wireless security, WEP or WPA?

[Bobz]

hi, i bought a Linksys Wireless 4 port Router - (WRT54GS)
and i would like to know if i should use WEP or WPA in the Security settings.


thank you
Bob

[WSFuser]

use WPA. its more secure.

also check this page: How to Secure Your Wireless Home Network with Windows XP (http://www.microsoft.com/windowsxp/using/networking/learnmore/bowman_05february10.mspx)

[ThunderZ]

If my memory serves me, WEP has been cracked. WPA with a minimal 20 character randomly generated password, 62 character is preferred. It has also yet to be cracked.

[rdsu]

Use WAP or WAP2 with 63 random ASCII characters, from here GRC's Ultra High Security Password Generator (https://www.grc.com/passwords) ;)

[ThunderZ]

-{ Quote: "Use WAP or WAP2 with 63 random ASCII characters, from here GRC's Ultra High Security Password Generator (https://www.grc.com/passwords) ;)" }-


There are password managers (Robo-form being one, I do not use it but have friends that do) that have the ability to generate them as well.
Thanks for the correction on the 63.....can never remember that. ::)

[HelpFromFrance]

Thanks for the info, I have been wanting to do this but was a little afraid to try it. I did try it and I could not use 63 but 62 characters in my password. I don't think that one will make that much difference ::) ::)

Thanks again & have a good day,
HelpFromFrance

[Bobz]

is the WPA-2 Shared Key where the Password goes?

for WPA Algorithms i have a choice off TKIP+AES or AES, which should i choose?


thhanks

[ThunderZ]

Some reading for you. I believe what you choose can be specific to your application. http://www.google.com/search?q=WPA+Algorithms&start=0&ie=utf-8&oe=utf-8&client=firefox-a&rls=org.mozilla:en-US:official

[Alphalutra1]

I think if my memory serves me correctly, that AES only has the least amount of overhead since it is hardware driven encryption instead of software like TKIP. So I would go for AES, if all of your devices support it. Again, trying to recall from memory, I think the TKIP-AES mode is to support NICS that can't do AES encryption, so go for AES if you can.

Alphalutra1

[rdsu]

Take a look at this: TKIP vs AES (http://www.dslreports.com/forum/remark,12999124)

[Alphalutra1]

Man I had a good guess ;D

Alphalutra1

[rdsu]

It seems so... :D

[Bobz]

ok now how can i fix this....
i set the router up for WPA-2 with the 63 random ASCII character key but, when i went to my laptop i found out it only supports WPA, so...
i went back to my router and set it on WPA but it won't old it.
i clicked on the drop down and select WPAa but as soon as i let go of the mouse button it changes o WPA-2.

how can i fix this?

thank you

[TheQuest]

Hi, bobz

UI can not help with your Linksys Wireless, as I use a different product make of router.

But I would just like to add, as added Secutity make sure you change the default SSID Name and Disable broadcasting of your SSID also only give the SSID to trusted People.

Take Care,
TheQuest 8)

[Bobz]

ok, i tried upgrading the firmware but that didn't change anything so i reset the router which i could have done the first time :)

[Bobz]

thank you all for the Advice and Tips, i really appreciate it.


Bob

[Alphalutra1]

-{ Quote: "

Disable broadcasting of your SSID also only give the SSID to [i]
" }-

I would recommend not taking this measure. It doesn't actually hide your Access Point. Any person can easily find it by using an app like netstumbler. I do however, recommend you change your access points name, and make the signal be set at frequency 1 or 11, to minimize conflict with other signals. As long as you implement WPA, then MAC filtering and hiding your SSID is worthless, and only creates connectivity problems in the future ;)

Cheers,
Alphalutra1

[Bobz]

"make the signal be set at frequency 1 or 11" do you mean change the channel?

[Alphalutra1]

-{ Quote: ""make the signal be set at frequency 1 or 11" do you mean change the channel?" }-
Yes, sorry, the word was on the tip of my tongue and I couldn't remember it ;)

Alphalutra1

[Bobz]

np thanks :)

i see you have the same router that i'm using, but what is the advantage of that firmware?
"WRT54G w/ Thibor v.14 firmware"

[TheQuest]

Hi, Alphalutra1

-{ Quote: "Disable broadcasting of your SSID" }-
-{ Quote: "I would recommend not taking this measure." }-
-{ Quote: "hiding your SSID is worthless," }-
You have said that twice now.

Why not and why worthless.


-{ Quote: "and only creates connectivity problems in the future " }-
How does it cause problems.

Take Care,
TheQuest 8)

[Alphalutra1]

Lets think about it this way in the metaphor of a house on the street at night:

You decide to turn off your lights("Disable your SSID from being broadcasted") to make your house more secure. You still have an alarm system and a lock that makes it impossible to enter the home, so disabling the light only makes it so that people driving by don't see your home unless they look hard enough(which isn't very hard to do).

So now, you feel better since people can't see your home as easily, even though your home was impenetrable before.

Now, you tell your friend (a new computer in the network) the pass to your alarm and give him or her the key, so they can enter the house (network). However, they drive by and don't see the house, or they have troubles finding the house and the door to enter it since the area isn't illuminated by the lights(connectivity problems). See the dilemma?

That should cover why hiding your SSID is a "tinfoil" approach to security. I now that my game adapter for my ps2 couldn't connect to the network when the signal was not broadcasted. The wireless security forum located at DSLR here (http://www.dslreports.com/forum/wsecurity) has a wealth of info in the posts, and a very nice faq is located there.

Cheers,

Alphalutra1

[iceni60]

some versions of WRT54G will run linux. i think before version 5

http://openwrt.org/

http://wiki.openwrt.org/OpenWrtDocs/About

[Alphalutra1]

-{ Quote: "some versions of WRT54G will run linux. i think before version 5
" }-
All will (the default firmware is linux ;) ) except for version 5. The new model WRT54GL (L for linux), will as well.

Alphalutra1

[TheQuest]

Hi, Alphalutra1

-{ Quote: "Lets think about it this way in the metaphor of a house on the street at night:" }-
Lets, if it makes you feel good. :dry:
-{ Quote: "to make your house more secure. You still have an alarm system and a lock that makes it impossible to enter the home, so disabling the light only makes it so that people driving by don't see your home unless they look hard enough" }-
So there no harm in make thing harder.
-{ Quote: "(which isn't very hard to do)." }-
Do you know anything that is 100% in securing a computer, other then the pulling the plug.
-{ Quote: "
Now, you tell your friend (a new computer in the network) the pass to your alarm and give him or her the key, so they can enter the house (network). However, they drive by and don't see the house," }-
As I said here:-
-{ Quote: "Disable broadcasting of your SSID also only give the SSID to trusted People.
" }-
They will have no problem.
-{ Quote: "I now that my game adapter for my ps2 couldn't connect to the network when the signal was not broadcasted." }-
I do not know anything about Game adapters, just goes to show does makes it more secure. ;)

But a Wireless card, USB adapter, etc with the SSID [of the none Broadcating] and Password will have no trouble connecting.

Take Care,
TheQuest 8)

PS: Nearly forgot because my is So Secure ::). After pulling the plug, Also turn off anything doing Wireless Broadcating. ;D

[Alphalutra1]

If it makes you feel more secure, then have at it;) :wacko: . Just don't do anything dumb like turn off WPA

Cheers,

Alphalutra1

[TheQuest]

Hi, Alphalutra1

-{ Quote: "Just don't do anything dumb" }-.
I very much try not to, even though I at the age when anything can happen to the Mind :ouch: , the body went wrong long ago I afraid. :)

Take Care,
TheQuest 8)

[Alphalutra1]

Here (http://www.dslreports.com/faq/10907) and Here (http://www.dslreports.com/faq/11468) is some great info on SSID at dslreports for those looking at the disabling SSID aspect of a wireless network. Also an example of disabling ssid breaking something here (http://www.dslreports.com/forum/remark,16083920) and some more info here (http://nitecruzr.blogspot.com/2005/05/disabling-ssid.html) if you wanted it ;D

Cheers,

Alphalutra1

[TheQuest]

Hi, Alphalutra1

Intresting reading thank you [have Bookmaked PChuck's Network], I have read and do read about the and try to keep abreast with the times on the subject.

I use this site most of the time Computing & Technology (http://about.com/compute).


Take Care,
TheQuest 8)

PS: still hidd though. ;D