Sometime before 03 Dec 2003, gary stated:
>
> "John Shirley" <(E-Mail Removed)> wrote in message
> news:Xns9446449B0C48Besthermofetcomcastne@216.196. 97.136...
>> Sometime before 03 Dec 2003, Pawel stated:
>>
>> > The situation takes place in block of flats. I'd like to have
>> > following configuration: from my ISP I have Internet in a UTP-5
>> > cable. It's connected to hub which is located neer entrance door. To
>> > this hub there are connected other cables which goes out of my flat
>> > to other users I share connection with. Also from this hub there is
>> > a cable to my computer which works as a router. This is done. I'd
>> > like to echcange this inner (in my flat) part of network into
>> > wireless one to avoid putting cables and sockets into each room.
>> > What parts (kind) should I use? Do I need AP?
>> >
>> > Paul
>> >
>> >
>>
>> The cheap and risky way: You'll need a wireless card for each
>> computer you want to use and a wireless access point. Plug the AP
>> (access point) into the hub and the wireless card into your
>> computer... surf away with great risk to security and the possibility
>> of having your wireless AP hijacked.
>>
>> The secure way would involve this:
>>
>> - A wireless access point
>>
>> - A wireless card for each computer as desired
>>
>> - A dedicated firewall device or firewall computer
>>
>> - A crossover cable
>>
>> - If you use a dedicated firewall computer, then you'll also need
>>
>> - two network cards in it
>>
>> - firewall software--Windows XP has the software built in
>>
>> If you're doing the firewall-only route, plug the appropriate port
>> directly into the shared hub with a standard cable then use the
>> crossover cable to plug the firewall into the AP.
>>
>> Same kind of thing with the firewall server machine, but you'll need
>> to actually enable the firewall on the outside NIC. THe benefit of
>> using the dedicated machine is that you can properly do configurations
>> and firmware updates on the wireless AP (and it will need it). Can't
>> do firmware updates over the wireless connection on most wireless APs.
>
> He says he has only one host in his flat. He can run the firewall on
> the host itself - and I do agree that he should. He only needs one
> wireless NIC and an AP. To configure the AP, just connect an Ethernet
> cable from the host when needed - bypass the wifi.
>
> That said, I think he should pop for a router. This will provide more
> flexibility for the future, if he adds any hosts, for example.
>
>>
>>
>> --
>> John Shirley
>> Remove SPAM SUCKS to E-mail
>
>
No, he said that there's a shared hub that goes out to everybody else. That
means that anybody connected to it can see the rest of the machines on it.
It would be unwise to just plug an AP directly into that hub (or even to
plug a computer without a firewall directly into it) because the AP's
ethernet connection will be visible and hackable.
I can't count the number of times that I've had to go to a job site or
somebody's home or somebody's business to fix an insecure ad hoc network job
installed by some joker who knew "all about computers" or knew "all about
networks". I've also spent more than a fair amount of time repairing the
damage caused by not locking a network down properly.
Fine, convince him that it's okay to do it the cheap way; save him a bit of
money now. Somebody like me will eventully have to fix it at a higher
charge after it gets hacked or falls apart because of poor planning.
--
John Shirley
Remove SPAM SUCKS to E-mail
|