Posted: 5/4/2003 12:28:52 PM EDT
|
I have a guy who's interested in setting up a wireless network. I've never done wireless--did a traditional 10/100 ethernet hookup at home. I don't have any information specifically about the setup yet, but I have some general questions about it. 1.) Knowing that WEP sucks and is (relatively) easily hacked, what kind of security measures would I have to take? There isn't really anything I can do about wireless packet sniffers, is there? 2.) Will the hardware allow me to set it up to restrict usage, or is that a server issue? I'm being really vague, I know, but I'm just kind of looking for a basic overview of the technology at this point. Thanks in advance. |
|
Wireless is pretty straight forward. Just follow the directions. I learned wired networking on the job, wireless is a breeze. Set the security as best you can. You are limited by the hardware you choose/use. Yes, the wireless router gives you lots of ways to restrict access. Change the Admin p/w, change the Lan/Wan ID, setup WEP with a hard p/w, limit number if connections. Enjoy! ByteTheBullet (-: |
|
I set up a wireless network for a buddy, and here's what I did: 1) Get the Wireless G stuff. It works with 802.11b AND g, but if you use b on it, every device's speed is knocked down to b speeds. 2) even though WEP sucks, use it anyway. Use a 128bit WEP key, and if you're worried about people sniffing it, and figuring it out, change it every couple of weeks. 3) Disable SSID broadcast. That way, someone just driving around may pick up your wireless signal, but not your network name. They won't be able to log on without it. 4) Along these same lines, for Pete's sake CHANGE THE DEFAULT SSID!! You'd be surprised how many people that have say, a Linksys wireless access point just leave the name of the SSID as "linksys" (stupid to do!) Even with SSID disabled, if they know your network name, it makes it easier for them [:D] 5) yes, you can restrict usage, but only REALLY via MAC address. Just find out the MAC addresses of all the wireless clients that will be on the network, and configure the Wireless Access Point to ONLY ALLOW those MAC addresses. That's about all I can remember to do. Wireless is pretty open, especially with the sniffer tools that are out. I know that WEP can be busted, and I'm pretty sure that MAC addresses can be spoofed. Best bet is to change the WEP every so often. I _believe_ that to obtain the WEP key, you have to listen to a TON of traffic on the wireless network. So hopefully changing it every two weeks or so would defeat that. Good luck! -Gloftoe |