- Couple of wireless networking questions
- Posted by Mitch on May 19th, 2006
Trying to configure my wireless network for a bit of security, following
various articles on the subject.
XP Pro SP2.
Using WPA, pre-shared key, that's working fine.
Changed the SSID to my own network name, no problem.
There was advice to turn off SSID broadcast, but when I do, the remote
computers don't see the network... How does that work?
I would also like to enable MAC filtering, and just allow the computers on
the network to acess, but I haven't figured out how to make this work
either - this is router model specific, I see how to enter the MAC
addresses, but they don't seem to "stick". If I allow all, then I can see
the remote computers in the list, but restricting access seems to eject
them, entering them by hand, they don't stay in there.
On my laptop, ipconfig /all gives me 2 MAC addresses - I assume use the one
associated with the wireless card (the other being for cabled access)?
I have a Linksys WAG354G router, but many other Linksys products probably
have the same config panel.
If anyone has answers to any/all of the above, as always, greatly
appreciated.
--Mitch
- Posted by Chuck on May 19th, 2006
On Fri, 19 May 2006 15:01:47 +0200, "Mitch" <noreply@thisaddress.com> wrote:
Mitch,
Disabling the SSID Beaconing (you can't disable the SSID broadcast) does not
provide security, causes more network traffic, and causes problems like what you
are seeing.
<http://nitecruzr.blogspot.com/2005/05/disabling-ssid.html>
http://nitecruzr.blogspot.com/2005/0...ling-ssid.html
The MAC address is easily spoofed. Your WiFi network adapter probably provides
that ability, as does your Ethernet adapter. Mine do.
The best protection is WPA, properly setup. WPA-PSK, which is the options you
will probably have, uses TKIP to change the encryption key regularly. Plus it
requires your WiFi client to authenticate, initially, with the router.
Use WPA, and a properly layered security on your network as a whole. Don't
waste your time, and your focus, on settings that don't help you.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
http://nitecruzr.blogspot.com/2005/0...ayer-your.html
--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
- Posted by Mitch on May 19th, 2006
"Chuck" <none@example.net> wrote in message
news:a2or62d2e4hegdqmm68ho3rso85mgu2alg@4ax.com...
OK, thanks for the info Chuck!
--Mitch
