Wireless network security

Hi
Ive just bought a wireless router and two wireless pci cards from ebuyer to connect my sons computers to the internet. However the web set up guide does not explain about limiting access. Under the access section there are mac filters, url filters, ip filters, domain filters and protocol filters. Which one do I use to limit access to myself and my sons, and how? If there is a previos post on this subject please give me the link. There was a password when I set the thing up but that seems to only concern the router set up and not the network. I imagine that at the moment anyone could access my broadband connection as they will be given a 192.168 IP.
Ta
Steve

 

You don't say which brand, and which models of router and cards you're using. The details matter here. You can use MAC filtering to limit network access to the specific mac addresses of your wireless cards. You can get your cards mac address using IPCONFIG /ALL from a command line. Many routers will also show you the mac addresses associated with the cards/computers. MAC filtering is probably your best tool to keep your network private and secure.

 

Hi
Thanks for the reply. Its an Origo WLL-3810 router, and two origo 802.11g wirless pci cards at 108mbs. Is the MAC address the natural address of the cards before you set them in the range of 192.168.1? If so I guess I find that by doing what you said on each computer and then entering the numbers in the MAC filter?
Steve

 

Look for a button to Enable WEP encryption. It's always turned off by default. You will have to create a key (128 bit prefered) and enter that key on your PCs. It's also a good idea to turn off SSID broadcast. That way no one scanning for wireless networks will find it.

I always have fun when I visit a friend at an apartment complex or my daughters College dorm. I just lake to see how many routers I can get into because they never even change the default password.

 

I entered the IP addresse of one of the computers I wanted to have access on the MAC filter and the router shut out another one I hadnt entered, so it seems to have worked. The range doesnt seem that good though. Presumable you can get better aerials for the pci cards so I will look at that? Also I noticed that during the set up there was a message saying the connection wasnt secure so I will have a play around with the encryption and the ssid. Thanks for the advice both.
Steve

 

MAC addresses usually have the form of six pairs of hexidecimal (0-9 plus A to F) numbers. They usually start with a double 00. eg 00-AE-23-55-22-AE. With wireless cards the MAC address is usally marked on the PCMCIA card itself, though sometimes it is in the packaging. Limiting access to the wireless bridge to only the MAC address of the two cards (your and your son's) you are using is a simple and pretty effective way of securing your wireless network.

 

Spankydata,

I'd be interested to hear (if you have time) what sort of range and throughput you're getting on this kit, as I'm thinking of ordering the same. Also, did you notice any drop in performance with security features added? Anyone else have experience of this kit? It appears that the latest firmware (on the forums at adsltech) makes a huge improvement...

Cheers,

Zorba

 

I'd note that range is very building specific. You won't know the range you'll get until you install the kit. Within the room the AP is sited coverage is fairly easy to estimate, but as soon as you start going through walls and floors, things get difficult.