How do I protect my wireless network.

[JacobRichards111]

Hey everyone!!!!

    I recently (meaning a few months) decided to go with Verizon DSL as an upgrade from dialup.  I have the jest of wireless internet but have some questions about it.  The DSL modem is a Westell VersaLink 327W Model: D90-327W15-06, because it is exclusive to Verizon I was told by Westell to talk to Verizon instead of them.  (Still, it's their product, shouldn't they try to answer my question?)  Anyway, I find trying to get detailed answers from Verizon a bit troublesome.  The firewall is Comodo, a free program that I am using as an alternative to ZoneAlarm, AVG is the anti virus on the pc the router is connected to.

    This wireless internet connection does have a WEP key, but the key along with the ESIDD are the default assigned by Westell.  It says on the slip that all ESIDD and WEP keys are unique, but I wanted to know how can I change these keys to ones of my own choosing?  Or at least change the WEP from time to time.

    But should their be other methods in securing a wireless network?  Exactly how at risk are wireless networks with "War driving"?  Is it true networks protected with WEP can be -with patience- cracked easily?  Recently, I bought a new computer which I plan on installing a wireless adaptor to pick up the router signal.  Is it possible to make the router signal invisible to any other computer EXCEPT for the computers that I want to have access to the router?

    Please bear in mind I am still learning about this stuff.
THANKS!!!!!!!!!!!

[Rob Pomeroy]

Firstly, RTFM.  

Secondly, yes, encrypted wireless can be cracked in theory.  WPA is harder to crack than WEP, so is preferable.

Most wireless access points/routers include MAC filtering.  MAC addresses are unique to a particular piece of network hardware (e.g. your wireless network cards).  Typically the MAC will be printed somewhere either on the machine or in its handbook.  Add these MAC addresses to the router's list of accepted MACs and block all other MAC addresses.  MAC spoofing is possible, but again it adds another layer of security to your network.

Finally, secure all the PCs on your network; use passwords on all file shares, and switch off the wireless cards when you're not using them.

[JacobRichards111]

Hi there!  A RTFM to you Rob!!!

I guess you meant switch off the router when not in use?  I don't see what trouble a wireless card adaptor would do when it's on.  For experiment, I used the adaptor to connect to the router using the one installed in the lappy.  All it does is list routers it finds, I'll click on them and enter a WEP.  How would a Mac address work?  Their is one listed on the router....  

Is it possible to change the SIDD and WEP?  I donno how to do that.  Guess that's all.

Thanks!

Say what is "RTFM"?

[Rob Pomeroy]

I guess you meant switch off the router when not in use?  I don't see what trouble a wireless card adaptor would do when it's on.

Nope; I meant the wireless card.  In fact all wireless equipment is best switched off when not in use, although this will generally be inconvenient.

WiFi is a broadcast network.  Whilst your wireless equipment is switched on and working, someone with a high gain antenna can (theoretically) sit a mile away from your premises and sniff all the traffic on your network.  Hence the need for more security than you require on a wired network.

the lappy

Argh.  

All it does is list routers it finds, I'll click on them and enter a WEP.  How would a Mac address work?  Their is one listed on the router....

Yeah, I think you probably need to RTFM first.  That should help.

Is it possible to change the SIDD and WEP?

SSID, yes.  And switch off broadcasting the SSID, for a modicum of extra protection once your client machines are all connected.  As for the WEP, this varies between equipment.  Some will generate it for you, others will allow you to enter your own.  YMMV.  (Your mileage may vary.)

Say what is "RTFM"?

That would be Read The ... er ... Fine Manual.  

[2k_dummy]

RTFM.
Depending on the router, there may be two places for entering MAC addresses. On my Linksys, addresses that I want to connect are entered in the MAC address table. MAC address filtering field is for addresses that I want rejected. Another thing you can do is limit the number of IP's that the router will allow. Generally, the number of machines +1 is a good limit. Some routers may not permit this limitation. Turning off SSID broadcast is always a good idea. It prevents the router from broadcasting its presence. If you change the SSID it must be changed in the router and all wireless cards. Make changes one step at a time so that if something goes wrong you can easily undo them.