Mailing List os2-wireless_users@2rosenthals.com Archived Message #346

From:	"Lewis G Rosenthal" <os2-wireless_users@2rosenthals.com>	Full Headers Undecoded message
Subject:	Re: [OS2Wireless] Router security
Date:	Sat, 21 Feb 2009 18:04:17 -0500
To:	OS/2 Wireless Users Mailing List <os2-wireless_users@2rosenthals.com>

On 02/20/09 01:23 pm, Ray Davison thus wrote : My current router has: WPA Personal WPA Enterprise WPA2 Personal WPA2 Enterprise RADIUS WEP 64 WEP 128 eCS RC6 shows: WEP 64 WEP 128 WPA PSK WPA2 PSK From a long time ago I have been using WEP 64. Any suggestions on which I should be using? If at all possible, you want to use WPA2. You need to find the lowest common denominator between them. It is common for WPA2 to not match up between client and AP in all cases, so having to fall back to WPA is typical. You will likely have a choice between TKIP or AES (or both, on the AP side). I usually select both at the AP, as this will allow for connections from clients running either. AES provides the strongest encryption, however (256-bit). TKIP simply rotates the keys at pre-determined intervals (the intervals are decided upon between the AP and the client). "Enterprise" implies that there is a back end server providing authentication (part of the 802.11i spec). "Personal" implies "Pre-Shared Key," or "PSK." WEP64 (which is really 48-bit encryption) is so weak that it is not even worth using. An easier approach would be to use MAC address filtering, as this will keep innocent wanderers off of your WLAN. The RC-4 encryption is weak enough, and at 48 bits, can be picked in seconds. Don't even bother. HTH -- Lewis ------------------------------------------------------------- Lewis G Rosenthal, CNA, CLP, CLE Rosenthal & Rosenthal, LLC www.2rosenthals.com Need a managed Wi-Fi hotspot? www.hautspot.com Treasurer, Warpstock Corporation www.warpstock.org -------------------------------------------------------------

Subscribe: Feed, Digest, Index.
Unsubscribe
Mail to ListMaster