Protection for wireless networks

audiobliss

Wingnut's thread reminded me. We have a Linksys wireless router for internet connection, and we have NO protection, password, encryption, etc set up on it.

What kind of protection should we have setup, and how do I go about setting it up and making the other computers work with it?

Serendipity

I'd use WPA or WPA2 at the minimum.

Then follow up with MAC address filtering and turn off the Wireless Access Point SSID broadcast.

audiobliss

Well, unfortunately, that basically makes no sense to me. I'm computer literate, but I'm network illiterate.

I JUST learned tonight about MAC addresses. Well, ok, I learned that they're in the NIC card and uniquely identify every computer; that's all I know about them. So you can specify which computers, via their MAC address, can connect to the wireless network? That's some pretty awesome security, right there.

So, basically, I guess I need step-by-step instructions on this. Also, two computers are wired to the router; will any of these encryption settings affect those computers' access?

Serendipity

audiobliss wrote: »

Well, unfortunately, that basically makes no sense to me. I'm computer literate, but I'm network illiterate.

I JUST learned tonight about MAC addresses. Well, ok, I learned that they're in the NIC card and uniquely identify every computer; that's all I know about them. So you can specify which computers, via their MAC address, can connect to the wireless network? That's some pretty awesome security, right there.

So, basically, I guess I need step-by-step instructions on this. Also, two computers are wired to the router; will any of these encryption settings affect those computers' access?

1. Yes

2. No

The MAC address filtering limits the computers that can access the wireless router. Which is pretty safe, unless someone alters their MAC address to one of yours, which is possible but unlikely.

The encryption settings also do not affect those computers' access.

shadowofnight

appadv wrote: »

I'd use WPA or WPA2 at the minimum.

Then follow up with MAC address filtering and turn off the Wireless Access Point SSID broadcast.

+1......I also keep a few spare usb wireless adapters for guest's computers that is already enabled for my MAC address filtering....makes it a snap for them to log onto my network.

Serendipity

shadowofnight wrote: »

+1......I also keep a few spare usb wireless adapters for guest's computers that is already enabled for my MAC address filtering....makes it a snap for them to log onto my network.

That's a good idea. I never thought of it!

Refefer

audiobliss wrote: »

So you can specify which computers, via their MAC address, can connect to the wireless network? That's some pretty awesome security, right there.

That's not security in the sense you are looking for: that just means the router refuses to allow network access to anyone that isn't on the party list. They can, however, view all the information going to and from your computer with no problems what so ever.

WPA and preferably WPA2 is the right choice. It encrypts your traffic and makes it so baddies can't visit your bank account when you're logging around online.

To do that should be pretty straight forward:

1. Log into your router. You can do this by going to the web url http://192.168.1.1, unless you've changed your ip address. The password, unless you've changed it, is by default "admin". You'll want to change this as well.

2. Goto the "Wireless" tab. From there, goto the "Wireless Security" tab.

3. Change it to WPA2 Personal, and enter a password. You will need this password for every computer that wants to connect to the router, so don't forget it.

4. Hit Apply settings, and voila! That part is done!

5. If you're currently using a wireless connection, you'll probably have been booted at this point. You'll need to make a new profile for the wireless connection and inform it of your intention of using a password.

6. Goto the "Administration" tab. Change your password and save.

7. MAC address filtering is a pain, so I won't cover that right now. The most important part is done however: those who don't have the password for your wireless account won't be able to use it AND won't be able to snatch what you're saying out of the air as well.

audiobliss

Oh man. I can tell I have a BUNCH of reading to do to understand this stuff. WPA? WPA2? All I see is WEP on my setup screen.

audiobliss

Refefer wrote: »

That's not security in the sense you are looking for: that just means the router refuses to allow network access to anyone that isn't on the party list. They can, however, view all the information going to and from your computer with no problems what so ever.

WPA and preferably WPA2 is the right choice. It encrypts your traffic and makes it so baddies can't visit your bank account when you're logging around online.

To do that should be pretty straight forward:

1. Log into your router. You can do this by going to the web url http://192.168.1.1, unless you've changed your ip address. The password, unless you've changed it, is by default "admin". You'll want to change this as well.

2. Goto the "Wireless" tab. From there, goto the "Wireless Security" tab.

3. Change it to WPA2 Personal, and enter a password. You will need this password for every computer that wants to connect to the router, so don't forget it.

4. Hit Apply settings, and voila! That part is done!

5. If you're currently using a wireless connection, you'll probably have been booted at this point. You'll need to make a new profile for the wireless connection and inform it of your intention of using a password.

6. Goto the "Administration" tab. Change your password and save.

7. MAC address filtering is a pain, so I won't cover that right now. The most important part is done however: those who don't have the password for your wireless account won't be able to use it AND won't be able to snatch what you're saying out of the air as well.

Oh wow, thanks! That makes so much sense! However, it seems as though this router doesn't have anything but WEP. It's several years old.

Refefer

audiobliss wrote: »

Oh wow, thanks! That makes so much sense! However, it seems as though this router doesn't have anything but WEP. It's several years old.

That might be fixed through a firmware update for it. I'd check out linksys' website and see if they've added a more secure standard. The problem with WEP is that it can be cracked in a couple of minutes without any trouble, so is fairly useless.

audiobliss

I just saw a link to firmware on Linksys' website. Is it fairly straightforward to update it?

Refefer

audiobliss wrote: »

I just saw a link to firmware on Linksys' website. Is it fairly straightforward to update it?

It should be. For mine, it was a simple matter of downloading a file to my computer and then select it via the linksys router and it did the rest. Then again, mine is a whole lot newer than yours by the sound of it so YMMV.

polkatese

WEP 128 bits 26 Hex digits encryptions should be strong enough, IMO, unless you live in a neighborhood full of prowling hackers

audiobliss

Sweet, just upgraded it.

Wow, the 'menu' (what do you call that) is MUCH different now!

Refefer

polkatese wrote: »

WEP 128 bits 26 Hex digits encryptions should be strong enough, IMO, unless you live in a neighborhood full of prowling hackers

And it will take less than minute to crack it, so be warned if you do decided to use it.

Refefer

audiobliss wrote: »

Sweet, just upgraded it.

Wow, the 'menu' (what do you call that) is MUCH different now!

Does it give you the option for WPA2 at this point?

Strong Bad

Audiobliss, what model router do you have?

audiobliss

When I go to set the security mode, the only options are WPA pre-shared key, WPA Radius, and WEP.

audiobliss

Strong Bad wrote: »

Audiobliss, what model router do you have?

Linksys BEFW11S4.

bobman1235

Refefer wrote: »

And it will take less than minute to crack it, so be warned if you do decided to use it.

Yeah, anyone in the know refers to WEP affectionately as... nothing. Even an amateur can download a simple program off the net and be looking at WEP-"encrypted" packets within minutes.

WPA or better is where it's at. WPA2 is ideal, but not supported on many wireless cards yet.

Refefer

audiobliss wrote: »

When I go to set the security mode, the only options are WPA pre-shared key, WPA Radius, and WEP.

WPA Preshared key is probably the route you want to go. Just make sure the passphrase you use isn't too easy.

Make it word or two plus a number (i.e. "MotherLoveBone57")

shadowofnight

Refefer wrote: »

That might be fixed through a firmware update for it. I'd check out linksys' website and see if they've added a more secure standard. The problem with WEP is that it can be cracked in a couple of minutes without any trouble, so is fairly useless.

WEP just keeps the honest people honest is all....so it really keeps out MOST of the people within range of your wireless network ( Maybe a house or 2 on either side) . It would keep most out in a simple residential neighborhood.....of course what we were saying earlier is much better.

WEP is kinda like locking your car while its outside...be easy to pop the window and hotwire it...a pro could do it in seconds....but most wont know what wires to cut and twist together

WPA/MAC address filtering/and not broadcasting your SSID puts your car in the garage out of sight....puts a pit bull in the front seat ...and the owner is peeking through the glass with his .45

audiobliss

Refefer wrote: »

WPA Preshared key is probably the route you want to go. Just make sure the passphrase you use isn't too easy.

Make it word or two plus a number (i.e. "MotherLoveBone57")

Ok, I'll come up with something. Now, what about the group key renewal interval?

Serendipity

Refefer wrote: »

WPA Preshared key is probably the route you want to go. Just make sure the passphrase you use isn't too easy.

Make it word or two plus a number (i.e. "MotherLoveBone57")

Good advice. I use something like ?mag/*ukc7nb0p9ua;ljhzzz!damn*XP*PC!98a4iu34?1ty!

bigaudiofanatic

wepp is they way to go

shadowofnight

appadv wrote: »

Good advice. I use something like ?mag/*ukc7nb0p9ua;ljhzzz!damn*XP*PC!98a4iu34?1ty!

Hahaha...damn

bobman1235

appadv wrote: »

Good advice. I use something like ?mag/*ukc7nb0p9ua;ljhzzz!damn*XP*PC!98a4iu34?1ty!

Yup, find a randomizer somewhere, no real words. Then just store the code ona USB key so you can transfer it to any computers that need it in a snap.

Refefer

audiobliss wrote: »

Ok, I'll come up with something. Now, what about the group key renewal interval?

You shouldn't need to tinker with that.

audiobliss

Should I just use something like this for the password?

Serendipity

bobman1235 wrote: »

Yup, find a randomizer somewhere, no real words. Then just store the code ona USB key so you can transfer it to any computers that need it in a snap.

Actually, there is a word hidden in there, I just assigned letters to numbers and characters, i.e. the end is "Serendipity"

avguytx

Refefer wrote: »

1. Log into your router. You can do this by going to the web url http://192.168.1.1, unless you've changed your ip address. The password, unless you've changed it, is by default "admin". You'll want to change this as well.

So that should work for pretty much any router no matter what the brand? I thought I'd check mine to see what settings are on it but it says "problem loading page" on Firefox and on IE, it kind of does the same thing but goes to some kind of search page.