Sunday, May 11, 2008

How to Secure a Wireless Network

I use both a wired and wireless network at home. I am fortunate enough to have an Internet Service Provider (ISP) that provides up to three IP addresses. I connected a switch to my modem, and two routers (one wired, and the other wireless) to the switch. Each router has a separate IP address from my ISP. My desktop is connected to the wired router, while two laptops connect to the wireless one. I can connect either laptop to the wired router with a network cable if I choose to as well.

The biggest issue I wanted to address when setting up the wireless network is that of security. I have always been skeptical of wireless security, but since I have purchased a laptop, I decided to give wireless networking a try.

There is a lot of discussion on how to secure a wireless connection, some good, some bad, and some useless. This post will not go into detail about how to change the router settings to make it secure, but it will discuss what needs to be changed.

Administrative Credentials - Important
This is important whether you have a wireless or wired network. Ensure that all APs (access points) have a good strong password associated with the administrative account. If someone can get into your router because of a weak password, then your network can be compromised. You may also want to change the administrative ID as well.

Enable WPA Encryption - Important
This is probably the most important security measure to take when securing your wireless network. The previous standard called Wired Equivalent Privacy (WEP) was easy to crack within about 30 seconds.

The new Wi-fi Protected Access (WPA) is more secure and should be enabled. You must also choose a passphrase that will be needed for each computer to connect to your router. Choose a passphase that is long, hard to guess, but easy to remember. Write it down somewhere so you don't forget it. For assistance on creating a strong passphrase, please read my post on creating secure passwords. Follow the advice, but just make the passphrase longer.

Reducing the IP Addresses - Important
Routers allow you to limit the number of IP addresses they assign. If you have one computer, have the router assign only one IP address. If you have three computers, then the router should assign three IP addresses. This won't prevent someone from getting into your network, but if all computers are connected, then the router won't assign any more IP addresses to another computer.

Turning Off Router - Important
If you are going to be away for awhile, such as on vacation, simply turn off the router. If the router is off, then no one will be able to connect to it while you're away. You won't lose your router settings, and simply turn it back on when you return.

Turn off SSID Broadcast - Not Important
This is a debatable option with regards to a wireless connection. Many people would argue that not broadcasting your SSID will help with security. My opinion is that it won't really provide security. Those who you are trying to gain access to your wireless network can easily determine your SSID, whether it is broadcast or not. I have also had problems with connecting to a wireless network when the SSID is not broadcasted, so I leave my setting on broadcast.

Using MAC Filtering - Not Important
Similar to broadcasting the router's SSID, this is also a debatable point. An IP address is specific to a computer, a MAC address is specific to a network adapter within that computer. Enabling MAC filtering on your router only allows specific network adapters to connect to the router. While this may seem like a good idea, it can be a headache to manage the MAC addresses for all the computers that will be connecting to the wireless router. A knowledgeable person will also be able to "spoof" (imitate) a MAC address so it doesn't guarantee security.

Summary
There are many settings that can be changed in your wireless router to make your network secure. This article has listed many of them, and you can make use of all of them or only some. The following, however, should be done to make your connection secure:

  • Changing the administrative password and ID.
  • Enabling WPA encryption.
  • Reduce the number of IP addresses.

Paul Salmon has been involved with computers for 20 years and currently works as a Senior Technical Systems Analyst. He has been involved in many aspects of computers including hardware, software development and quality assurance. He currently mantains Technically Easy, a blog that provides information about various technologies in use today.

Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx

Setting Up a Wireless Satellite Internet Network

There are several advantages of going wireless with your internet service. You can network your home or office computers easier, you arent tethered to the wall and you can access the internet on multiple computers at the same time. If you are interested in going wireless and you are also interested in satellite internet service, then you may want to set up a wireless satellite internet network.

The first step is to subscribe to a satellite internet service. These services are broadband so they are generally going to work with wireless networking equipment that has traditionally been used to create wireless networks for land based broadband internet services. The three top choices for satellite internet service are StarBand, HughesNet and WildBlue.

While you are waiting for your satellite internet service to be installed, you will want to buy all of the wireless networking equipment that you will need. First of all if you dont have a computer that has an internal wireless networking card already built in then you will want to either buy one that does, or you will want to buy a wireless network adapter. Next you will need a wireless router.

After your satellite internet system has been set up you will be ready to connect your wireless network. To start with, connect your satellite internet modem to the router. The router will then send signals to your computer via infrared signals. Configure your router following the instructions that came with your router.

If you are using a wireless network adapter you will want to plug this into a USB port in your computer. Otherwise your computer should receive the signal using its internal wireless card. Turn your computer on and follow the instructions that came with your satellite internet system to set up your account if your technician didnt already do this for you. Thats all there is to it.

Satellite internet is the latest way to access the World Wide Web. It comes in three variations, a multi-cast one way version, a one way satellite internet connection with a terrestrial return and V-Sat. The type of satellite internet that you select needs to be based on what you use your internet access for and if you have access to a phone line. Familiarize yourself with satellite internet. Learn about satellite internet access, service, providers and two way satellite systems calls V-SAT.

Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx
Streamyx