Extra security for wireless

[GregF]

Hi,

Just wondering if i need more security then " WPA-PSK "

Should i use MAC address ?
Should i disable SSID braodcasting ?
Does " WPA-PSK " set the above by default ?

Thks Greg ...

Netcomm NB5 modem
Netgear WGR614v6 wireless router

Sorry thought i was wireless forum :o

[YeOldeStonecat]

WPA is more secure than the old WEP, but there are tools out there to get past WPA these days. WPA2 is the next one...and in due time there will be tools to get past that...and the cycle repeats.

MAC filtering can be another layer, yes, itself...it can be cracked past.

Disabling SSID, at least changing it from the default also, can help, but some wireless adapters don't always cooperate with some routers or access points without SSID broadcasting...so it's something you can try.

If you're comfortable with TCP, you can also change your IP range from the default 192.168.0.XXX....to something else like 192.168.23.XXX, (having your router at something like 192.168.23.253) disable DHCP, and assign static LAN IPs to your workstations.

At the very least, always change the default admin password to your router. You know how many wireless setups I've seen where people setup security, yet I can still pull an IP, see the gateway IP, hence log into the router and try a few default passwords..and BAM..I'm in. Oh...gee, there's your WPA key right there. :)

Sure there are a few other layers of security you can do, by themselves, not the most crackproof safe in the world, but put together...in a layered approach, can help your security. And lastly, think about your location, where your wireless LAN is, your surrounding neighbors if this is a home LAN, anyone close enough to even pickup your signal? Is it worth losing sleep over? I have 3x neighbors close enough to pickup mine...2x of which are widowed ladies over the age of 70. I don't even think they know what wireless is. The 3rd is a IT director of a major college, he's professional enough not to bother me, he has his own wireless LAN.

If this is a business, something like healthcare which requires extra security...there are additional services most wireless vendors offer now, like Radius authentication.

[GregF]

YeOldeStonecat,

Thks for your reply ...

Just looking through routers login menu about " Wireless card access "

I've got MAC address from " Available wireless card " list but device name supplied is " UNKNOWN " ... and i'm not shore what to put in " Wireless card entry " device name ?

Haven't gotten to SSID broadcast name side of things just yet ... guess i'll try it and see if it works ...

Greg ...

[YeOldeStonecat]

MAC address..you can just go around to your wireless clients, it'll be on a sticker on the wireless NIC, or by running an IPCONFIG /ALL on the workstations, or looking in the properties of the network connect on that device, etc.

[GregF]

YeOldeStonecat,

Thks again, managed to set MAC address (wireless access card) and disable SSID, worked out that it only excepts settings when cable is connected, doesn't seem to work wirelessly :confused: , maybe it a security thing so someone else can't (easly) change your setting ...

Greg ...

[sick_unit]

YeOldeStonecat ive got a question.
Ive got a Linksys WRT54G router and ive set up MAC filtering to only allow the MAC's on my network through and use WPA. Ive currently set the "Maximum Number of DHCP Users" to 3, for both my wireless adapters and my network card. Is that secure? Or is it still easily for other to access my network?


Cheers