Page 56 / 180 Scroll up to view Page 51 - 55
56
IPv6: The New Internet Protocol
Support with the FRITZ!Box
The FRITZ!Box supports DNSSEC queries over UDP.
The FRITZ!Box has a DNS proxy. The computers in the home
network use the FRITZ!Box as a DNS server. The FRITZ!Box for-
wards DNSSEC queries from the home network to the Inter-
net. The FRITZ!Box forwards DNSSEC responses from the
Internet to the home network. The DNSSEC information must
be validated on the computer in the home network. For this
DNSSEC must be supported in the operating system.
Security with DNSSEC
When a home user surfs the web, she or he sends queries to
the Internet by entering URLs in the address line of his brows-
er. A URL is the name of a web site that is easy to remember,
such as
avm.de/en
. Every query is sent to the DNS server
first. The DNS server resolves the URL into the corresponding
IP address. There is one unambiguous IP address for every
URL.
The home user relies on the authenticity of the IP address re-
turned by the DNS server. Authentic means that the response
is the IP address of the desired web site, and not a faked IP
address that leads to a fake web site. DNSSEC can ensure that
the returned addresses are authentic.
10.8
IPv6: The New Internet Protocol
IPv6 stands for Internet protocol version 6 and is the succes-
sor to IPv4.
The FRITZ!Box supports the new IPv6 web protocol and can al-
ready establish IPv6 connections today:
IPv6 support can be switched on in the FRITZ!Box user
interface, in the “Internet / Account Information” menu.
For simultaneous use of IPv6 and IPv4, the FRITZ!Box
supports dual-stack and dual-stack lite. This means that
the FRITZ!Box can communicate with both IPv4 and IPv6
domains in the Internet.
Page 57 / 180
IPv6: The New Internet Protocol
57
The FRITZ!Box supports native IPv6 and IPv6 with a tun-
nel protocol. Native IPv6 means that your Internet Ser-
vice Provider supports IPv6 directly on your line.
IPv6-capable Services in the Home Network
FRITZ!NAS access via SMB or FTP/FTPS
access to the user interface with http or https over IPv6
The DNS resolver of the FRITZ!Box supports queries for
IPv6 addresses (AAAA records) and can query the up-
stream DNS resolver of the Internet provider over IPv6.
The globally valid prefix is distributed via router adver-
tisement.
For guest access to the WLAN, the home network and
WLAN guests are separated by IPv6 subnetworks.
UPnP, UPnP AV media server
IPv6-capable Services in the Internet
FRITZ!NAS access via FTPS
a completely closed firewall to protect against unwanted
data from the Internet (Stateful Inspection Firewall)
voice over IPv6
automatic provisioning (TR-069)
time synchronization over NTP (Network Time Protocol)
remote access via https
Setting Up IPv6 in the FRITZ!Box
1.
Open the FRITZ!Box user interface.
2.
Enable the expert settings in the “System / Expert
Mode” menu.
3.
Then select the “Internet / Account Information” menu.
4.
Select the “IPv6” page and set up IPv6 in the FRITZ!Box.
Consult the Online Help of the FRITZ!Box user interface
for more information.
Page 58 / 180
58
IPv6: The New Internet Protocol
Setting Up IPv6 on the Computer
You can establish connections in the IPv6 range of the Inter-
net only if IPv6 is installed and enabled on the computers in
your home network.
IPv6 is already installed and enabled in the Windows 7
and Windows Vista operating systems.
IPv6 is not installed and enabled in standard
Windows XP. You must install and enable IPv6 in order to
use it. The IPv6 installation requires Service Pack 2 for
Windows XP.
IPv6 has been available in the MAC OS X operating sys-
tems since MAC OS 10.
Page 59 / 180
FRITZ!Box as a WLAN Base Station
59
11
FRITZ!Box as a WLAN Base Station
The FRITZ!Box supports WLAN (Wireless Local Area Network) technolo-
gy. In this chapter you will learn how you can use WLAN with the
FRITZ!Box.
11.1
Security
Security is of utmost importance within radio networks.
Therefore it is important that no unauthorized users can reg-
ister in a WLAN to use its Internet access or shared network
resources.
FRITZ!Box includes settings on various levels that contribute
to the security of your WLAN and thus to the security of your
computers.
Encryption
The most important security setting is encryption. FRITZ!Box
supports the security mechanisms WEP (Wired Equivalent Pri-
vacy), WPA (Wi-Fi Protected Access) and WPA2 as follows:
As part of the
WEP mechanism a static key is deter-
mined to serve for the encryption of the user data.
Enter the key in the WLAN security settings of the
FRITZ!Box. All of the WLAN devices in your wireless net-
work must also use this key.
Radio signals can also be received outside of office or resi-
dential spaces and abused for criminal purposes.
Page 60 / 180
60
Security
The WPA and WPA2 mechanisms provide for authentica-
tion while the connection is being established. For this a
WPA password must be defined.
When WPA is selected, the TKIP encryption method is
used to encrypt the user data. In WPA2 the AES-CCMP
encryption method is used.
The encryption method you configure here must also be
supported by your WLAN adapter.
The user data are encrypted using an automatically gen-
erated key. This key is regenerated at regular intervals.
The WPA password used may be 8 to 63 characters in
length. For increased security, however, the password
should be at least 16 characters long. Use numerals, let-
ters and special characters and combine capitals and
lower-case letters.
Default Setting of the FRITZ!Box
In the FRITZ!Box a method combining WPA + WPA2 encryption
with the TKIP/AES-CCMP encryption method is preconfigured.
This setting allows you to use WLAN adapters that support
WPA (TKIP) or WPA2 (AES-CCMP) or both methods.
Recommendation
Set the most secure encryption method supported by your
WLAN adapter in the FRITZ!Box.
If your WLAN adapter supports WPA2:
Enable WPA encryption.
Select the WPA mode “WPA2 (CCMP)” or “WPA+WPA2”.
Replace the WPA network key with a new, unique value.
It is advisable to change the preconfigured WLAN key as soon
as possible. Changes to the settings can be configured on
the FRITZ!Box user interface.

Rate

3.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top