On Wed, 18 Feb 2004 03:32 am, [EMAIL PROTECTED] wrote:
> James Gray wrote:
> >Last weekend I lashed out and bought myself a new toy: A Netcomm
> > 802.11g/b access point (supoprts both standards and 128bit WEP too) :) 
> > I also
>
> It's not quite on-topic but since you mention 128bit WEP - you might
> want to read
> the following:
>
> http://www.isaac.cs.berkeley.edu/isaac/wep-faq.html
>
> The bottom line: "We recommend that anyone using an 802.11 wireless
> network not
> rely on WEP for security" (this includes "128" bit WEP).
>
> Cheers,
>
> --Amos

Thanks for the link - interesting read.  I am aware of the limitations (even 
more so now) of WEP and agree with your sentiments that WEP alone is 
insufficient.  I've done pretty much everything I can think of without 
going the full IPsec route.  Here's what I've done:
- 128bit WEP
- Access point in own DMZ (and all WiFi devices on different subnet)
- MAC level access control (on MAC's on the list can use the AP)
- Using a randomly generated SSID

As this is my first foray into the wonderful world of wireless 
administration I am happy to hear any suggestions to improve security :)

James
-- 
Fortune cookies says:
BOFH excuse #309:

firewall needs cooling
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to