Wireless router needed........

treitz3

Well, my original plan for moving the internet [hardwired] downstairs was a wash. No can do. So, I'm left with only one option without going through some major construction in the house.

That's to get a wireless router for the computer. Let me first off start by saying that I am computer stupid. Don't ask how in the hell I run a business with this thing because it's a miracle that I do. That said, my biggest concern is security because all of my bill paying is done on-line.

Here are my questions;

1 - Is going wireless really a huge security concern?

2 - What wireless products would you recommend for a PC [not a laptop]?

3 - What security products would you recommend?

4 - Where would you search for the best deals on these products?

5 - Should I expect any internet "issues/changes" when I go wireless?

Thank you in advance for leading the blind into new territory.

exalted512

1. Not really.
2. cant really answer since my desktop doesnt have one, i just plug it into my router.
3. ??
4. Newegg, bestbuy, ebay, etc.
5. Not really, just follow the instructions.

I'd highly recommend Linksys. I've never had a problem with mine and all my computer friends 'in-the-know" use them as well...except one that uses D-Link. I, and several of my other friends have had problems with D-Link, and I will not go back until I start hearing they've gotten better.
-Cody

rabies_70

I've been a D Link user for years with very few issues at all. I recently set up a wireless network for a friend and used her New Linksys and found it to be very straightforward and easy to use.

Wireless security? Unless you are very very computer savvy, if a hacker REALLY wants in, they will get in. Definitely turn on the provided software for encryption and use a firewall to keep casual snoops out. Keep sensitive data only on a removable drive and never leave it on unattended if you are very worried. I'll bet some folks more in the know will have more suggestions as well.

wizzy

I've been pretty happy with LinkSys stuff.

For security you want to configure WPA2 encryption. WPA is breakable, though not easy.

NewEgg.com is great.

I would recommend avast.com for an antivirus product.

wizzy

This one isn't the buttslutnuggety cheapest you can get, or the fastest in the world, but its very popular. I have three of them. The nice thing is you can install a custom firmware and use them as a network extender - not to easy for the Computer Illiteratati though.

Unless you plan on major file sharing, or streaming HDTV over wireless, the speed probably won't be an issue.

http://www.newegg.com/Product/Product.aspx?Item=N82E16833124190

FWIW I might be making a trip to Charlotte to go to Traders Joe's in the not too distant future.

ND13

My D-link works fine and was cheap @ Fry's.

bruss

you cant go wrong with a linksys wrt54g.. as far as security if someone is skilled and wants to get in they will get in.. its really just a matter of being close enough..

treitz3

What is a D-link?

Is there a way to limit the wireless signal? It only has to travel about 25 feet.

bruss

if you are really that concerned dont use dhcp and change your subnet from the default to something like 10.10.25.0 with a subnet of 255.255.255.0 along with all the other security features

SCompRacer

My late and great bud Norm helped me set up our wireless network. I recall disabling SSID broadcast, renaming the network, 128 bit, complex passwords, and setting up MAC address filtering. Supposedly enabling this only allows access if the MAC address of the connecting computer is listed in the router.

To be safe, avoid unsecure networks, like my neighborhoods Emilio's Linksys ****.:D

treitz3

Ok, I'd like to take this opportunity to once again say that I'm computer stupid. I have no freakin' clue what the last two posts just said.

For the record, I do not have a Mac. Let's start with the basics again.

treitz3

Wizzy, that unit has very good reviews. Would that be all I need in terms of hooking up a wireless connection [security aside]? The cable guy said I need to be able to plug it into a USB port and that I need a card or a reader or something to that effect.

Speed not to terribly important. Watching a You-tube video or a news clip is about the extent of anything high speed that I do. No games, no movies or any of that jazz. Usually just bills, business, e-mail and a few audio forums.

SCompRacer

I'm no expert Tom and relied on those in the know for advice/assistance with my wireless network. I am told folks can get into anything, but you can make it harder. There are tutorials to help with setup for the DIY’er, like this one for a Linksys WRT54G that I have. http://www.columbia.edu/acis/networks/aptnet/linksys/index.html
(I like the ones with pictures; it makes it easier to sing along, so to speak).;) Check the manufacturer site of the wireless router you end up with for tutorials.

I'm a PC.
MAC address
http://en.wikipedia.org/wiki/MAC_address

bobman1235

99.9% of people don't need to worry much about wireless security besides throwing a WPA key on there. I'm not saying be reckless, but unless you live in some densely populated area full of hackers, chances are your wireless signal won't be anywhere near anyone who gives a crap.

Make sure you have a firewall running on your PC, turn on security on your router, and you'll be FINE.

treitz3

Don't I feel like the donkey. I thought when you mentioned a MAC, that you were talking about the brand. DOH!

Much to learn I see........

Thanks.

dc55110

As far as places on the net to buy...
MicroCenter
Tigerdirect.com (not as good as they used to be)

Gadabout

Routers -
I have had good luck with Linksys and D-Link. I prefer Linksys, but that is just because I have used them the most. You should look for at least a 802.11g router that is backwards compatible to 802.11b. You could get the N router, but if you don't need the increase in distance, I consider it a bit of a waste.

The next thing to look at is the Mbps. 108 should be your minimum, 300 if your going to running alot of volume on the wifi. (WiFi will always seem slower than cabled LAN's)

Desktop Adapters -
Several choices here. Its important to match the b/g/n for compatibility and make sure the adapter is rated at the same Mbps as the router.
You can choose from - USB plug in adapter, Wireless Bridge or a PCI Card

I prefer the PCI cards, but the wireless bridges work well if your planning on moving it between different things.

SCompRacer wrote: »

..... I recall disabling SSID broadcast, renaming the network, 128 bit, complex passwords, and setting up MAC address filtering. Supposedly enabling this only allows access if the MAC address of the connecting computer is listed in the router.

I agree with the stuff above....

Let me see if I can be a bit more precise on going about accomplishing it.

- First of all, when dealing with a router there will be a setup page. The information will be provided owners manual how to access it.

- You will also need the MAC address of all the computers you want to hook up. For the new card, there will be a MAC address on the card or box. If your hooking up a laptop or something, an easy way to get the MAC address is by opening the Command Prompt box and typing

ipconfig /all

This will show you all the adapters on your system. In Vista it will be called something like IPv6 address. It will look like fe80:b4fr:wer4:16gh ... etc. Write them down for all the computers your hooking up wirelessly. (look specically for the adapter installed, meaning manufacture name in the description. It should be under the Wireless Lan Adapter Network Connection. Ignore any of the tunnels and pseudos that may come up. Also ignore the Ethernet Adapter one. That is for CAT5/6 hard wire)

Go to the router set up page -
- Change the Admin Login Name and Password (and rememeber it or store it securely)
- Change the Router Broadcast Name
- Set Up WPA2 encryption (your owners manual will describe this)
-- Once you have set up WPA2 you will have an access code you will need to write down as you log in to the network on other computers.
- Save your settings

Log onto your computers, and have them connect wirelessly to the new router. You will be prompted for the access code. Once the connection is established check to make sure your hooked up to the internet. Sign-off and repeat for any other computers that are going to be on this network.

Go back to the computer that is hooked to the router and access the start-up page.
- Turn off the broad cast
- Go to the setup page called connections (or whatever). It will have a listing of places for you to input the MAC addresses of all your computers. On that same page there is usually a check box for - Only Allow and check it.
-- The theory is by inputing the MAC addresses, your router will only allow those computers to connect to it.
- Save your settings

Go back to your other computers and see if they can still access the internet. If they can't, you might have typed in a wrong MAC address or you might need to restart the router.

This should provide you with a pretty secure home network. If you add a computer at a later time, just get the mac address and add it, turn on the broadcast, let that computer connect and turn off the broadcast.

Just a couple notes
- Make sure your file sharing privileges is only set on the folders you need to share between computers.
- Put all your computers in the same workgroup. (I prefer to change the name of my workgroup to something specific and also rename all my computers to reflect which ones they are or where they are located.)

Hope that helps some,
Scott

fatchowmein

treitz3 wrote: »

1 - Is going wireless really a huge security concern?

Depends on you. I tested my wireless network with an old Pentium III 700 laptop. SSID was off. Very complex password. WEP was cracked in 12 minutes. WPA-PSK wasn't cracked but I believe if I had a Core2Duo or Quad-Core with 4GB of memory and a month of time (plus better software), it may have been possible.

In summary, someone who is determined to hack your network and who was willing to leave a laptop running 24/7/365 might be able to brute force their way in. However, these types of individuals are more likely, IMO, to hit a business or corporation than a resident unless your neighbor really hates you. Most will likely move on and look for an easier target.

I recommend...
1. SSID off
2. Complex password (alpha-numeric plus special characters if allowed). Do not use words easily found in a dictionary.
3. Do not use the default user name and password.
4. At minimum, use WPA-PSK.

If you're truly paranoid, change your password weekly. This will force the attacker to start over everytime you make a change.

Sherardp

+1 for D-link, I run the D link router with external antenna for whole house wireless, and have a D-link gigabyte switch in the theater room. Zero problems and very easy to use. In the south end of the house/garage area I use linksys that also works outside as well. Either brand works great.

Mike Kozak

For speed, you cannot beat the Linksys WRT160N Wireless Router. I just bought one and it is FAST!!!!!!!!

leroyjr1

+100 for Linksys N routers.

Sami

fatchowmein wrote: »

If you're truly paranoid, change your password weekly. This will force the attacker to start over everytime you make a change.

Like others have said, MAC filtering would be a must if you are worried about security. Makes living also harder if you want to allow your visitors to have access to your network. Every machine also needs to have a good firewall that prevents the attacker gaining access in case they do manage to get in the network. A domain server and VPN are probably overkill for home networks but if you are really paranoid...

fatchowmein

Sami wrote: »

Like others have said, MAC filtering would be a must if you are worried about security.

Hey Sami!
Unfortunately, the stuff I'm looking at will spoof the approved client attached to the wireless router. Holler at me for more info. I don't want to go in depth on a public forum.

MAC filtering will not save you.

treitz3

Um......what are you talking about?

Thanks again all, I'm still learning. Your advice is damn sure appreciated.

Sami

fatchowmein wrote: »

MAC filtering will not save you.

Of course it doesn't, but if you're paranoid, it's one item to add to the list. You can't really be 100% secure with any connection, that's why you need to make sure your devices are also as secure as possible if they contain confidential material. Linux server running Samba and Kerberos is probably not within the scope of the OP, that's more for the really paranoid security freaks and corporations.

treitz, if you are talking about online bill pay with a bank, it goes through https connection anyways. You're safe in that regard, as long as you don't store your passwords on your computer...

fatchowmein

I just find MAC filtering a wasted effort. I couldn't justify it when the attack method itself is going to spoof the client anyway. WPA-PSK, not broadcasting your SSID, and a complex password are good enough.

It would also help to tackle anyone pointing at your house a can of Pringles attached to a laptop.

bruss

the only thing i worry about with my wireless is the zit faced kid on the block with too much time on his hands getting ahold of backtrack2 or 3 and getting on my network..

Breaching wireless networks no matter what the security, is really just a matter of proximity and time.. Once on your network then your talking poisined arp tables password sniffing etc...

Sami

MAC spoofing provides additional clues that your network is compromised, in case they manage to crack your WAP passkey. I don't do it myself, I am not paranoid about securing the wireless itself. The most important thing is to secure the clients and servers that are on the network. I don't care if someone cracks into my wireless, but I sure as hell want to make sure they still won't have access to my computers running there. That way they can't really do much damage until I know to kick them out or they decide to leave (many won't hang around even if they crack the security).

It's easier if you're running *nix on your computers, for Win machines you need to do a little more work.