Wireless network security?

[spenandrew]

how do,

i've got bluyonder and one PC, and at christmas 1 new laptop (with WLAN).

i want a wireless router to give internet access to laptop and ideally just connect a newtork cable to my pc from router as they are on the same desk.

but before i go into all that, how secure are wireless networks. i've connected to a neighbours before via someone else's laptop.

is it not possible to have it password protected? such a simple feature must be possible.

by the way i will probably get the netgear WGR614 as its the same price as the Linksys 54G

cheers

[Halcyon]

With most routers, you can set up security via the routers menu onscreen.
You can also set the addresses of which computers can connect with the router.

More info on setting up encryption, SSID, etc can be found here in this guide to securing your home network: HERE

[skyblueheroes]

Originally Posted by spenandrew

how do,

i've got bluyonder and one PC, and at christmas 1 new laptop (with WLAN).

i want a wireless router to give internet access to laptop and ideally just connect a newtork cable to my pc from router as they are on the same desk.

but before i go into all that, how secure are wireless networks. i've connected to a neighbours before via someone else's laptop.

is it not possible to have it password protected? such a simple feature must be possible.

by the way i will probably get the netgear WGR614 as its the same price as the Linksys 54G

cheers

I have the same setup as that and I wasn't secure for about a year.

However a couple of months ago I noticed someone else on my network, so enabled WEP (very easy via Router menu) and stopped them accessing.

However, I find WEP slows browsing on my laptop. I am not too fussed though as I rarely use my work laptop at home - and will therefore just turn off when using it. I think stating the machine's address is actually quicker than WEP.

You should use WPA encryption in preference to WEP. It is simpler to set up and just generally zippier.

To answer the original question - it's not hard at all, just a matter of setting the security type you want and a password in the Router, then adding the same settings to the laptop. The instructions you get with the router should explain this clearly.

You won't need to put any such settings into the desktop PC if you connect to the router by cable.

[Saaf_laandon_mo]

At the moment I too have the same set up with a belkin router, my main pc being plugged into the router via an ethernet cable. If I set up the WEP code on the router, I assume this has to be stored on my laptop settings right? Do i need to store it on my desktop too, or is the fact that its connected to the router via a cable ok?

Also further to the above post of using the machines address, what would this be (i.e how do i find my laptop's address?)

[Gareth]

When you're using an ethernet cable between your PC and the router, then there's no need to specify the WEP or WAP settings, as this is kinda redundant.

The address that Chris is referring to is the MAC address. If you look on the wireless card for your laptop, you should see a sticker showing the MAC address, which you can then add to a list of permitted MAC addresses that the router will allow to connect.

Finally, as already stated, you should use WPA instead of WEP, if your wireless cards & router support it. WEP is less secure than WPA. It is not at all difficult to crack a WEP key, provided you have generated and captured enough traffic, it can be done in approx 10 mins.

[spenandrew]

so defining an ip address or mac address is uncrackable?

or only a cracker could do it?

[Stuart]

Originally Posted by spenandrew

so defining an ip address or mac address is uncrackable?

or only a cracker could do it?

No, limiting access by Mac address is not uncrackable. However, it *is* difficult to crack, and would slow down most hackers.

Combine it with WPA (not WEP, that has been cracked) and you should be secure.

[Gareth]

Nope, I can easily clone your MAC address - provided I know it.

Defining MAC addresses that are allowed to use the connection is just yet another layer of security... think of the security of your wireless connection like an onion. You enable one restriction, a hacker defeats that but is confronted with another layer that they need to attack.

None of the restrictions on their own are uncrackable and 100% secure, as nothing is 100% secure. However, combine all these together and you make things so time-consuming that the effort required far exceeds the potential gain of attacking your system. Instead, a hacker will attack your neighbour's system, which is less secure and involves less effort/time to compromise.

[Saaf_laandon_mo]

I was reading about WPA Vs WEP last night and from what i understand a WEP key is static as opposed to a WPA one being dynamic. So how does your lap top know what key is being generated? Or do they work in synch? Am I understanding this right?

Originally Posted by Saaf_laandon_mo

I was reading about WPA Vs WEP last night and from what i understand a WEP key is static as opposed to a WPA one being dynamic. So how does your lap top know what key is being generated? Or do they work in synch? Am I understanding this right?

Have a look at this:

In simple terms, WPA-PSK is extra-strong encryption where encryption keys are automatically changed (called rekeying) and authenticated between devices after a specified period of time, or after a specified number of packets has been transmitted. This is called the rekey interval. WPA-PSK is far superior to WEP and provides stronger protection for the home/SOHO user for two reasons. The process used to generate the encryption key is very rigorous and the rekeying (or key changing) is done very quickly. This stops even the most determined hacker from gathering enough data to break the encryption.

From http://www.microsoft.com/windowsxp/u..._03july28.mspx

[Saaf_laandon_mo]

Thanks