Log in

View Full Version : Securing a wireless network?



Rupe
10th January 2008, 20:46
I've got a Belkin wireless router, but it's not secured and I think others are/have been using it aswell.

Anyone know how to secure it so only I can use it?

Indiana_Jones
10th January 2008, 20:48
type this into your web browser address bar "http://192.168.2.1" (that's for Belkin)

That should take you to the router home page, there you can set up passwords etc

Hope this helps :)

-Indy

Cajun
10th January 2008, 21:03
whats the model of you belkin?

are you using the wifi part of the router? if you are not turn it off.

If so once give model number can find the manual and walk you thru the steps

pzkpfw
10th January 2008, 21:04
Remember to change your pre-shared key once a month or so.

Usarka
10th January 2008, 21:07
Lock it in the cupboard.

crazybigal
10th January 2008, 21:31
i set my belkin up to be secure and it fuckn takes ages to log on, sometimes i have to type in the key to get on even though its saved in the settings, grrrr hate the dam thing! the price you have to pay to keep the bad people out of your pc!!

boomer
10th January 2008, 21:32
go to windows

click run...

type in
command

then type in
ipconfig

the number next to default gateway is your router/hub/switch address.

i.e.






C:\USERS\BOOMER>ipconfig

Windows IP Configuration


Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::d004:dbf6:......
IPv4 Address. . . . . . . . . . . : 10.1.1.4
Subnet Mask . . . . . . . . . . . : 255.0.0.0
Default Gateway . . . . . . . . . : 10.1.1.1

Tunnel adapter Local Area Connection* 6:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::5efe:10.1.......
Default Gateway . . . . . . . . . :Enigmas slow

Tunnel adapter Local Area Connection* 7:

Connection-specific DNS Suffix . :
IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e50:46f.........
Link-local IPv6 Address . . . . . : fe80::46f:29c...................
Default Gateway . . . . . . . . . : :DMNTD's a batty boy

C:\USERS\BOOMER>


now open your internet explorer and type in the address, as highlighted above.

i.e.

10.1.1.1

then press enter.


you should be able to find a tab/page/section that says 'wireless' settings

in here look for security like

Security: <input value="1" name="APSecurity" id="uiViewAPSecurity0" onclick="uiDoNone()" type="radio">None <input value="2" name="APSecurity" id="uiViewAPSecurity1" checked="checked" onclick="uiDoWEP()" type="radio">WEP <input value="2" name="APSecurity" id="uiViewAPSecurity2" onclick="uiDoWPA()" type="radio">WPA

i.e.


<table align="center" border="0" bordercolor="#000000" cellpadding="8" cellspacing="0" width="540"><tbody><tr><td class="tabdata" colspan="2" align="left" height="15"> These are the wireless settings for the AP(Access Point) Portion. </td> </tr> <tr> <td class="tabdata" align="right" height="15"> </td> <td class="tabdata" align="left"> <input value="on" name="APEnable" id="uiViewAPEnabled" onclick="uiDoAPEnable()" type="checkbox">Enable AP </td> </tr> <tr> <td class="tabdata" align="right" height="15"> SSID: </td> <td class="tabdata" align="left"> <input class="tabdata" name="SSIDName" id="uiViewSSID" type="text"> </td> </tr> <tr> <td class="tabdata" align="right" height="15"> Channel: </td> <td class="tabdata" align="left"> <select class="tabdata" name="Channel" id="uiViewChannel" onchange="uiChangeChannel(value)"> <option value="1">1 </option><option value="2">2 </option><option value="3">3 </option><option value="4">4 </option><option value="5">5 </option><option value="6">6 </option><option value="7">7 </option><option value="8">8 </option><option value="9">9 </option><option value="10">10 </option><option value="11">11 <script> var customer = ""; if (customer != "DLinkBR" && customer != "DLinkTM" && customer != "DLinkUS") { document.write("<option value=12>12"); document.write("<option value=13>13"); } </script></option><option value="12">12</option><option value="13">13 </option></select> </td> </tr> <tr> <td class="tabdata" align="right" height="15"> Security: </td> <td class="tabdata" align="left"> <input value="1" name="APSecurity" id="uiViewAPSecurity0" onclick="uiDoNone()" type="radio">None <input value="2" name="APSecurity" id="uiViewAPSecurity1" checked="checked" onclick="uiDoWEP()" type="radio">WEP <input value="2" name="APSecurity" id="uiViewAPSecurity2" onclick="uiDoWPA()" type="radio">WPA </td> </tr> <tr> <td colspan="2"> <table align="center" border="0" bordercolor="#000000" cellpadding="8" cellspacing="0" width="530"> <tbody><tr> <td class="tabdata" colspan="3" align="left"> <input value="on" id="uiViewWepEnabled" onclick="jslDoToggleCheckBox(id)" type="checkbox">Enable WEP Wireless Security </td> </tr> <tr> <td class="tabdata" colspan="3" align="left"> Authentication Type: <select class="tabdata" onchange="uiChangeAuthType(value)" id="uiViewAuthType"> <option value="0">Open</option> <option value="1">Shared</option> <option value="2">Both</option> </select> </td> </tr> <tr> <td class="newtabdata" width="30"> Select </td> <td class="newtabdata" width="450"> Encryption Key </td> <td class="newtabdata" width="50"> Cipher </td> </tr> <tr> <td class="newtabdata" width="30"> <input value="on" name="uiWEPSelect" id="uiViewKeyId0" onclick="jslDoToggleRadio('uiViewKeyId',0,4);uiDoSelectWepK eyId(0)" type="radio"> </td> <td class="newtabdata" width="450"> <input class="tabdata" size="50" maxlength="86" id="uiViewKeyValue1" type="text"> </td> <td class="newtabdata" width="50"> <select class="tabdata" id="uiViewKeyLen1" onchange='uiChangeKeyLen("uiPostKeyLen1",value)'> <option value="5">64 bits</option> <option value="13">128 bits</option> <option value="29">256 bits</option> </select> </td> </tr> <tr> <td class="newtabdata" width="30"> <input value="off" name="uiWEPSelect" id="uiViewKeyId1" onclick="jslDoToggleRadio('uiViewKeyId',1,4);uiDoSelectWepK eyId(1)" type="radio"> </td> <td class="newtabdata" width="450"> <input class="tabdata" size="50" maxlength="86" id="uiViewKeyValue2" type="text"> </td> <td class="newtabdata" width="50"> <select class="tabdata" id="uiViewKeyLen2" onchange='uiChangeKeyLen("uiPostKeyLen2",value)'> <option value="5">64 bits</option> <option value="13">128 bits</option> <option value="29">256 bits</option> </select> </td> </tr> <tr> <td class="newtabdata" width="30"> <input value="off" name="uiWEPSelect" id="uiViewKeyId2" onclick="jslDoToggleRadio('uiViewKeyId',2,4);uiDoSelectWepK eyId(2)" type="radio"> </td> <td class="newtabdata" width="450"> <input class="tabdata" size="50" maxlength="86" id="uiViewKeyValue3" type="text"> </td> <td class="newtabdata" width="50"> <select class="tabdata" id="uiViewKeyLen3" onchange='uiChangeKeyLen("uiPostKeyLen3",value)'> <option value="5">64 bits</option> <option value="13">128 bits</option> <option value="29">256 bits</option> </select> </td> </tr> <tr> <td class="newtabdata" width="30"> <input value="off" name="uiWEPSelect" id="uiViewKeyId3" onclick="jslDoToggleRadio('uiViewKeyId',3,4);uiDoSelectWepK eyId(3)" type="radio"> </td> <td class="newtabdata" width="450"> <input class="tabdata" size="50" maxlength="86" id="uiViewKeyValue4" type="text"> </td> <td class="newtabdata" width="50"> <select class="tabdata" id="uiViewKeyLen4" onchange='uiChangeKeyLen("uiPostKeyLen4",value)'> <option value="5">64 bits</option> <option value="13">128 bits</option> <option value="29">256 bits</option> </select> </td> </tr> <tr> <td class="tabdata" colspan="3" align="left"> Enter 10, 26, 58 hexadecimal digits(0~9,A~F) for 64, 128, or 256 bit Encryption</td></tr></tbody></table></td></tr></tbody></table>



Enable AP, type in a name for SSID ( network name for you) , allow security, enter a 64 bit password and you're done. Save, reboot. reboot ya wireless router/switch ...



done



you owe me :beer:

Dargor
10th January 2008, 22:51
Change the password, now your router is more secure than 95% of all routers. Anyone who wants to exploit a router will move on to one of the 95% and leave you alown.

bugjuice
10th January 2008, 23:04
if you change it, where will i get my free pron?





thought questions like this is what Google n company support sites were for..??

NighthawkNZ
10th January 2008, 23:07
if you change it, where will i get my free pron?

KB as normal... :lol:

Sanx
10th January 2008, 23:09
Buy a Netgear. Much easier.

But - do what Boomer said, with the exception of using WPA or WPA2 (sometimes shown as WPA-PSK) encryption instead of WEP. WEP can be cracked within about 30 seconds if someone wants to and has the right software.

The other thing you can do, generally as an extra precaution, is enable MAC address filtering. This restricts which computers can connect to the wireless network. Although this can also be broken, someone's going to have to be pretty dedicated and know what they're doing. Provided your Belkin router supports this security measure, you'll need to find out your MAC address (or network hardware address). To do this:

Start -> Run -> Enter cmd.exe and click OK.
At the command prompt, enter ipconfig /all then hit Enter.
You should see something like this:

Windows IP Configuration

Host Name . . . . . . . . . . . . : sanx
Primary Dns Suffix . . . . . . . : boomer.blows.goats.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8053 PCI-E Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-17-31-AF-8C-D1
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.106(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1
NetBIOS over Tcpip. . . . . . . . : Enabled

The bit in red bold text is your MAC address. You'll need to add that address into the router's configuration, and then do it for each computer that's connecting via the wireless network.

xwhatsit
11th January 2008, 00:07
No, it's already completely secure, don't worry about it at all.

By the way, you should get a higher bandwidth quota, I think you just hit your limit.

scracha
11th January 2008, 05:30
go to windows

you owe me :beer:

Choose WPA instead of WEP. As long as your password is over 14 characters then you don't need to change it every month as WPA is secure. MAC filtering and hidden SSID...don't bother. If someone knows how to crack the password then they'll know how to spoof a MAC address.

If it's a Belkin Mimo router then the coverage and stability are good but unfortunately the user interface is $hite.

Might be an idea to scan for other networks too (your neighbours). Most WiFi kit defaults to channel 6 so if there's a conflict then try channel 1 or 11.

Lias
11th January 2008, 08:09
MAC filtering and hidden SSID...don't bother. If someone knows how to crack the password then they'll know how to spoof a MAC address.


Unless you have shitty drivers (or it might be shitty vista) I cant force a manual MAC on my laptops wireless,d espite the drivers havin the functionality. Set a new MAC and it just wont work.. piece of shit!

-df-
11th January 2008, 09:52
as people have said, use WPA instead of WEP.

Also make sure you use a decent length non-alphabetical key otherwise it can still be cracked using a brute force attack within a few hours / days (and if its the people around you they'll have the time if they want to).


MAC filtering and hidden SSID...don't bother. If someone knows how to crack the password then they'll know how to spoof a MAC address.

Spot on.

Hoon
11th January 2008, 10:06
Yep another plug for WPA. WEP was compromised years ago and any script kiddie with a wireless laptop and a knopplix iso can crack your WEP password in 10 mins (bored nerds drive around neighbourhoods doing this for fun).

Change default router password.
Change default SSID (otherwise people can work out the brand of your router)
Set up WPA.

You'd be suprised how many SSID "linksys" wireless home networks are out there with the default admin password.

Lias
11th January 2008, 14:53
You guys should PM him all these tips or someit, rather than posting it publically.

As someone who makes extensive uses of open wirless routers I dont like so much info on securing them being public.

Hell everytime I go away to a motel or whatever its guranteed there is a free or crackable wirless in range. At work I use an open wirless site to avoid our net usage logging. etc.

My life would suck much more without open wifi :-P

boomer
11th January 2008, 17:07
ahahha funnily enough i use WEP not WPA.

Someone once told me; don't tell people EVERYTHING.. just tell them enough.


Bunch of feckin GEEKS..and i see that Sanx, Mr kadiver :laugh:

Hoon
11th January 2008, 20:02
Haha I have to use WEP too because the wireless card in my tivo doesn't support WPA. Hey WEP is better than nothing but if you have the option choose WPA.

Do as I say, not as I do :)

Rupe
11th January 2008, 21:31
thanks for everyones help. It's all secure as poss now.

Thanks

boomer
11th January 2008, 21:35
thanks for everyones help. It's all secure as poss now.

Thanks

so where's my

:beer:
bling

kids of today.. what a fookin liberty! I charge a 100 an hour for this shit and you just got it for free.

xgnr
11th January 2008, 21:43
You guys should PM him all these tips or someit, rather than posting it publically.

As someone who makes extensive uses of open wirless routers I dont like so much info on securing them being public.

Hell everytime I go away to a motel or whatever its guranteed there is a free or crackable wirless in range. At work I use an open wirless site to avoid our net usage logging. etc.

My life would suck much more without open wifi :-P

Is this theft?

Someone leaves the door unlocked... you help yourself to their "cash"... theft or not??

Lias
11th January 2008, 23:53
Is this theft?

Someone leaves the door unlocked... you help yourself to their "cash"... theft or not??

If the WAP is wide open, It's very much a legal grey area. In some parts of the world there is specific legislation against it, but none here afaik. There are a surprising large amount of generally free WAP's (especially in the US), but I supsect the majority in nz are clueless uers.

Cracking WEP and using it would be illegal in NZ i believe thou.