Wpa Wireless
2011
How to Secure a Wireless Network in Home or in the Office
Wireless networking offers some benefits that are apparent – no wires and the most obvious is portability to allow you to surf the Internet by your pool side, your fireplace, or anywhere else in your house. Or you can play online game wirelessly with your XBOX console in the comfort of the living room without the clutter of the wires. Like the “wired LAN”, wireless network is also vulnerable to any types of security threats such as Denial of Services (DoS); Spamming; spoofing; Sniffers. The question is how to secure a wireless network?
Security might be the last thing on your mind when setting up a wireless network. As a general rule, you should employ a level of security that corresponds to the sensitivity of the data on your network. Unlike wired systems, which can be physically secured, wireless networks are not confined to the inside of buildings. They can be picked up as far as 1,000 feet outside of the premises with a laptop and a hi-gain directional antenna.
Wireless security is inherently easier to crack than wired networks because there’s no need for a physical connection to your network. Data transfer occurs over the airwaves, and that makes accessing it easier. Therefore, a systematic approach in securing a wireless network is absolutely a must including:
1. Securing the wireless connection against unauthorized users within the network coverage
2. Securing the end point of the network facing the internet.
Securing a wireless connection
There are couple of techniques you can use to secure a wireless connection, wireless encryption and MAC address filter. The first generation of wireless connection security is WEP – Wireless Equivalent Privacy which was intended to provide confidentiality comparable to that of a traditional wired network. WEP is the wireless security which is embedded to mostly the 802.11b and g standards. Unfortunately the researchers had found several weaknesses in this WEP system.
The latest industrial wireless security is Wi-Fi Protected Access (WPA and WPA2) which is a certification program created by the Wi-Fi Alliance to indicate compliance with the security protocol created by the Wi-Fi Alliance.
How to secure a wireless network using WPA/WPA2? Firstly you should select the wireless devices that support WPA/WPA2 encryption such as WRT610N wireless router by Linksys or NETGEAR WNDR3700 Rangemax router. In Windows platform, there are two options you can configure when you are using WPA/WPA2 encryption: using Windows Connect Now and manual configuration.
If your wireless router doesn’t support WCN (Windows Connect Now), then you need to manually configure the router. Logon to the router via your web browser by accessing the default router address, and locate the router’s configuration page. Consult with the manual book that comes with the router. If your router supports Windows Connect Now, you can quickly and easily configure the router by following the instructions in Using Windows Connect Now technology.
If you are using WPA, always remember that each device in your wireless network MUST use the same WPA method and shared key, or else the network will not function properly.
MAC Address Filter
Wireless access can be filtered by using the MAC addresses of the wireless devices transmitting within your network’s radius. Select Enabled/Disabled the Wireless MAC filter in the router’s configuration page, default setting is disabled. You should enable the setting to configure the wireless MAC filter either prevent or permit access. You should know the MAC addresses of the wireless device to be included in the permit or prevent MAC address record. The MAC address on wireless network adapters is typically printed on the network adapter’s underside.
But if your Wi-Fi adapters (PCI wireless adapters) have been installed in the desktop PCI slot, you cannot recognize the physical address visually. In a command line prompt (press Windows + R keys simultaneously and type in CMD and press enter) type ipconfig /all command and you can find the device physical address.
Change the default wireless network name or SSID
Wireless devices have a default wireless network name or Service Set Identifier (SSID) set by the factory. This is the name of your wireless network, and can be up to 32 characters in length. Each wireless product has their own default SSID as the default wireless network name. You should change the wireless network name to something unique to distinguish your wireless network from other wireless networks that may exist around you, but do not use personal information because this information may be available for anyone to see when browsing for wireless networks.
Change the default password
Wireless routers / AP have a default username and password set by the factory. Mostly their default username is admin or some have their default password as password. Hackers know these defaults and may try to use them to access your wireless device and change your network settings. To thwart any unauthorized changes, customize the device’s password so it will be hard to guess.
Securing the end point of the network facing the internet
How to secure a wireless network from any types of internet threats? It depends on the wireless routers security features, but typically all the wireless routers support dual-firewall features: NAT and SPI which is enabled by default. NAT (Network address translation) helps you to hide the private network from the public network (the internet), and the (SPI) stateful packet inspection will examine the incoming packets thoroughly for any false positive packets.
By Ki Grinsing
About the Author
Ki Grinsing was graduated from ITS Surabaya with the additions of MCSE and CCNA certifications. He has long years of working experience in IT. For a complete article, please visit: How to secure a wireless network and how to troubleshoot a wireless network
Edimax Broadband router – Setup WPA Wireless Security
|
|
2 pack Foscam FI8910W Wireless/Wired Pan&Tilt IP Network Camera with IR-Cut Filter for True Color Images – 8 Meter Night Vision and 3.6mm Lens (67° Viewing Angle) – White NEWEST MODEL $207.98 Replacing the Foscam FI8918W, the FI8910W is the latest camera from Foscam Digital Technologies LLC. The FI8910W is superior in that it includes an embedded IR-Cut filter which dramatically enhances the picture and color quality by automatically adjusting the lighting exposure via mechanical filter to provide true and accurately colored images that are not washed out. If you previously used a FI89… |
|
|
Esky C5900 H.264 Wireless IP Camera – Black $99.99 Improved remote monitoring via H.264 compression-5 times bandwidth and storage saving comparing to traditional Motion JPEG compression.-Record 4-5 times longer time on limited local micro SD card storage.-View live video streams on web browsers from PC, Mac, iPad or smart phones.-Free or paid apps for your iphone or Android. Pan/Tilt remote control-Control pan/tilt of the IP camera remotely on PC,… |
|
|
3 PACK Foscam FI8910W Wireless/Wired Pan & Tilt IP/Network Camera with IR-Cut Filter for True Color Images – 8 Meter Night Vision and 3.6mm Lens (67° Viewing Angle) – Black NEWEST MODEL $286.87 Product Description From the Manufacturer: The Foscam FI8910W features high quality video & audio, pan/tilt, remote internet viewing, motion detection, night-vision, embedded IR-Cut filter and built in network video recording system. In addition, it is smartphone compatible (Iphone, Android & BB) as well as viewable over the internet using standard web-browsers. The camera functions well as an Ip… |
|
|
60 Minutes – Hi-Tech Heist (November 25, 2007) $17.95 Airdate: 11/25/07 Do you know that your financial information might be more vulnerable to identity theft if you use your credit card in a store rather than online? That’s because hi-tech thieves can intercept a store’s wireless signals, hack into its main computer, and steal customer information. It happened to millions of records at TJX, and unless stores constantly update their security systems… |
|
|
Medialink – Wireless N Router – 802.11n – 150 Mbps – 2.4 Ghz – NEW Design w/ Internal Antenna $40.97 Medialink – Wireless N Broadband Router – 150 Mbps – 2.4 Ghz – 802.11nThis router is the perfect solution for adding a wireless network to your home or business. It fully complies with wireless standards and is guaranteed to work with any manufacturer’s 2.4Ghz wireless adapter and most manufacturers’ DSL/Cable modem. (May not be compatible with some Satellite modems including HughesNet)Specificati… |
|
|
Medialink – Wireless N USB Adapter – 802.11n – 150Mbps – 2.4ghz – Windows 2000 / 2003 / XP 32-Bit and 64-Bit / Vista 32-Bit and 64-Bit / Windows 7 32-Bit and 64-Bit Compatible $19.99 Medialink – Wireless N USB Adapter – 802.11n 150Mbps* Compatible with any Brand 802.11g or 802.11n Router Using 2.4ghz Wavelength * Microsoft WHQL Certified * Supports WEP, WPA and WPA2 Security * Live US Based Customer Service Offering the ultimate in simplified Wi-Fi installation, Medialink’s 150Mbps Wireless N USB Adapter offers a simplified one click installation. Insert the CD, click “instal… |
|
|
Cisco-Linksys WRT54GL Wireless-G Broadband Router $79.99 The Linksys Wireless-G Broadband Router is really three devices in one box. First, theres the Wireless Access Point, which lets you connect both screaming fast Wireless-G (802.11g at 54Mbps) and Wireless-B (802.11b at 11Mbps) devices to the network. Theres also a built-in 4-port full-duplex 10/100 Switch to connect your wired-Ethernet devices together. Connect four PCs directly, or attach more hub… |
|
|
Belkin F7D4555 Universal Wireless HDTV Adapter $49.99 Belkin Universal Wireless HDTV Adapter F7D4555 Wireless Converters… |
|
|
Autonet Mobile KT-ANMRTR-04 CarFi Router $289.99 CarFi turns your car into a rolling Wi-Fi hotspot, connecting all Wi-Fi-enabled devices to the Internet at the same time Expandable on-board memory to store movies, files, and music Easily connect all of your Wi-Fi devices; you and up to 20 others can hook up your Macs, laptops, netbooks, iPads, iPod touch players, PSPs, Nintendo DSs, and much more CarFi easily transfers from vehicle to vehicle wi… |
|
|
New – Belkin F7D6301 Wireless Router – IEEE 802.11n (draft) – DM1961 $64.50 General Information Manufacturer/Supplier: Belkin International, Inc Manufacturer Part Number: F7D6301 Brand Name: Belkin Product Model: F7D6301 Product Name: F7D6301 Surf N300 Wireless N Router Marketing Information: Performance Great speed and coverage, with a range that easily covers your home. 3D Coverage Dual-plane antennas and MIMO technology provide three-dimensional whole-home coverage for… |
Comment