WESM zl Management and Configuration Guide WT.01.28 and greater

2-24
Configuring the ProCurve Wireless Edge Services zl Module
Management Interfaces
Security
In addition to supporting the latest security standards for wireless communications,
the Wireless Edge Services zl Module allows you to secure management access. To
protect communications between the Wireless Edge Services zl Module and your
management workstation, the module supports secure hypertext transfer protocol
(HTTPS) over Secure Socket Layer (SSL), and SNMP v3. Management users and
their related passwords are also controlled through SNMP v3. You can also use SSH
to access the module CLI indirectly.
SSH Access
If you want to access the Wireless Edge Services zl Module CLI from a remote location,
consider using SSH to access the wireless services-enabled switch CLI and, through the
switch CLI, the module’s. Although you can use Telnet to access the switch CLI (and
through it the module CLI), Telnet is not secure from eavesdropping. The SSH protocol,
on the other hand, generates public keys to encrypt all the data exchanged between the
module and your management workstation. Further, SSH ensures that data traveling
over the network arrives unaltered.
HTTPS Access
By default, the Wireless Edge Services zl Module supports both HTTP and HTTPS.
When you use HTTPS to access the module’s Web browser interface, the connection
between your management workstation and the Wireless Edge Services zl Module
is secure. Communications between your workstation and the module are encrypted.
Note You cannot modify the port numbers for HTTP and HTTPS.
SNMP Support
The Wireless Edge Services zl Module supports SNMP v1/v2c, allowing SNMP
servers that know the correct community names either complete read-write or read-
only access to the module.
The module also supports SNMP v3, a more secure—and flexible—way of control-
ling the users and SNMP servers allowed management privileges to the Wireless
Edge Services zl Module.
SNMP v3 encrypts management communications. For example, SNMP v3 support
secures messages between the Java applet running the Web browser interface and
your management workstation even when you use HTTP, rather than HTTPS.