WEP vs. WPA

[Paddy]

In the interest of making my WiFi network more secure I have been reading up onthe encryption protocols for WiFi networks. At the moment I use a Pre-shared TKIP WPA key. My work uses a 128bit WEP key (which I wish i knew!).

I am concerned that there are quite a few wireless networks just out of range of my own at home and I would like to ensure that my network is as secure as possible. I already hide the SSID and I have enabled MAC address filtering. What other steps could I take?
I do have a smoothwall box, webserver and fileserver. Is there such a thing as a RADIUS client for windows that would help, or would that be overkill?

[TnT]

Breaking a 128 bit WEP key in 3 minutes: http://www.tomsnetworking.com/2005/0...your_wlan_too/

[Dr Mordrid]

Go WPA with a wicked key for sure.

Dr. Mordrid

[The PIT]

Problem is I've got two peices of wireless equipment that don't support wpa. Rather annoying in this day and age.

[Dr Mordrid]

I upgraded the elder laptop with a Linksys PC card adapter. Granted this would be tougher on a PDA though. Upgrade time mebbe?

Dr. Mordrid

[Lucid]

Sharing is caring..

[RC Agent]

Wireless LAN security hall of shame mentions both MAC filtering and hiding SSID, WEP gets honorable mention.

[MultimediaMan]

Backtrack works very well, but look at the base hardware overhead needed for the attack to succeed quickly: Two machines running wireless adapters...

SSIDs are really kind of handy: they tell you WHAT you are connecting to. I leave mine turned on...

I disagree that MAC filtering is pointless: It is a viable way for a home user to control inadvertent access: most home users do not leave their wireless systems on for extended periods of time...limiting exposure to a passing sniffer, and keeping the casual war driver at bay.

[Paddy]

http://community.smoothwall.org/forum/viewtopic.php?t=15985

this looks interesting

[VJ]

I have mine set up with:
- MAC address filtering
- hidden SSID, with a name that doesn't really refer to me
- WPA2


Jörg