Wireless Networking Security - How to Secure Your Wireless Network
By Jeff Runyon
If you have been following this series of articles describing the technical aspects of wireless network security, you have a pretty good basis of the theory of operation. Now is the time to use what you have learned and begin to set up an ultra-secure wireless network for your home or small office.
When you begin the process of securing your wireless network, you have three basic steps to perform with your wireless access point(s):
- Remove all of the default settings on all your wireless network devices
- Enable security encryption
- Shut the 'network door' to outside, unauthorized users
This discussion is a practical guide to what you need to do. However, it is only a set of generic instructions. There are hundreds if not thousands of different network products on the market. Every manufacturer has its own set of steps and instructions to follow in order to configure their devices for a secure product setup. And inside each vendor, every product may have its own quirks and unique settings. To get the most throughput and security from your network, I suggest you read my steps to familiarize yourself with the overall operation of a wireless network. Then, read the manufacturer's manual for the products you select.
Remove the DefaultsIt is truly amazing the number of users that create a wireless network that opens a window into their computer and they leave the default settings. This is akin to installed the best deadbolt money can buy on your front door but fail to even close it!
At a minimum, you will want to change the service set identifier (SSID), the administrator name and the admin password. Do NOT leave these set to factory default. Remember the open front door? You will need to duplicate these changes on all remote devices so I suggest you think about what you want to use for these values before you start and implement them as you go. Or you could leave all set to default until you turn-up and test the network for operation, shut it down and go back and change these values as the last step. It is up to you and it does not matter when you do it, only that you do it!
The next step is to turn on the highest level of security that is common to all you devices. Go for WPA2 if at all possible with WPA an acceptable alternative. If the only level of security available to you is WEP, I suggest strongly you consider upgrading the pieces of wireless hardware preventing you from using WPA2. The cost of changing out these pieces is minor; the vulnerability of a low security network is very high.
Close Your Network 'Door'
Create a closed network. By closed, this means shutting off any broadcast invitations and that means taking a couple more steps with your network.
First, turn off the SSID broadcast. Most access points send out their SSID so that new users can find the network. This is fine during the initial setup but is not needed beyond its first configuration. By turning off this SSID broadcast, other users trying to locate wireless networks will not see yours. This is NOT a substitute for SPA security but simply another step in securing access to your network.
Setup a MAC access layer of security. Most access points allow you to input the MAC address of wireless devices on an 'include' or 'exclude' list. While this is not 100% effective in limiting access, it does add yet another layer of access that a hacker must overcome to gain access to your network.
If you implement each of these areas of defense, you will have a secure wireless network that is extremely safe for its users.
00.25
|
Label:
Wireless Networking Security
|
This entry was posted on 00.25
and is filed under
Wireless Networking Security
.
You can follow any responses to this entry through
the RSS 2.0 feed.
You can leave a response,
or trackback from your own site.
0 komentar:
Posting Komentar