Subscriber Network Equipment

Firewall

Subscribers are STRONGLY encouraged to install their own firewall between their network and the SCCo ARES/RACES network.
Even a basic consumer or small business firewall will provide sufficient protection for most situations
Of course, those with more advanced city-wide networks may need more advanced features found in business-class firewalls
Always ask permission from your city’s IT department before installing or turning on the wireless function in your firewall (if it has one). You will be creating an additional penetration threat and you may interfere with their installed systems.
More information about firewalls can be found here

In most cases, the connection to the SCCo ARES/RACES network will be a single Ethernet jack. Except for UHF connections, you’ll probably want more than one computer connected to the network. And you’ll probably want to connect a network-shared printer and possibly other peripherals.
For most installations, a small 8-16 port desktop Ethernet switch will be ideal.
Select a switch that uses passive cooling for the least power consumption in case you have to run on batteries for a while.

The TCP/IP radio, firewall, Ethernet switch and any other associated network equipment needs to be supported by an uninteruptable power source, just like your voice and packet radios. Otherwise, it the network equipment be down when everything else is down and it will not provide a viable emergency communications capability.

Subscribers should carefully control both login access and physically access to the above network equipment to prevent both human error and malicious attacks.
Conspicuously label all connections so it’s clear which network they apply to.
Unsuspecting EOC/DOC users should be prevented from plugging into the wrong Ethernet jack by mistake.
And potentially malicious actors should be prevented from accessing our network.