Wireless network security question

[JimboJ]

I just bought a wireless router and card for my laptop, and I have four choices for security:

The router supports four different types of security settings for your network. Wi-Fi Protected Access (WPA) Pre-Shared key, WPA Remote Access Dial In User Service (RADIUS), and Wire Equivalence Protection (WEP).

I'm pretty sure I want some type of security, but I have no idea which one to use. I'm not super paranoid, and I don't have any top-secret classified information on my computers (except for porn :)) I'd like to keep things as simple as possible.

Any recommendations?

[BrianD]

I would say to go for WEP or WPA. WEP will make you create one or more keys that you will have to give to everyone that uses the network, but it is pretty easy to do. These days, you can usually use a pass phrase which will generate a WEP key for you. WPA will make you use a shared key on the access point and the client. It is probably a little bit more work than WEP will be. RADIUS would require you to set up a RADIUS server for authentication. That will be way more work than it is worth.

WEP can be broken, but it would take time, and really isn't worthwhile for breaking into a home network. Go with WEP.

[JimboJ]

Thanks for the reply, Brian.

One more question... Are the passwords just for wireless connections, or would a PC user connected to the router via a cable also need to enter a password?

[primelord]

Don't use WEP. Use WPA. Working under the assuption that a cracker wouldn't want to even bother accessing your network is what generally leads to security compromises.

[BrianD]

Only for wireless connections.

Primelord: Do you really think anyone is going to bother with a home network? With the strength of most of these access points, you would need to be pretty close to the house to even get a signal. That is a very conspicuous spot to be trying to break WEP encryption from. I wouldn't suggest WEP for a corporate network, but I don't see it being bad for a home network.

[Cringer]

With the strength of most of these access points, you would need to be pretty close to the house to even get a signal. That is a very conspicuous spot to be trying to break WEP encryption from.

Damn, you would have to be in my house to get on mine, you can't get enough signal on my back porch.

[moriarty]

Only for wireless connections.

Primelord: Do you really think anyone is going to bother with a home network? With the strength of most of these access points, you would need to be pretty close to the house to even get a signal. That is a very conspicuous spot to be trying to break WEP encryption from. I wouldn't suggest WEP for a corporate network, but I don't see it being bad for a home network.

Probalby depends on how well you know your neighbors. I can see most of mine's wireless network.

[JimboJ]

I can see primelord's point. Considering I do banking on the web, it seems like I'd be a pretty good target. I'd hate to have my bank account and credits card numbers flying around the neighborhood. Also, I can usually pick up 3 or 4 other wireless networks from my house, so they are stronger signals than you think. And that's from a single house, not an apartment or townhouse.

[BrianD]

I have checked out my signal strength, and I can't get beyond my property line before losing the signal completely. In fact, I can't even get close. Maybe that has something to do with having the AP in the basement. If you are worried about security and aren't afraid of possibly needing to upgrade firmware, go with WPA. There is more overhead and less support with WPA, but it is more secure than WEP. If you aren't worried about security and want something easier to deal with, go WEP.

[Draft Dodger]

so, with WEP or WPA...am I going to need to login to the wireless network each time I want to use the internet with my laptop? or is it something I just need to set up once?

I'm getting a laptop soon, and will be getting a wireless router for it. I'd like to secure it (especially with a housefull of college kids next door), but I don't want to have to jump through hoops everytime I want to surf either.

[primelord]

I have checked out my signal strength, and I can't get beyond my property line before losing the signal completely. In fact, I can't even get close. Maybe that has something to do with having the AP in the basement. If you are worried about security and aren't afraid of possibly needing to upgrade firmware, go with WPA. There is more overhead and less support with WPA, but it is more secure than WEP. If you aren't worried about security and want something easier to deal with, go WEP.
The antenna on your wireless card is likely a 0 gain antenna. It relies on the strength of the signal coming from your access point to pick up the signal. The antennas crackers generally use are far more powerful than the stock antennas you generally get with your card.

You can build quite a powerful antenna out of a Pringles can. Just because you can't pick up your signal from very far doesn't mean others can't.

[ice4277]

so, with WEP or WPA...am I going to need to login to the wireless network each time I want to use the internet with my laptop? or is it something I just need to set up once?

I'm getting a laptop soon, and will be getting a wireless router for it. I'd like to secure it (especially with a housefull of college kids next door), but I don't want to have to jump through hoops everytime I want to surf either.
I set my wireless network up a couple weeks ago; the only time I would have to re-enter my password is if I have to remove my laptop from the network, then put it back on, or if I'm adding another unit to the network. Generally speaking, I wouldn't think you would have to do this much.

[moriarty]

You can build quite a powerful antenna out of a Pringles can. Just because you can't pick up your signal from very far doesn't mean others can't.

I saw a website somewhere where the guy made an antenna out of a asian food strainer, and it apparently increased the signal range up to one mile. :eek:

[BrianD]

The antenna on your wireless card is likely a 0 gain antenna. It relies on the strength of the signal coming from your access point to pick up the signal. The antennas crackers generally use are far more powerful than the stock antennas you generally get with your card.

You can build quite a powerful antenna out of a Pringles can. Just because you can't pick up your signal from very far doesn't mean others can't.

Good point. I should probably go back to www.howstuffworks.com and look for a good explanation on antennas.

[DaddyTorgo]

i can sit in my bedroom and get one (sometimes 2) unsecured wireless signals plus my own secured one. So sometimes just for giggles I'll piggyback on someone else :) Plus it's great for downloading all that emmmn...illegal stuff (or so I've heard).


*edit: kidding!*

[gottimd]

I am at my friends house, house sitting and they recently had an IT person come over and firewall/protect their Wireless Cable Modem. I come over here with my laptop and try and get on their internet access and it is asking me for a key. I called them and they said they don't know what the person did because they can't even use their own laptops now in the house, they only have access on the desktop computer. How can I disable the WEP key portion so my laptop can connect onto the internet?

[Eaglesfan27]

I am at my friends house, house sitting and they recently had an IT person come over and firewall/protect their Wireless Cable Modem. I come over here with my laptop and try and get on their internet access and it is asking me for a key. I called them and they said they don't know what the person did because they can't even use their own laptops now in the house, they only have access on the desktop computer. How can I disable the WEP key portion so my laptop can connect onto the internet?
The only way you can disable the WEP key is if you can access the router's settings. That is usually done via a browser after entering in the base unit's address. I think it is 192.168.1.1 for Linksys (but would have to look it up to be sure.) Most base units require a password as well. Hopefully, your friend knows it. Otherwise, you won't be able to access the internet while on that wireless network, however you should still be able to access the internet by using a CAT cable to plug your laptop into the router.

[Eaglesfan27]

Dola -

Alternatively, if you can get into the router you should be able to determine what the WEP key is and enter that key into your computer to allow access to the wireless router with the WEP still activated for protection.

[gottimd]

ahh, that worked! Thanks so much Eaglesfan.

[Eaglesfan27]

ahh, that worked! Thanks so much Eaglesfan.
You are welcome :)