WAP54G & Security

Hello. I recently purchased two Linksys WAP54G access points. My plan
was to use them and IPSec to bridge two wired networks together.

The problem is that the access points are unsecure when they are first
powered on.

My question: If I removed the antennas and configured the access point
using the wired connection, is there any chance of someone on the
wireless side hijacking my access points?

TIA

> using the wired connection, is there any chance of someone on the
> wireless side hijacking my access points?

Do I understand that you're worried about the possiblity of someone
configuring the AP in the time between when you get it out of the box
new, and the time you configure it?

"Phlip Wards" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) m...
> Hello. I recently purchased two Linksys WAP54G access points. My plan
> was to use them and IPSec to bridge two wired networks together.
>
> The problem is that the access points are unsecure when they are first
> powered on.
>
> My question: If I removed the antennas and configured the access point
> using the wired connection, is there any chance of someone on the
> wireless side hijacking my access points?
>
> TIA

Are we being paranoid today????

that's funny

i suppose you could configure it via crossover cable to a 'clean'
laptop you then scrape when done.... for the 2 minutes it takes to
wep-ify it. and the other 2 minutes to turn on ipsec on your
router/servers.


On Fri, 4 Jul 2003 06:44:54 -0500, "Somebody Somewhere"
<(E-Mail Removed)> wrote:

>
>"Phlip Wards" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed) om...
>> Hello. I recently purchased two Linksys WAP54G access points. My plan
>> was to use them and IPSec to bridge two wired networks together.
>>
>> The problem is that the access points are unsecure when they are first
>> powered on.
>>
>> My question: If I removed the antennas and configured the access point
>> using the wired connection, is there any chance of someone on the
>> wireless side hijacking my access points?
>>
>> TIA
>
>Are we being paranoid today????
>
>

> laptop you then scrape when done.... for the 2 minutes it takes to
> wep-ify it. and the other 2 minutes to turn on ipsec on your
> router/servers.

Ah but there's always that small moment of opportunity!

I reckon the best solution is to:-

a) open the unit up and desolder the transmitting bits

b) drive to a completely unpopulated area with nobody around for 20
miles radius

c) build a 2m thick concrete walled structure (including roof)

d) wallpaper it with aluminium foil

e) configure the AP

f) resolder on the previously removed circuitry

David.

> You forgot to say this should only be done under a full moon....

My bad!

Joey <(E-Mail Removed)> wrote in message news:<(E-Mail Removed)>. ..
> You could take off the antennas and put the AP in a small faraday
> cage.... configure and reboot it with a script in under 2 seconds.
>
> Or better yet, ask Linksys to configure it for you before they ship
> it.

Even better. I could get a wireless bridge that isn't active and has
to be configured from a wired network. Any ideas?

David Taylor <(E-Mail Removed)> wrote in message news:<(E-Mail Removed)>. ..
> > You forgot to say this should only be done under a full moon....
>
> My bad!

Am I being overly paranoid? Is there a better way to do bridge two
wired LANs wirelessly? Should I be looking into a different product?

> Am I being overly paranoid? Is there a better way to do bridge two

To be honest, yes I think you're being incredibly ridiculously paranoid.
It takes about 2 minutes to configure the password from the time the
unit is turned on.

What do you estimate the probability to be that there is someone just
waiting outside your premises, with a suitable antenna, aligned in the
right direction, with a laptop powered up, with all the right tools,
just waiting to intercept your password in that 2-5 minute window?

I think it is statistically negligible - UNLESS you're a particular
member of society that has your countries security departments paying a
peculiar interest in your activities. If that's the case, then i think
you'd have other issues that setting a secure password on a WiFi product

> wired LANs wirelessly? Should I be looking into a different product?

I don't know, until you provide a bit of info as to what your
circumstances are.

David.

David Taylor <(E-Mail Removed)> wrote in message news:<(E-Mail Removed)>. ..
> > Am I being overly paranoid? Is there a better way to do bridge two
>
> To be honest, yes I think you're being incredibly ridiculously paranoid.
> It takes about 2 minutes to configure the password from the time the
> unit is turned on.
>
> What do you estimate the probability to be that there is someone just
> waiting outside your premises, with a suitable antenna, aligned in the
> right direction, with a laptop powered up, with all the right tools,
> just waiting to intercept your password in that 2-5 minute window?
>
> I think it is statistically negligible - UNLESS you're a particular
> member of society that has your countries security departments paying a
> peculiar interest in your activities. If that's the case, then i think
> you'd have other issues that setting a secure password on a WiFi product
>
> > wired LANs wirelessly? Should I be looking into a different product?
>
> I don't know, until you provide a bit of info as to what your
> circumstances are.
>
> David.

I'm the admin of a software company. My boss wants me to put in some
sort of off-site server mirroring system in place to augment our
existing tape backup. I had originally tried to use the Internet
(cable modem on both ends) and IPSec to bridge the two wired networks
together, but performance is slow.

I decided to try wireless. Since we work with a lot of client data
(CRM stuff), I need to make sure I have a relatively secure system.

I don't have a lot of resources at my disposal, so I have to do this
low cost.

Was Linksys the wrong way to go? Should I have gotten something from
Netgear or some other vendor?