Wireless
Home Networking Security Concepts and Definitions
The
concepts and definitions presented here are important to know for anyone
who uses a wireless network, regardless of the router or other wireless
device they use. The majority of all wireless devices support these
security methods and it is highly suggested that you look into each
one. For information on how to implement any of these security methods,
be sure to consult the user's guide that is included with your wireless
device. If you have a Draytek wireless router from Huxley Communications,
you can set these methods up according to the "Wireless LAN setup"
portion of Basic Setup.
-
Change
your default Administrator Username and Password - Your
wireless device can be logged into from any computer on your home
network, if one has the correct username and password. You can do
this so that you can setup your device settings, be they security
settings, connection settings, etc. The manufacturer sets up the device
with a generic username and password so that you can access it easily
for the first time; they are normally simple and well-known to hackers
on the Internet. Make sure that you change the administrative username
and password first thing so that only you (and people you trust) know
how to log into your wireless device. To maintain security in the
future, you might consider continuing to change the administrative
password regularly, perhaps every 30-90 days. The "Changing Administrator
Password" section of the Draytek wireless router user guide contains
setup information.
- Changing
the Default SSID and Disabling SSID Broadcast -
Wireless devices all use a name for their network called an SSID. Manufacturers
of wireless devices generally ship all of their products with the same
SSID; for example, the default SSID for a Linksys wireless router is
usually "linksys." To improve the security of your network,
be sure to change the SSID to a name other than the default. Be sure
to change it to something that only you would know, and not your name,
address, birthdate, or other such information.
Another important fact to know is that your wireless device is,
by default, set to broadcast its SSID at regular intervals. This is
useful for business, schools, and other places where multiple wireless
users may come and go at leisure. When used at home, this feature is
not necessary and reduces security, because it allows anyone driving
nearby to pick up on your SSID name. If you turn this feature off, you
increase your security greatly, making it more likely that would-be
hackers will bypass your network for easier targets elsewhere. The "General
Settings " portion of the "Wireless LAN setup" section
of the Draytek wireless router user guide contains how to change the
SSID and how to hide its broadcast.
- Enable
MAC Address Filtering - Every piece of networking equipment,
be it a Network Card, Modem, Router, etc, has what is called a MAC address;
it is like a fingerprint that identifies each piece of equipment as
unique. You can set your wireless device to only allow devices with
only the MAC addresses that you specify, helping to stop unknown computers
from accessing your network. You will need to know the MAC address of
each device you are connecting to your wireless router in order to setup
your filtering. If you have questions on how to find the MAC address
of your computer, please click here. When following
the steps provided by the router manufacturer, you will setup a list
of allowable MAC addresses in the router; when a device tries to connect
to your router, it will have its MAC compared to the list and if it
does not match up, it will not be allowed to access the network. The
"Access Control" portion of the "Wireless LAN setup"
section of the Draytek wireless router user guide contains how to add
MAC addresses to the control list and enable this function.
- Make
sure that your wireless device is positioned safely - You
generally want your wireless signal to reach the exterior of your home
and no further, a small amount will escape through windows, etc, and
is generally not a problem. The further the signal reaches, however,
the easier it is for intruders to detect and abuse it. Often, wireless
signals can reach across streets and through neighboring homes. Try
to position your wireless device near the center of your home, rather
than near windows or doors, to best prevent leakage.
- Enable
Wireless Encryption - All pieces of Wireless equipment
support some kind of encryption. Enabling Encryption scrambles and encodes
messages sent back and forth between a computer on your network and
the wireless device. The "WEP Settings" portion of the "Wireless
LAN setup" section of the Draytek wireless router user guide contains
how to enable encryption on your wireless connection.
These
are simply a sample of the wireless security options available to you
with your wireless network. The above security methods presented here
are the most common and easily set up methods you can take to adequately
secure your wireless network, but by no means are they every step one
can take. For more ideas and tips on wireless networking security, simply
search for "wireless home network security" in any web search
engine and you will find many informative and worthwhile sites to help
you learn more about this important topic. |