Wireless LAN

[Rob Rawlins]

Hi Guys,

Currently toying with the idea of adding a wireless
section to the company network, not really sure whats
envolved, does anyone have any good advice or suggestions
on were i can obtain a guide from.

The hardware side of it all seems really atright forward
but its the configuration of the server that confuses me,
do i just plug and play with the access points like a hub?
or is there a more complex configuration that will need
doing?

Any information would be a great help.

Cheers,

Rob

 

[Chris Cowling]

Rob,
there are serious implications for installing wireless networking.
Particularly if you do not have 802.1x compliant hardware like switches. I
suggest you watch

http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032246736&Culture=en-US

to give a broad overview of Wireless Network Security.

Kind Regards

Chris Cowling, MCP

 

[Philippe L. Balmanno]

I use linksys which is set to a standard of SSID linksys and IP
192.168.1.251 Net work 255.255.255.0. The obvious would be to reset the
defaults in the WAP and any other device you might purchase (wireless router
or bridge etc). Other things to consider are setting WEP passphrase,
choosing encryotion bit (although the WAP can go to 256 bits the highest it
is set for is 128 as the wireless NICs don't have an option for 256) and
also choosing the channel (the default is 6). I guess it comes down to what
segment will you move to wireless and how much security do you need? I use
a wireless VPN router for laptops and desktops to the rest of the network
for security.

This intel link was helpful in developing my wireless LAN segement
implementation I hope it suits you.

http://www.intel.com/business/bss/infrastructure/wireless/deployment/index.h
tm

 

[Philippe L. Balmanno]

Sorry I noticed the previous Link was not working (you had to choose
wireless under solutions) this one should work.

http://www.intel.com/business/bss/infrastructure/wireless/solutions/index.ht
m?iid=solutions+wireless_wlan_solutions&

 

[Chris Cowling]

Philippe,
WEP has be proved to be inherantly insecure. Tools can be
downloaded off the internet that crack this method of encryption. It is only
really suitable for home office use. I would look at 802.1x using
certificates for the strongest security.

Kind Regards

Chris Cowling , MCP

 

[Philippe L. Balmanno]

Yesw ergo the VPN

Philippe,
WEP has be proved to be inherantly insecure. Tools can be
downloaded off the internet that crack this method of encryption. It is only
really suitable for home office use. I would look at 802.1x using
certificates for the strongest security.

Kind Regards

Chris Cowling , MCP


http://www.intel.com/business/bss/infrastructure/wireless/deployment/index.h

 

[Chris Cowling]

Phillipe,
but what is stopping any of your employees placing unknown
wireless access points on your network and you appear to be quite happy for
people to view the data before it enters your VPN.

Chris Cowling, MCP

 

[Chris Cowling]

Rob,
you might want to try microsoft.public.windows.networking.wireless
group aswell.

Kind Regards

Chris Cowling, MCP

 

[Guest]

Cheers for the help,

Securtiy is not a major issue for us. what i really need
help with is configuration. from the doumentation i have
read i gather that the wireless accesspoint can connect to
a switch. then a wireless adapter such as PCMCIA is
installed onto a note book, then bobs you job, you have a
wireless conection, This enables me then to connect to the
network as i would through a standard wired link?

Cheers.

 

[George Lob]

You are correct. That's all you really need to do, but please consider at
least the basic security. Although you may not have any information on your
network worth looking at, that is not the only concern. Remember, anyone
near the access point will have access to your network. People are not
necessarily interested in your information, but to use your internet access.
Someone can connect to your network and download audio files(music). This
can cause your internet connection to slow down considerably. Another thing
to consider is someone using your connection to send out SPAM which will
also slow down your connection and could get you dropped by your ISP.

For the sake of others, if not for your company, PLEASE secure your
accesspoint.

George

 

[Louis Hardy [MS]]

Chirs,

Try the following Step-by-Step Guide at the link below.

http://www.microsoft.com/downloads/details.aspx?FamilyID=0f7fa9a2-e113-415b-
b2a9-b6a3d64c48f5&DisplayLang=en

http://www.microsoft.com/wifi




Best Regards,

Louis Hardy, MCSA, MCSE
Microsoft Enterprise Network Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Chris Cowling" <[email protected]>
| References: <[email protected]>
| Subject: Re: Wireless LAN
| Date: Mon, 15 Mar 2004 13:38:46 -0000
| Lines: 30
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.win2000.networking
| NNTP-Posting-Host: 213.48.29.114
| Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGXS01.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP0
8.phx.gbl!tk2msftngp13.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.networking:58197
| X-Tomcat-NG: microsoft.public.win2000.networking
|
| Rob,
| you might want to try microsoft.public.windows.networking.wireless
| group aswell.
|
| Kind Regards
|
| Chris Cowling, MCP
|
| | > Hi Guys,
| >
| > Currently toying with the idea of adding a wireless
| > section to the company network, not really sure whats
| > envolved, does anyone have any good advice or suggestions
| > on were i can obtain a guide from.
| >
| > The hardware side of it all seems really atright forward
| > but its the configuration of the server that confuses me,
| > do i just plug and play with the access points like a hub?
| > or is there a more complex configuration that will need
| > doing?
| >
| > Any information would be a great help.
| >
| > Cheers,
| >
| > Rob
|
|
|

 

[Philippe L. Balmanno]

Physical security. They only have one wireless NIC on the wireless laptops
and desktops and the other hardwired systems have no devices in their
cubicles. Not to mention the network management/monitoring software.

 

[Philippe L. Balmanno]

George, I assume you are concerned with the signal access to the network?
In my experience the WAP I use has an effective distance of approx.100
meters. However I found in the real world that's only in line of
sight/signal. It really looses signal strength around corners etc. And the
option to the degredation is installing either a booster or booster antenae.

Yes, WEP is for home users and is out dated, I believe now they are using
WPA security but again I use a VPN and without the correct settings and
permissions an illegal WAP installed on my network in the hardwired segment
is still possible however the access through the signal is not because of
MAC and IP permissions set on the wireless router.