Wireless Networking Wireless Routers Wireless Security Wi-Fi

Wireless Corner

It seems like when ever I get called out to set up a wireless network for someone there

is usually two or three other access points I see in the area around where i'm working especially

apartment complexes.

Alot of times these access points are unsecured to where anyone can use them for free internet

access which is usually harmless enough unless they are downloading large files over P2P all the

time or doing other more severe illegal things.

So in order to help you make your wireless network more secure here are some helpfull tips.

The four easiest steps you can take to insure a more secure network are:

1. Change the default SSID

2. Change the default IP address

3. Change the default username and password for Administrator access

4. Enable at least WEP level Encryption

What is SSID:

Service Set Identifier - This is usually set to the manufactueres name which is broadcast

from the access point and when a hacker knows what type of access point you have then

it makes it easier to break into that access point and gain control over the network devices.

Some advise to turn off this feature all to gether but i disagree it is helpfull to have you access

point broadcast a name just not the factory name I change the name to something else the

client chooses this way it is easier to know which access point you are connecting to in the

case of multiple access points broadcasting also it does aide in setting up multiple devices

accross the network and keep them communicating correctly when they are set to look for

a certain SSID.

Change the default IP address:

Access points are usually accessed by an IP address typed into a browser address bar like

192.168.1.1 now hackers will usually try to get access to an access point by first trying the

easy methods using default IP addresses for various brands so by changing the default IP

address to something like 192.168.6.1 would make it a bit more difficult to gain access to it

just make sure that if you chage this to write it down in case you need to log back into the

access point later to make changes.

What is the default Administrator username and password about:

Access points have a username and password set by manufactures which is needed

to log in to the main configuration screen of the access point so you can manipulate the

settings. A hacker trying to gain access to an access point is going to try various default

usernames and passwords to try to gain access by changing this it will make it more diffacult

to gain acess just make sure you right it down in case you need to go back later to make changes.

What is WEP:

Wired Equivalent Privacy by default WEP is usually disabled on almost all access points by
enabling it implements a basic level of encryption on the network by requiring a pass "key"

there are different levels of encryption from 64 bit to 128 bit on most access points. 64 bit will

encryption will require a pass key of ten characters and 128 bit will require a 26 character

pass key the higher level of encryption the harder it is to hack.

There are stronger levels of security such as WPA or WPA2 some older equipment may not

have those choices but should at least have WEP make sure to right down the key you use

you will need it to connect a device to you network.

By using the approach outlined above will not ensure that your network doesn’t get "hacked"

but it will make it much harder to do and is much smarter than to have your network completely

unprotected and remeber write down the settings you choose to use or if you have someone do

it for you make sure they write it down and give it to you I run into this all the time where I have to

reconnect a device to a network but the owner has no clue any of the settings or pass keys.

What kind of router should i get?

I have allways preferred Linksys products by Cisco but bascilly any brand will work just make sure

you get something with external antennas the bigger the better and preferablly ones that are replaceable

in case they get broke or you need extra range and want to change the antenna type alltogether. The

models without external antennas usually don't perform very well.

Also don't get pushed by a sales person to buy the "N" type router/access point which claim greater

speed and range you will only achive "N" speeds and distances if connecting to another "N" device if

you connect to say a "G" device you will get "G" performance and most laptops are only B/G so keep

that in mind.

Here are some tutorials from YouTube that should help with setting up your wirless network

# 1 basic cabling

# 2 wireless security settings on stock Linksys firmware

The Linksys WRT54GL

This is the model that comes only with Linux based firmware for the network enthusiast market.

This model can be easily flashed with third party firmwares to unlock a host of extra features.

There are several firmwares you can choose from to try here are some of the most popular projects:

DD-WRT OpenWrt Hyper-WRT

Tomato Sveasoft FreeWRT

Here is a link to the Wiki all about the WRT54G series

If you want your router flashed with custom firmware send it to us we'll flash it and send it back!

We can flash the WRT54G -WRT54GS WRT54GL versions plus other models just ask for details.

Flashing service $19.99 + shipping remember flashing voids your warranty!

For my personal netwok I have two WRT54GS V1 routers both flashed with DD-WRT v24 SP1

firmware Main router "A" I have modded with a 40mm exhaust fan mounted underneath the top vent

holes I also increased the size of the vent holes around the fan I added 9dbi high gain antennas and upped

the radio output to 150mw I have this set to transmit G band only channel 9 and setup to run through

openDNS servers it's a monster!

Router "B" I have setup to transmit on the B band channel 3 only and upped the radio output to 84mw

the DHCP server is turned off as this is controlled by router "A" router "B" is connected to Router "A" via

crossover cable between LAN ports so by doing this I have created a dedicated dual band wirless B/G

network with alot more power than anything your going to buy off the shelf.

At some point I will add an "N" band router to the mix but that's another project!