ormation contained in the first certificate will also be provided, SO that the full certification path can be checked. VoWLAN and VolP Security As noted in the previous chapter, when telephony moves from the relative security of physical telephone lines and exchanges to the wireless LAN or Table 8-12: VoWLAN/VolP Security Measures Vo WLAN/VOIP security measure Description Separate VoWLAN phones Putting VoWLAN phones on a separate virtual from other LAN devices LAN (VLAN) and using private, non-routable, using a virtual LAN IP addresses will prevent the VoWLAN system from being accessed or attacked via the Internet. IP phones will be needed that support the 802.1p/q VLAN standard. Encrypt voice traffic between Encryption can eliminate voice traffic's the phone and the PSTN vulnerability to eavesdropping en route to the gateway telephone network. Use a firewall to protect If a connection between voice and data WLANs connections between voice is required, for example, to allow desktop and data WLANs software to manage VoWLAN phone information, use a properly configured firewall to eliminate unwanted access routes (ports, protocols, etc.). Use a VPN to secure VoIP A separate user log-in to the VoWLAN virtual traffic from remote users LAN can be used to ensure that access is limited over the Internet to only the necessary ports and protocols. Keep VoWLAN phone Ensure that there is a management system in software up-to-date place to keep phone software up-to-date with security patches. Chapter Eight the unsecured Internet, additional security measures are required to secure confidential voice traffic. Specific measures that may be taken to secure voice traffic are summarised in Table 8-12, and should be addressed in the WLAN security policy before voice services are introduced. Summary From the relatively simple beginnings of 802.11 security based on WEP and the quickly discovered cryptographic weaknesses of the underlying key scheduling algorithm, the pace of development and current level of sophistication of WLAN sec