Dickson is the global leader in solutions and compliance for over 80,000 companies and amongst the world’s most heavily regulated industries for nearly 100 years.

Dickson Data Difference

<h4>About the LoRaWAN RF Gateway Security</h4>
The LoRa Gateway is a piece of network infrastructure and should be treated as such, and therefore the following configurations are set to help make it more secure.
<ul>
 	<li>The default administrator password must be set by the end user</li>
 	<li>The SSH service has been disabled</li>
 	<li>The telnet service has been disabled</li>
 	<li>The openvpn service has been disabled</li>
 	<li>The serial console has been disabled</li>
 	<li>Firmware update (.d1f) files are encrypted</li>
 	<li>Firmware update (.d1f) files cannot be installed unless they were signed with Dickson's unique private key</li>
</ul>
Below are additional steps you can take to further secure your LoRa gateway and recommendations to consider
<h4>Securing the Gateway and Recommendations</h4>
<h5>Configure a Password for the Administrator Account</h5>
To better secure the gateway, a default password is not provided and the gateway will force a user to create one on the first login. To configure a secure password to protect the administrator’s account:
<ol>
 	<li>Connect to your device and navigate to the administration page by either
<ol>
 	<li>Connecting to the wireless access point and then going to 192.168.230.1 in a browser</li>
 	<li>Connecting to the device via ethernet at its assigned IP address</li>
</ol>
</li>
 	<li>Upon initial navigation to the admin page, the gateway will ask you to configure a password, do so now and ensure it is secure (per your company’s password policy</li>
 	<li>You will then be asked to log in using your new password</li>
</ol>
<h5>Disable the Wireless Access Point</h5>
The gateways will broadcast a wireless access point, used primarily for configuration, but it can be disabled if needed.
<ol>
 	<li style="font-weight: 400;">Connect to your device and navigate to the administration page by either
<ol>
 	<li style="font-weight: 400;">Connecting to the wireless access point and then going to 192.168.230.1 in a browser</li>
 	<li style="font-weight: 400;">Connecting to the device via ethernet at its assigned IP address</li>
</ol>
</li>
 	<li style="font-weight: 400;">Log into the device’s admin page</li>
 	<li style="font-weight: 400;">Navigate to Network &gt; WiFi</li>
 	<li style="font-weight: 400;">Locate the Radio section
<ol>
 	<li>If you want to use the gateway on WiFi but disable it from broadcasting, set Mode to "Client"</li>
 	<li style="font-weight: 400;">If you want to disable the WiFi Radio entirely, click the “Disable” button</li>
</ol>
</li>
 	<li style="font-weight: 400;">Hit “Save &amp; Apply”</li>
</ol>
Note
Disabling the Wireless Access Point requires disabling the WiFi Radio entirely and forcing the use of ethernet (or in some cases, cellular) as the only means to connect the gateway to the internet.

Disabling the Wireless Access Point will require connecting to the device directly via its IP address on your network to change any configurations needed in the future.
<h5>VLAN</h5>
It is increasingly common for IoT devices to be separated from other devices/networks/equipment by the use of VLANs. If your organization already follows these practices, then it is generally a good practice to do that here as well.
<h5>Limit Physical Access</h5>
While care should be taken to limit the effects of radio interference, you may want to limit physical access to the gateway.
This may include:
<ul>
 	<li style="font-weight: 400;">Locking the gateway in an enclosure</li>
 	<li style="font-weight: 400;">Placing the device in ceiling tiles</li>
 	<li style="font-weight: 400;">Placing the device in an IT closet</li>
 	<li style="font-weight: 400;">Mounting the device to the ceiling or high on a wall (out of reach)</li>
</ul>
In any situation, care should be taken to avoid interference with the antennas and radio signals.
<h5>Cellular</h5>
You can use a LoRa gateway that offers cellular connectivity instead of WiFi or Ethernet. 3rd-party gateways are available and can be configured to work with the DicksonOne application. Dickson is in the process of testing a cellular gateway; if you’re interested in testing please contact <a href="mailto:support@dicksonone.com">support@dicksonone.com</a>.
Success

Securing the LoRaWAN RF Gateway