Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Non-SL Tech Question - RE: Wireless Router's & Security

Omen Torgeson
Registered User
Join date: 12 Jun 2004
Posts: 155
04-13-2005 13:39
Hi all,

Not too long ago I was donated two pieces of hardware. 1) A laptop computer - 2) A LinkSys Wireless Router.

Here's the setup now. I have my girlfriend's Desktop hardwired into the router (which is in turn connected to the cable internet modem). And I have my laptop hardwired into the router as well. (Though it came with this PCMCIA card thing that lets me go 'wireless' if I want to).

This works all well and good. But I don't like the thought of some fool being able to wirelessly log into my service and leech my bandwidth. When I search for available wireless networks. Mine shows up, but so do a few others. And one happened to be named the same first name of the lady that lives above me. Heh. So that gave me rise to thinking, "hell, if I can see her network - there's a good chance other people can see mine.'

So I need help with getting it so that no one else can log into the router wirelessly except myself. I noticed that my neighbor upstairs has network security on hers - but I couldn't figure out how to set my router up. Hell...there isn't even any software loaded on the computer for it that I can see. I've tried using the setup CD, but it doesn't complete sucessfully?!?

I know I saw a thread a while back about someone wanting to log into SL simultaneously (this is not my issue), but I remember someone mentioning they had a LinkSys router. So figured I'd post this and see if you more technology-savvy people could help me out. :)

Thanks..............................! :)
_____________________
Max Schreck:
"I feed like an old man pees -- sometimes all at once, sometimes drop by drop."
-Shadow of the Vampire
Lee Linden
llBuildMonkey();
Join date: 31 Dec 1969
Posts: 743
04-13-2005 14:25
I handle the configuration on my router at home by logging onto the router itself. (I pull up a web browser and enter the local IP of the router, and enter my administrative name/password.)

My wireless router is configured using WEP (Wired Equivalent Privacy). I have a security WEP key that must be entered by any device that wants to connect wirelessly. In addition, my router is configured with a whitelist; any network adapter whose MAC address isn't explicitly listed, doesn't get to connect at all.

It's a lot more configuration time and effort, but it's much more secure. Though, I don't recommend wireless for SL anyway, but I'm using 802.11g, and I have my cordless phones and microwave well away from the router and computers.
Tito Gomez
Mi Vida Loca
Join date: 1 Aug 2004
Posts: 921
04-13-2005 15:39
At the minimum:

1. Change the router's default password <- critical

2. Set it up to not broadcast the SID

3 - 4. What Lee suggested (WEP + MAC Access Lists)

That should be enough to keep out 99.9% of potential intruders.

Setup is usually accomplished via a built-in setup page in the router. If you are not getting the PC's IP address via the router's DHCP server, you may need to change your PC's IP address to the same network the router is (I believe the default Linksys router IP is 192.168.1.1 and the default password is admin). So from your PC's browser you would type http://192.168.1.1 and get a log in page for the router's setup program.

Tito
_____________________
Omen Torgeson
Registered User
Join date: 12 Jun 2004
Posts: 155
04-13-2005 16:21
Thanks Lee & Tito,

After reading the replies I managed to get it all working okay. A secure wireless network is finally up and running. Many thanks!

Omen
_____________________
Max Schreck:
"I feed like an old man pees -- sometimes all at once, sometimes drop by drop."
-Shadow of the Vampire
Leopard Loveless
Script Kitty
Join date: 30 Sep 2004
Posts: 57
04-13-2005 23:41
Sorry to burst your bubble, but WEP is something that's usually hacked in 6 minutes using a free software tool called "AirSnort", among others.
WEP has _serious_ weaknesses.
There are newer standards now, like TKIP and WPA/AES, but even though they are out for well over a year now, most cheap access point vendors still did not implement them.

Check if your AP and wireless cards can do TKIP or WPA/AES, and if yes, then by all means, use those instead of WEP.

Yours,
Leopard Loveless
Ace Cassidy
Resident Bohemian
Join date: 5 Apr 2004
Posts: 1,228
04-14-2005 02:55
From: Leopard Loveless
Sorry to burst your bubble, but WEP is something that's usually hacked in 6 minutes using a free software tool called "AirSnort", among others.


Leopard is correct in stating that WEP isn't very strong security. A hacker who wants to sniff your packets can crack it with little difficulty.

However, WEP + a MAC Address Filtering will at least keep anyone from leeching your bandwidth unless they have the capability to spoof MAC addresses (doable, but not trivial, and requires a MAC with programmable address).

For most home purposes, WEP + Address Filtering is sufficient.

My $US0.02...

- Ace
_____________________
"Free your mind, and your ass will follow" - George Clinton