+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 23
Wireless Networks Thread, securing wireless network in Technical; We now have about 10+ access points over our site and they are all unsecure. What would be the best ...
  1. #1

    Join Date
    Sep 2005
    Location
    Sheffield
    Posts
    136
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    securing wireless network

    We now have about 10+ access points over our site and they are all unsecure. What would be the best way to secure them, the teachers all use them for their laptops. They are 3com OfficeConnect boxes of various speeds.

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: securing wireless network

    WPA-EAP if your WAP's support it.

  3. #3
    woody's Avatar
    Join Date
    Jun 2005
    Location
    Carlisle, Cumbria
    Posts
    617
    Thank Post
    3
    Thanked 17 Times in 15 Posts
    Rep Power
    22

    Re: securing wireless network

    I've heard from a reliable source that both WEP and WPA can be cracked with various tools readily available on t'internet. Dynamic WEP is probably best since it changes the key regularly enough to stop hackers getting the full key. However, I doubt your APs will support it. It's only the higher end of APs that do.

    We are currently looking at putting flood fill wireless in the whole school. As well as looking at doing the job ourselves, we are getting some quotes from a few suppliers. One has come up with a fairly pricey system called Madge. But you can see why. All the APs have two radios in them. The APs connect to a central rackmount server where you can configure groups of APs with ease. If you get a new AP, you just plug it in, the server picks it up, and you add the AP to a pre-defined group. It immediately inherits all settings and is ready to go.

    For security, you can use Mac-address filtering, dynamic WEP, and certificates. It will be lovely if the school can cough up the cash for all that!

  4. #4
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: securing wireless network

    Most decent APs support 802.1x (even old ones). This enables the use of a RADIUS server to authenticate computers onto the LAN using either certificates or a shared password.

  5. #5

    Join Date
    Sep 2005
    Location
    Sheffield
    Posts
    136
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: securing wireless network

    Ive heard about RADIUS is it part of win server 2003 or something else?

  6. #6

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: securing wireless network

    Yes, you need to install it though. Its called 'Internet Access and Authentication Services'

  7. #7

    russdev's Avatar
    Join Date
    Jun 2005
    Location
    Leicestershire
    Posts
    6,924
    Thank Post
    709
    Thanked 551 Times in 366 Posts
    Blog Entries
    3
    Rep Power
    204

    Re: securing wireless network

    @geoff

    what is radius alt on linux and any good guides on setting it up

    russ

  8. #8
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,009
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: securing wireless network

    A search of debian packages brings up "free radius" .

  9. #9

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

  10. #10

    Join Date
    Aug 2005
    Location
    Birmingham, UK
    Posts
    490
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: securing wireless network

    I had 10 Cisco AP1200s running WPA with radius, you will need to install a certificate authority with IAS so PEAP will work, it ran beautifully, shame most my clients dont support WPA yet :'(

  11. #11

    Join Date
    Sep 2005
    Location
    Sheffield
    Posts
    136
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: securing wireless network

    Can anyone give some step by step talkthrough on using RADIUS to control wireless laptop access to the network

    Thanks!

  12. #12

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: securing wireless network

    Assuming your using a Windows 2003 server, there's some white papers on the Microsoft site about it.

    http://www.microsoft.com/windowsserv...i/default.mspx

    If your using Linux, see my previous post above.

  13. #13
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,456
    Thank Post
    10
    Thanked 494 Times in 434 Posts
    Rep Power
    113

    Re: securing wireless network

    Quote Originally Posted by Geoff
    Assuming your using a Windows 2003 server, there's some white papers on the Microsoft site about it.

    http://www.microsoft.com/windowsserv...i/default.mspx

    If your using Linux, see my previous post above.
    It will take you hours to get the point that it tell you to create some new certificate templates. These can only be created with Enterprise edition, I gave up at this point after about 6 hours. I only wanted to use a radius server for wpa2 :/

  14. #14

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: securing wireless network

    Then use the linux approach. Any old linux box can be used as a CA to generate your certs. Just install OpenSSL.

  15. #15

    Join Date
    Jul 2005
    Location
    Lancaster
    Posts
    35
    Thank Post
    4
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: securing wireless network

    We just use MAC Addresses to authenticate, its a little unsettling to see 'unsecured network' plastered all over the laptopa, i was under the impression that this was because windows doesnt pick up on the MAC address security.

    is this considered to be a secure setup or should we be looking at adding more measures to tighten things up?

    Cheers

    Dave

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Wireless Network away from LAN
    By gshaw in forum Wireless Networks
    Replies: 2
    Last Post: 19th December 2007, 01:16 PM
  2. Map network drives on wireless network
    By woody in forum Windows
    Replies: 24
    Last Post: 1st December 2007, 06:27 PM
  3. Wired & Wireless Securing
    By Samson in forum Wireless Networks
    Replies: 6
    Last Post: 14th August 2007, 10:47 PM
  4. Wireless Network
    By wesleyw in forum How do you do....it?
    Replies: 15
    Last Post: 3rd November 2006, 04:02 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •