RE: Network ?

I'm sure others will chime in with more specifics.  I've no clue on what
802.1Q is.

One thing to keep in mind with your proposed scenario is that the WAP
will provide a path to the 400, granting a possible attacker the means
to access the system.  Better would be to have the network link be
something like WAP <-> Firewall <--> AS/400 (or regular LAN) with the
firewall filtering everything out except what your scanners need.

If you do proceed with WAP <--> AS/400 direct, be sure to close off all
services possible on that Ethernet line.  Also make sure the 400 won't
act as a router and let wireless traffic into the regular network.

Either way, you should probably also SSL-enable the wireless devices (if
they aren't already) and change the default IP ports.  WEP and other
inherent wireless 'security' is miserably inadequate.

- John

-----Original Message-----
From: Mark Allen [mailto:mallen@xxxxxxxx] 
Sent: Thursday, June 19, 2003 10:07 AM
To: midrange-l@xxxxxxxxxxxx
Subject: Network ?


/*STRNETWKIGNORANCE
 
Hope I can make this clear enough so someone can answer.
 
We are getting ready to install wireless access points for RF scanners
to access our AS/400.  My network guy is concerned with putting them on
the same LAN as the rest of our devices since if anyone did manage to
access the wireless access points they would then have access to our
entire network.  What he wants to do is install a 2nd NIC in the AS/400
(have call into BP on that now) and put the wireless devices on that
LAN.
 
Here comes the part when I am just going to quote him as I have NO idea
what he is talking about.  He needs to do if the AS/400 will support
802.1Q data tagging as he says he needs that to support the 2 virtual
LANS???
 
Any tips, links, explanation would be appreciated!!!
 
/* ENDNETWKIGNORANCE
 
Mark Allen
IS Manager
Wilkes Telephone & Electric
11 W. Court Street
Washington, GA 30673
Phone: (706) 678-9565
Fax: (706) 678-1000
 

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

This e-mail is for the use of the intended recipient(s) only.  If you have 
received this e-mail in error, please notify the sender immediately and then 
delete it.  If you are not the intended recipient, you must not use, disclose 
or distribute this e-mail without the author's prior permission.  We have taken 
precautions to minimize the risk of transmitting software viruses, but we 
advise you to carry out your own virus checks on any attachment to this 
message.  We cannot accept liability for any loss or damage caused by software 
viruses.