Couple of wireless networking questions

[Mitch]

Trying to configure my wireless network for a bit of security, following
various articles on the subject.

XP Pro SP2.

Using WPA, pre-shared key, that's working fine.

Changed the SSID to my own network name, no problem.

There was advice to turn off SSID broadcast, but when I do, the remote
computers don't see the network... How does that work?

I would also like to enable MAC filtering, and just allow the computers on
the network to acess, but I haven't figured out how to make this work
either - this is router model specific, I see how to enter the MAC
addresses, but they don't seem to "stick". If I allow all, then I can see
the remote computers in the list, but restricting access seems to eject
them, entering them by hand, they don't stay in there.

On my laptop, ipconfig /all gives me 2 MAC addresses - I assume use the one
associated with the wireless card (the other being for cabled access)?

I have a Linksys WAG354G router, but many other Linksys products probably
have the same config panel.

If anyone has answers to any/all of the above, as always, greatly
appreciated.

--Mitch

 

[Chuck]

Trying to configure my wireless network for a bit of security, following
various articles on the subject.

XP Pro SP2.

Using WPA, pre-shared key, that's working fine.

Changed the SSID to my own network name, no problem.

There was advice to turn off SSID broadcast, but when I do, the remote
computers don't see the network... How does that work?

I would also like to enable MAC filtering, and just allow the computers on
the network to acess, but I haven't figured out how to make this work
either - this is router model specific, I see how to enter the MAC
addresses, but they don't seem to "stick". If I allow all, then I can see
the remote computers in the list, but restricting access seems to eject
them, entering them by hand, they don't stay in there.

On my laptop, ipconfig /all gives me 2 MAC addresses - I assume use the one
associated with the wireless card (the other being for cabled access)?

I have a Linksys WAG354G router, but many other Linksys products probably
have the same config panel.

If anyone has answers to any/all of the above, as always, greatly
appreciated.

Mitch,

Disabling the SSID Beaconing (you can't disable the SSID broadcast) does not
provide security, causes more network traffic, and causes problems like what you
are seeing.
<http://nitecruzr.blogspot.com/2005/05/disabling-ssid.html>
http://nitecruzr.blogspot.com/2005/05/disabling-ssid.html

The MAC address is easily spoofed. Your WiFi network adapter probably provides
that ability, as does your Ethernet adapter. Mine do.

The best protection is WPA, properly setup. WPA-PSK, which is the options you
will probably have, uses TKIP to change the encryption key regularly. Plus it
requires your WiFi client to authenticate, initially, with the router.

Use WPA, and a properly layered security on your network as a whole. Don't
waste your time, and your focus, on settings that don't help you.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html

 

[Mitch]

Mitch,

Disabling the SSID Beaconing (you can't disable the SSID broadcast) does
not
provide security, causes more network traffic, and causes problems like
what you
are seeing.
<http://nitecruzr.blogspot.com/2005/05/disabling-ssid.html>
http://nitecruzr.blogspot.com/2005/05/disabling-ssid.html

The MAC address is easily spoofed. Your WiFi network adapter probably
provides
that ability, as does your Ethernet adapter. Mine do.

The best protection is WPA, properly setup. WPA-PSK, which is the options
you
will probably have, uses TKIP to change the encryption key regularly.
Plus it
requires your WiFi client to authenticate, initially, with the router.

Use WPA, and a properly layered security on your network as a whole.
Don't
waste your time, and your focus, on settings that don't help you.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html

OK, thanks for the info Chuck!

--Mitch