	85
3.2.1 Edit a Widget	90
Configuration	93
4.1 MIB Browser	93
4.1.1 MIB Browser	94
4.1.2 Custom Table	97
4.1.3 Custom Table Add/Edit	98
4.1.4 Table View	99
4.1.5 Graph View	100
4.2 Firmware Upgrade	100
4.2.1 Firmware List	101
4.2.2 Uploading Firmware to the ENC	102
4.2.3 Schedule List	102
4.2.4 Creating or Editing a Schedule List	103
4.3 Script Distribution	106
4.3.1 Script Distribution Add	107
4.4 Configuration File Update/Backup	111
4.4.1 Configuration File List	111
4.4.2 Uploading Configuration Files to the ENC	112
4.4.3 Backup Schedule List	114
4.4.4 Creating or Editing a Backup Schedule List	115
4.4.5 Update Schedule List	116
4.4.6 Creating or Editing an Update Schedule List	117
4.5 Default Performance Monitor Library	120
4.5.1 Customized Performance Monitor Library	120
4.5.2 Add a Performance Monitor	121
Event	123
5.1 Event Viewer	123
5.1.1 Events	125
5.2 Event Configuration	126
5.2.1 Edit Event Configuration	127
5.2.2 Customized Events	128
5.2.3 Customize an Event	128
5.3 Event Action	131
5.3.1 Add/Edit Event Action	132
Tool	135
6.1 Device Discovery	135
6.1.1 Automatic	135
6.1.2 Manual	135
6.1.3 Auto-Discovery	136
6.2 Inventory of Devices	140
6.2.1 Inventory Device Details - System	143
6.2.2 Inventory Device Details - Access	145
6.2.3 Inventory Device Details - Interface	147
6.2.4 Inventory Device Details - Routing	149
6.2.5 Inventory Device Details - ARP	150
6.2.6 Inventory Device Details - Port Analyzer	151
6.2.7 Inventory Device Details - MAC Table	152
6.2.8 Inventory Device Details - Wireless	153
6.3 Inventory of Networks	154
6.3.1 Inventory Network Details	155
6.4 Device Group	156
6.4.1 Device Group Add/Edit	157
6.5 PING/Trace Route	158
6.6 MIB Loader	159
6.6.1 User Loaded MIBs	159
6.6.2 Default MIBs	160
6.7 Performance Monitoring	161
6.7.1 Device Monitor	161
6.7.2 Example - Displaying Selected Performance Monitors	162
6.7.3 Example - Removing Selected Performance Monitors	162
6.7.4 Monitor Manager	163
6.7.5 Performance Monitor Add	163
6.7.6 Add a Threshold to the Performance Monitoring List	165
6.7.7 View the Performance Monitoring Report	166
6.8 Schedule Report	167
6.9 Schedule Report Add/Edit	168
6.10 Syslog Overview	169
6.10.1 Syslog View	169
6.10.2 Log Statistic	171
6.10.3 Settings	172
Report	175
7.1 Reports	175
7.1.1 Default Reports Screen	175
7.1.2 Customized Reports Screen	176
7.1.3 Report Add	177
7.1.4 Report Edit	182
7.1.5 A Report Example	182
7.2 Scheduled Report	183
7.2.1 Summary Screen	183
7.2.2 Schedule Report Add/Edit Screen	184
Application	187
8.1 Overview	187
8.1.1 What You Can Do in This Chapter	187
8.2 RMON	187
8.2.1 Statistics	188
8.2.2 History Config	194
8.2.3 Event/Alarm	199
8.3 VLAN Management	206
8.3.1 VLAN Management Configuration Examples	208
8.3.2 Edit a VLAN Group	211
8.3.3 Port Setting	214
8.4 Port Management	216
8.4.1 Basic Setting	216
8.4.2 View Port Status	218
8.4.3 Bandwidth Control Overview	219
8.4.4 Broadcast Storm Control	221
8.4.5 Port Security	222
8.4.6 Authentication Overview	225
8.5 AP Manager	230
8.5.1 The AP Profile Screen	230
8.5.2 Add/Edit an AP Profile	230
8.5.3 The AP Configuration Screen	233
8.5.4 The AP Monitor Screen	235
8.6 IP Surveillance	235
8.6.1 Initial Setup	236
8.6.2 IP Surveillance Dashboard	239
8.6.3 IP Surveillance Port Group	242
8.6.4 IP Surveillance Access Switch	243
8.6.5 IP Surveillance Aggregate Switch	246
8.6.6 IP Surveillance NVR Switch	247
8.6.7 IP Surveillance Map View	248
8.6.8 IP Surveillance Traffic Profile	249
8.6.9 IP Surveillance Port Power	250
8.6.10 IP Surveillance Power Management	251
8.6.11 IP Surveillance Traffic Guarantee	251
8.6.12 IP Surveillance Device Configuration	252
8.6.13 IP Surveillance Port Group Configuration	253
8.6.14 IP Surveillance Reports	254
8.7 Wireless Controller Management	258
8.7.1 Dashboard	260
8.7.2 AP Detail	263
8.7.3 AP Group	264
8.7.4 AP List	265
8.7.5 Radio List	265
8.7.6 Station Info	266
8.7.7 Login User	267
8.7.8 Captive Portal	267
8.7.9 Login Page	271
8.7.10 Schedule	273
8.7.11 Radio List	275
8.7.12 SSID List	278
8.7.13 Security List	280
8.7.14 MAC Filter List	283
8.7.15 AAA Server	284
8.7.16 Authentication Method	291
8.7.17 VLAN	293
8.7.18 Zone	299
8.7.19 AP Configuration	302
8.7.20 NXC5200 Configuration	304
8.7.21 NXC5200 Notification Alarms	306
8.7.22 Wireless Controller Management Reports	306
Maintenance	315
9.1 User Account Overview	315
9.2 Types of Accounts	315
9.3 User Account	316
9.3.1 User Account Add	318
9.4 Server	319
9.5 Customize	320
9.5.1 Customize Device Models	320
9.5.2 Device Model Add/Edit	321
9.5.3 Customize Images	323
9.5.4 Images Add/Edit	325
9.6 Backup/Restore	327
9.6.1 Backup	329
9.7 Data Export	330
9.8 Registration	330
9.8.1 Registration Screen	331
9.9 Application Management	332
9.10 Log	333
9.11 About	334
9.12 Certificate Management	334
9.12.1 What You Need to Know	334
9.12.2 Verifying a Certificate	336
9.12.3 The Certificate Management Screen	337
9.12.4 The Create CSR Screen	339
9.12.5 The Import Certificate Screen	340
Troubleshooting	343
10.1 Installation Problem	343
10.2 Problem Accessing the ENC	343
10.3 Problem Finding a Device	344
10.4 Map Problems	345
10.5 Script Problems	345
10.6 Event Action Problems	346
10.7 VLAN/Port Management Problems	346
10.8 Lose Connection Problems	346
10.9 Syslog Problems	347
10.10 Configuration Backup Problems	347
10.11 Other Problem	347
Product Specifications	349
IP Addresses and Subnetting	351
Pop-up Windows, JavaScript and Java Permissions	361
Open Software Announcements	371
Legal Information	381

Match case Limit results 1 per page

Chapter 9 Maintenance

ENC User’s Guide

335

Tim keeps the private key and makes the public key openly available. This means that anyone who

receives a message seeming to come from Tim can read it and verify whether it is really from him

or not.

Tim uses his private key to sign the message and sends it to Jenny.

Jenny receives the message and uses Tim’s public key to verify it. Jenny knows that the message is

from Tim, and that although other people may have been able to read the message, no-one can

have altered it (because they cannot re-sign the message with Tim’s private key).

Additionally, Jenny uses her own private key to sign a message and Tim uses Jenny’s public key to

verify the message.

The ENC uses certificates based on public-key cryptology to authenticate users attempting to

establish a connection, not to encrypt the data that you send after establishing a connection. The

method used to secure the data that you send through an established connection depends on the

type of connection. For example, a VPN tunnel might use the triple DES encryption algorithm.

The certification authority uses its private key to sign certificates. Anyone can then use the

certification authority’s public key to verify the certificates.

A certification path is the hierarchy of certification authority certificates that validate a certificate.

The ENC does not trust a certificate if any certificate on its path has expired or been revoked.

Certification authorities maintain directory servers with databases of valid and revoked certificates.

A directory of certificates that have been revoked before the scheduled expiration is called a CRL

(Certificate Revocation List). The ENC can check a peer’s certificate against a directory server’s list

of revoked certificates. The framework of servers, software, procedures and policies that handles

keys is called PKI (public-key infrastructure).

Advantages of Certificates

Certificates offer the following benefits.

•

The ENC only has to store the certificates of the certification authorities that you decide to trust,

no matter how many devices you need to authenticate.

•

Key distribution is simple and very secure since you can freely distribute public keys and you

never need to transmit private keys.

Self-signed Certificates

You can have the ENC act as a certification authority and sign its own certificates.

Factory Default Certificate

The ENC generates its own unique self-signed certificate when you first turn it on. This certificate is

referred to in the GUI as the factory default certificate.

Certificate File Formats

Any certificate that you want to import has to be in one of these file formats:

•

Binary X.509: This is an ITU-T recommendation that defines the formats for X.509 certificates.