wifi encryption

1006 · #1 (**permalink**) 08-07-2006, 05:50 PM

Hey guys!

Short question for you guys to help me.. i have several access points... when i come to do encryption, will i have to set it on every access point? or will the settings be copied on all access point?

Noodles · #2 (**permalink**) 08-07-2006, 10:32 PM

You will have to set it on each access point

1006 · #3 (**permalink**) 08-08-2006, 07:12 AM

Is there any form of replication that can be done instead of entering the MAC address on each access point??

NZLamb · #4 (**permalink**) 08-08-2006, 07:22 AM

Access points aimed at the enterprise market can often do this such as those from Cisco and high end products from D-Link and the likes. SOHO type access points unfortunately can't be set up this way.

Often you can backup the configuration to a file and load this onto other units of the same type but you will still manually need to reconfigure the IP address and wireless channel to prevent conflicts.

1006 · #5 (**permalink**) 08-08-2006, 07:29 AM

I see...

Another thing that Im thinking about is Since i have a DHCP server running, will i have to create a reservation range so i and give out reserver IP addresses for the Access points, or i can just set an IP on the access point and i will be fine. Will I have to tick DHCP on the acces point since i have a DHCP server running already? will there be any conflicts?

NZLamb · #6 (**permalink**) 08-08-2006, 07:53 AM

That's not a bad idea at all. If you know the MAC address of each AP then DHCP reservations would solve the problem of changing each IP very nicely.

You would need to configure the APs to receive an IP address via DHCP but don't enable the DHCP server in them; it will conflict with your existing one.

Ideally you would still want the APs operate on different channels though. Using the above suggestions the administration overhead is still significantly reduced.

I gather you have a server running on your network, have you considered using 802.1x instead? This can be a little complex to get set up but provides better security than traditional WEP or WPA-PSK, and MAC filtering.

1006 · #7 (**permalink**) 08-08-2006, 08:00 AM

Well the Access Points are already stocked up over here its just a matter of installation and setting up now..

I have around 10 access points available and they are going to be implemented in a school. Security is an issue, I was thinking by mac filtering, but i will have to add every mac address on every access point right?

As you said above so i dont enable the access point DHCP but automatically every computer logged onto the wireless network will be given an automatic IP right?

NZLamb · #8 (**permalink**) 08-08-2006, 10:17 AM

The wireless clients will get an IP from your existing DHCP server as normal, as the access points simply operate as a bridge.

If you use MAC filtering then just go with the idea of copying the configuration backup file once you have configured one AP with the filter, SSID, encryption, etc. Most APs allow you to do this quite easily via their web interface.

The only drawback to having a large number of unmanaged APs of course is if you need to add or delete a MAC address down the track you will have to login to each AP individually.

1006 · #9 (**permalink**) 08-08-2006, 11:02 AM

have you ever managed to make a login screen so it looks like of when you find a hotspot as in userbame and password?

NZLamb · #10 (**permalink**) 08-08-2006, 11:52 AM

I haven't made a hotspot myself but I have used a couple of products that do it such as Mikrotik RouterOS and m0n0wall. They are relatively easy to get going but require a separate computer to act as a gateway.

I wouldn't consider it a very good form of security on a private network though; the traffic isn't encrypted and it's just another thing users need to enter a password for.

Why not try WPA-PSK? It's easy to set up and is much more secure than a captive portal hotspot or MAC filtering.

1006 · #11 (**permalink**) 08-08-2006, 12:16 PM

Yeah thats what im going to do implement that form of encryption.

I don't know if you would know if I need any extra configurations but the access points I have are D-Link

D-Link DWL 2100AP
D-Link DWL G700AP

Will I have any conflicts?

NZLamb · #12 (**permalink**) 08-09-2006, 06:45 AM

Shouldn't do. The DWL-2100AP is uses Atheros chips and is exceptionally reliable, the DWL-G700AP uses Realtek so YMMV. I doubt there will be any conflicts, most clients will happily roam about without regard to the type of AP in use.

One thing that is worth doing with D-Link wireless gear is updating the firmware before getting set up as they often ship with very old (and often buggy) versions.