[El_Presidente_Pufferfish]

got a new wrt54g since the old one just up and died mysteriously. I'm wondering how to set the security well.

I know to use WPA over WEP, but this router has WPA Personal, WPA Enterprise, and WPA2 Personal and WPA2 Enterprise.

Beyond that it gives me options between AES and TKIP for WPA Personal, and AES and AES+TKIP for WPA2 Personal. Enterprise options require a RADIUS server or something, so I think i'll stick with personal?

so yeah, whats up

[hans5849]

i use WPA with TKIP

[Axl_Rose]

I personally use WEP with MAC filtering.

[ivanolo]

Make sure that your wireless adapter supports WPA2--perhaps the latest drivers add it--if you plan to use it.
I use WPA w/ TKIP + MAC filtering, and I have disabled the ability to access the router through the wireless connection. If I have to change settings, I need to physically connect it to my PC. I don't know if that'll stop hackers, but I hope it does....

* NOTE: Edited to correct spelling errors.

[MSP]

I still use WEP, can't help you! Sorry.

[syztem]

Originally Posted by ivanolo

Make sure that your wireless adapter supports WPA2--perhaps the latest drivers add it--if you plan to use it.
I use WPA w/ TKIP + MAC filtering, and I have disabled the ability to access the router through the wireless connection. If I have to change settings, I need to physically connect it to my PC. I dont know if that'll stop hackers, but I hope it does....

that's exactly how i have it setup at work.

[Undertaker989]

you may want to NOT broadcast the SSID.

[msgwtco]

Originally Posted by Undertaker989

you may want to NOT broadcast the SSID.

Hiding the SSID isn't really going to do much in terms of security. Just make sure you are running WPA, with a good, long, difficult to crack Preshared Key.

[Undertaker989]

Originally Posted by msgwtco

Hiding the SSID isn't really going to do much in terms of security. Just make sure you are running WPA, with a good, long, difficult to crack Preshared Key.

why do you say that? It adds a layer of security via obscurity. Sure, there are tools out there, but this takes the 90% of users totally out of the equation.

[El_Presidente_Pufferfish]

Originally Posted by Undertaker989

why do you say that? It adds a layer of security via obscurity. Sure, there are tools out there, but this takes the 90% of users totally out of the equation.

I think WPA takes 90% of the users totally out of the equation

[Undertaker989]

Originally Posted by El_Presidente_Pufferfish

I think WPA takes 90% of the users totally out of the equation

even still, you can still add another layer of security by hiding the SSID as well as using WPA.

[msgwtco]

Originally Posted by Undertaker989

even still, you can still add another layer of security by hiding the SSID as well as using WPA.

Originally Posted by ICSA Labs

"Contrary to a common belief that the SSID is a WLAN security feature and its exposure a security risk, the
SSID is nothing more than a wireless-space group label. It cannot be successfully hidden. Attempts to
hide it will not only fail, but will negatively impact WLAN performance, and may result in additional
exposure of the SSID to passive scanning. The performance impact of this misguided effort will be felt in
multiple WLAN scenarios, including simple operations like joining a WLAN, and in significantly longer
roaming times.
Trying to hide the SSID does not strengthen security in WLANs. The scarce resources of today’s WLAN
administrator are better spent tuning WLAN performance and operations with full SSID usage, and
enhancing WLAN security by deploying modern security technology, such as link-layer encryption, and
IEEE 802.1X authentication."

source:http://www.icsalabs.com/icsa/docs/ht...sid_hiding.pdf

[Undertaker989]

I've never seen it impact any of our clients performance by not broadcasting the SSID. If you want to advertise your wireless network, go ahead, but I still say don't broadcast. If your performance is crap, then try broadcasting it and see if it makes a diff, which I doubt.

[mistawiskas]

My performance isn't affected at all by hiding SSID. I do all I can, lately, for my wireless security. Living smack-dab in the middle of town, I'm in the range of four wireless networks. Apartment living sux. I guess I could use this opportunity to get free broadband, but that's just not me.

[Electric_Head]

Originally Posted by mistawiskas

My performance isn't affected at all by hiding SSID. I do all I can, lately, for my wireless security. Living smack-dab in the middle of town, I'm in the range of four wireless networks. Apartment living sux. I guess I could use this opportunity to get free broadband, but that's just not me.

You can set us up some free file hosting

I don't care what kind of security you have on your wireless, if someone wants to get in, they'll get in, unless your running IEEE user authentication it won't take more than a day to break. Hiding the SSID and basic encryption will keep out the script kiddies and such, who are just looking for open networks to fuck around with, just as good as WPA.