kelsey hudson wrote:
> 
> 
> Ralph Shumaker wrote:
>> This PacketFence seems like overkill for a home wireless network.
> 
> People would consider the network I have at home overkill for most small
> businesses.
> 
>> What would provide good security for a home wireless network of 3 XP
>> machines, 2 of them through a wireless hub (model presently unknown)?
> 
> Install Linux over the XP install, for starters ;)
> 
>> How could I prevent neighbors (or occupants of nearby parked cars)
>> from accessing the wireless network?  How can I secure the wirelessly
>> linked XP laptops from being accessed through their wireless links?  I
>> need a working solution.
> 
> The best way I've seen to accomplish both of these require a Cisco
> access point. You can find used 1220s on ebay for a couple hundred bucks.
> 
> To prevent wireless clients from accessing other wireless clients, you
> need to enable PSPF (public secure port forwarding) on the bridge group
> to which the wireless radio is a member. This causes problems though, if
> you want to do things like directly share files or printers connected to
> a wireless client.
> 
> As far as the other requirement goes, If you want to keep the garden
> variety freeloading idiot out, WEP is sufficient. WPA is a hack and a
> kludge and generally pain all around. If you want to get fancy and keep
> all idiots out, even the more clever ones, you can directly connect your
> open, unencrypted WAP to a box (isolated network and addressing scheme);
> this box will run a VPN concentrator software and your clients will be
> forced to use IPSEC to connect to it. They will also not be allowed to
> connect to anything else.
> 
> Really, the cisco access points (NOT linksys) are very, very good pieces
> of hardware, and I highly reccomend them to anyone.
> 

The above sounds like the beginning of a howto.

Kelsey, I bet you could you post some good links to recipes for
implementing some of the above steps, eh?

Regards,
..jim


-- 
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to