User's Guide

3e-531AP Wireless Access Point

Chapter 1: Introduction

29000125-001 C

Chapter 1: Introduction

This manual covers the installation and operation of the 3e Technolo-

gies International’s 3e-531AP Wireless Access Point, which conforms to

the requirements of FIPS PUB 140-2, Security Requirements for Crypto-

graphic Modules. The 3e-531AP Wireless Access Point provides a connec-

tion between an Ethernet LAN and a wireless LAN (WLAN). The wireless

LAN can include mobile devices such as handheld Personal Data Assis-

tants (PDAs), mobile web pads, and wireless laptops as long as they have

the 3e-010F Crypto Client software installed. (The 3e-010F Crypto Client

software is sold with the 3e-110 long range PC Card or sold separately for

use with other compatible PC Cards.)

The 3e-531AP incorporates Power over Ethernet (PoE), IEEE 802.3af,

and the highest security functionality including the ability to manage RF

centrally and to even shut off RF to wireless devices entirely, should that

be necessary. The PoE solution eliminates the need for internal gateway

power supply units (AC-DC converters) and 110-220V cabling installa-

tions for the gateway operation. In the 3e-531AP, however, the capability

to switch to AC power has been provided as a backup in the event the

Power over Ethernet hub is lost or unavailable. The device detects power

failure and automatically switches to AC current with minimal wireless

connection interruption using the power cord provided. (Note: a power

cord does not have to be plugged in to the 3e-531AP during setup, but it

is recommended that it be kept available for use in case of failure of the

PoE Power Supply.)

The PoE interface on the 3e-531AP is compatible with commercial

vendor “injected power” hub units (also known as Ethernet Power Sup-

ply or Power over Ethernet Hub) interfaces.

The 3e-531AP conforms to the FIPS 140-2 speci cation. It includes

the following cryptographic modules: AES/3DES for wireless encryption;

dynamic key exchange (Dif e-Hellman module 1024) for wireless com-

munication; and HTTPS/TLS, for secure web communication. The 3e-

531AP contains three cryptographic modules and ports: Ethernet WAN

uplink interface for communication to the wired LAN backbone; Ethernet

LAN local port for communication to a local wired LAN; and wireless

LAN port for wireless communication to local clients. The authorized

roles supported are Crypto Of cer Role and Administrator Role. Crypto-

graphic services provided include; AES and 3DES for wireless; SHA-1 for

authentication; HMAC SHA-1 for keyed authenticated  rmware upgrade;