Two dumb networking questions

[fishyweb]

1. If I stop my wireless router broadcasting its SSID (for security reasons), how do I then connect my wireless laptop to the network? I tried doing this, but of course the laptop (XP Home) does not find the network. How do I tell the laptop how to find the network?
2. I saw the following info on another bulletin board: "... the ethernet modem you are using for the gateway must be on a different Class C ip address. If you have it set to default collision will constantly cause it to lock up and need resetting." My Belkin F5D7230 keeps locking up, and I can't help wonder whether this is the cause. How does one determine or set the IP address used by the modem?

Thanks in advance with your help.

[__spc__]

Originally Posted by fishyweb

1. If I stop my wireless router broadcasting its SSID (for security reasons), how do I then connect my wireless laptop to the network? I tried doing this, but of course the laptop (XP Home) does not find the network. How do I tell the laptop how to find the network?

Pointless - the SSID is transmitted with EVERY data packet sent between the router and WiFi client. Any packet sniffer will pick it out. So no security benefit. Also, if yo ubroadcast SSID, then using Netstumbler, I can see what channel your router is broadcasting on, then change mine (to avoid interference, and improve network speed). Your laptop does not need to see the SSID to connect - just enter the SSID in the WiFi NIC under wireless networks; it will work fine.

Originally Posted by fishyweb

1. I saw the following info on another bulletin board: "... the ethernet modem you are using for the gateway must be on a different Class C ip address. If you have it set to default collision will constantly cause it to lock up and need resetting." My Belkin F5D7230 keeps locking up, and I can't help wonder whether this is the cause. How does one determine or set the IP address used by the modem?

Thanks in advance with your help.

No idea on this one...

[Gareth]

Have a look at page 41 of the User Guide, which you can download here... http://www.belkin.com/support/downlo...4_man_6-04.pdf

This explains how you can change from the default 192.168.2.1 address for the router

[fishyweb]

Originally Posted by __spc__

Pointless - the SSID is transmitted with EVERY data packet sent between the router and WiFi client. Any packet sniffer will pick it out. So no security benefit. Also, if yo ubroadcast SSID, then using Netstumbler, I can see what channel your router is broadcasting on, then change mine (to avoid interference, and improve network speed). Your laptop does not need to see the SSID to connect - just enter the SSID in the WiFi NIC under wireless networks; it will work fine.

This has confused me. EVERY article I've read about securing a wireless network have recommended that the SSID broadcast be disabled. Are these all wrong?

Originally Posted by Gareth

Have a look at page 41 of the User Guide, which you can download here... http://www.belkin.com/support/downlo...4_man_6-04.pdf

This explains how you can change from the default 192.168.2.1 address for the router

This explains how to change the address of the router. The information I was after was how to change the address of the modem; or, I guess, how to determine the address of the modem so that I can ensure that it is not duplicated by anything else on the network. Any ideas?

[Gareth]

Originally Posted by fishyweb

This has confused me. EVERY article I've read about securing a wireless network have recommended that the SSID broadcast be disabled. Are these all wrong?

Yeah, pretty much. It is virtually pointless in hiding your SSID as it's still obtainable anyway. Anyone that can't work out how to get your SSID isn't gonna be a threat. It can, instead, like __spc__ says be beneficial, as it means that your neighbours will be able to see if you're using the same channel and change it accordingly.

Originally Posted by fishyweb

This explains how to change the address of the router. The information I was after was how to change the address of the modem; or, I guess, how to determine the address of the modem so that I can ensure that it is not duplicated by anything else on the network. Any ideas?

Ah, sorry, mate... I thought you were looking to change your router's IP. I'm not aware of how to do this, but maybe one the ntl techs here will know for sure.

[Hom3r]

Hiding your SSID is a MUST IMHO. if they can see it there one step closer to getting free access to you computer and BB access.

fishyweb read the link in my sig for setting of wi-fi security this might help you.

[Gareth]

Originally Posted by david.ewles

Hiding your SSID is a MUST IMHO. if they can see it there one step closer to getting free access to you computer and BB access.

Why? Obtaining an SSID is childs' play even when the broadcasting has been disabled. It is not any more secure to disable it, as the SSID is still included in the packets being broadcast, so can be snooped anyway.

The only thing it prevents is from people inadvertantly stumbling across your WLAN. But, providing you've enabled sufficient encryption, they're not going to be able to access anything in any case. Broadcasting your SSID, on the other hand, will enable people to be aware of your WLAN so can prevent neighbours using the same channel.

[Hom3r]

I didn't know that the SSID is sent in packets.

I have a neighbour that used wi-fi and when I turned on my lappy (my internet and wirless router was off) it came up I have limited access.

WTF I thought so I used Configfree to see what wi-fis where out there. It showed me a router. so I blocked his MAC address on my router, and change the cgannel. I also told him about what happened, he thanked me and changed his setting, I know no longer get his wifi, it has also stopped my connection dropping.

[Gareth]

To be honest, mate, a lot of people still argue over whether this is required or not.

Just found this recent article that covers this topic too... http://www.wi-fiplanet.com/tutorials...le.php/3576541 and there's an overview at Sans that discusses it (I'll see if I can find it later).

[grandmaster]

what harm are you going to do by disabling it ?

Disable it and specify it manually,

may stop a casual neighbour from connecting to your wireless

[Gareth]

By disabling it, you'll be stopping your casual neighbour from seeing that your network exists, and realising that they're sharing the same channel as you. It won't stop the determined hacker from finding your network and obtaining the SSID.

Personally, I leave it enabled and spend more time on encryption, which will seriously slow down anyone trying to hack into your WLAN, and will positively stop people casually connecting to you.

[Graham M]

It cannot hurt to have it disabled, I cant see why you are so against it Gareth. It's just another Hurdle for a potential hacker to get over. Hide your SSID and enable encryption (WPA, not WEP - WEP has been cracked before). And then you have to hurdles to get over before someone can get into your network. The more the better IMO.

[__spc__]

Originally Posted by david.ewles

Hiding your SSID is a MUST IMHO. if they can see it there one step closer to getting free access to you computer and BB access.

fishyweb read the link in my sig for setting of wi-fi security this might help you.

The single most valuable security step that you can take is to use WPA-PSK encryption.

If I'm on your LAN, I'll steal an IP address. I'll spoof a MAC address as this is included in any packets sent (so the router can route). Your SSID is available in the 'air' anyway, so I'll sniff that.

WPA-PSK will cause me a BIG headache, especially if you use a long or complicated key (not using words in the dictionary!).

Really, SSID / MAC address / IP address methods are near-pointless for deterring foreign users of your WLAN. They're good for controlling permitted users (e.g. for access at certain times, QoS etc.).