On Sat, 21 Jun 2008 12:02:18 -0400, "Les"
<(E-Mail Removed)> wrote:
>Thanks for the advise. I have read that WPA is much better, so I was
>surprised that Linksys had me use WEP..
>
>When I go on the internet vis my brouser to the site to make any chnages, in
>addition to WEP, I see 2 different WPA choices - WPA Pre-shared key and WPA
>RADIUS. What is the difference, and which one is preferable? (I am
>surprised that there is no just WPA".
Actually, you have a few more decisions to make.
Your choices are:
WPA PSK (pre-shared key) with TKIP encryption
WPA2 PSK (pre-shared key) with TKIP encryption
WPA2 PSK (pre-shared key) with AES encryption
WPA-PSK is also known as WPA personal depending on whether your
religion follows the IEEE or the Wi-Fi Alliance religion.
WPA-RADIUS is also known as WPA-Enterprise, again according to your
religious preferences. It requires a RADIUS server or RADIUS service
provider. See the FAQ at:
<http://wireless.navas.us/wiki/Wi-Fi_How_To#WPA.2FWPA2>
(note the new URL). The only service I've tried is:
<http://www.linksys.com/wirelessguard/>
which runs on limited hardware and was a bit overpriced.
I've considered throwing together a stand along RADIUS server to do
the same thing, but the minimum sales price came out far too high.
Some wireless routers have RADIUS servers built in.
Why go through all this trouble for RADIUS? Well, a RADIUS server
provides:
1. A login and password unique to each user.
2. No shared key that can be leaked.
3. A unique encryption key that is only used once per session.
4. Authentication (X.509).
That's good enough unless you wanna add a VPN (virtual private
network) or build an NAC (Network Access Control) system:
<http://en.wikipedia.org/wiki/Network_Access_Control>
I recommend WPA2-PSK-TKIP for home systems. No particular reason
other than there seem to fewer buggy drivers for TKIP than for AES.
--
# Jeff Liebermann 150 Felker St #D Santa Cruz CA 95060
# 831-336-2558
(E-Mail Removed)
#
http://802.11junk.com (E-Mail Removed)
#
http://www.LearnByDestroying.com AE6KS