Wireless security

craigmci · Feb 13, 2004, 08:22 AM

Didnt know where this was appropriatte so ill post here
I have a dlink wireless g router.I have been using hardwired only.I just got a wireless card for the girlfriends pc(get her outta my room!!!!)I havnt installed yet but i am turning the wireless back on in the router settings.I was wondering what i can do to ensure this network is as safe as it can possibly be.I have a screen shot of the wireless page and its settings.I have never worked with a wireless network and am not sure what to do from here.I am hoping someone can let me know what to enable and such for seccurity.And if i will have to do anything to the pc with the card so as it will communicate with the router??
I have heard of software which will moniter your router as to activities and such.(make sure my neighbors dont start stealing my bandwidth!!!)Dors anyone know where to get this software??
Thanks in advance.

LastHitchhiker · Feb 13, 2004, 09:58 AM

Ok, I’m no expert at this, and I don’t know off hand any software for monitoring WLAN activity outside of the functions provided through your AP (access point), but I know it exists. As for your Encryption settings, Basically what you are doing is designating an authorization/encryption key for the signal. To set up a Basic system on your AP, What you would probably want to do is to Start by checking the Box for "Shared Key", in theory this means only Wireless devices sharing a correct WEP key with the AP can use it, you can then chose 64 Bit or 128 bit encryption. As with all encryption, the more the stronger, but also the more time it takes to get everything authenticated. Then you need to select one of the WEP keys, and enter in a numeric (sometimes alpha numeric that it will then transfer to numeric) key. This will set the authentication/encryption key. You will then need to go to each wireless device you want to be able to access the AP, and then set up the same things on them. As for the multiple Wep keys, I have seen several different things there, On most AP's ive seen, they allow you to set 4 WEP keys, ut you can only use one a time, I guess this allows for quick cycling of WEP keys. However, on at least one AP, ive seen it allow the use of all four WEP keys at the same time using 128 bit encryption...

I probably got that about 60% wrong, but at least it's a start. Hopefully someone who has more experience in WLAN systems can correct my mistakes, and fill in the gaps.

craigmci · Feb 13, 2004, 10:48 AM

Thanks alot.That deffinately gets me started.When i do this over the next day i will post more.

hohum · Feb 13, 2004, 12:11 PM

I have almost the same router as you (Dlink 614 here), here's what I use for security.

Wireless security settings:

WEP = enabled

WEP encryption = 128bit (perhaps a little overkill but why not - quite a big key to write down though)

Authentication = shared key (any computer within range of your wireless access point will be unable to see or join your network unless they are using the WEP key you assigned - open system still prevents others joining your network, but it is visible to them)

Then go to the advanced tab along the top, choose filters on the left hand side, and select the MAC filters button. Add all the computers that you want to be able to access the network (should be able to select them in the dropdown box, click clone, then apply). Then AFTER you have done that tick the 'Only allow computers with MAC address listed below to access the network' then apply. Don't do what I did, which was enable that option before adding the MAC address of the pc I was using to setup the router, thus blocking myself from the network completely

Doing the above steps prevents ANY other computers from accessing your network unless you permit them. Hope that helps.

craigmci · Feb 13, 2004, 05:51 PM

Thanks alot guys.When i install the card tommorow i will follow these steps.It sounds like it can be tricky so thanks.I will post with my results

zerodamage · Feb 13, 2004, 06:08 PM

Not only is the wep important, but also look for MAC filtering. You put in the MAC address of the wireless NIC that you want to have access to the LAN and all others will be denied access. That is very nice at keeping away hotspot shoppers.

SpinLinkDom · Feb 13, 2004, 06:37 PM

Personnally, I would go for wpa mode. Since you probably don't have a radius server, you would probably go for pre-shared key. WPA is correcting some flaw in wep like constant encryption keys. (in wep, even in 128 bit mode, you only need to sniff for a fews gigs to be able to have the keys. And for mac filtering, a mac can always be spoofed after you had cracked the wep)

For absolute security, I would go for a vpn network, but I think it would be overkill.