"Lorenzo Sandini" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
>
> I just changed my old trusty D-Link DGL-4300 router for a DIR-655, that
> uses the 802.11n draft technology. Almost all my computers are wired, but
> I need that wireless link for a couple of them. I fitted those machines
> with D-Link 802.11n NICS (one PCI and one Cardbus), so WPA2 will be used.
>
> Unfortunately, I have to keep a DWL-650G (108Mbps) in one machine, forcing
> me to use WPA too. The router negotiates WPA2 with machines that can, and
> falls back to WPA for the machine that cannot do WPA2.
>
> MAC address filtering is enabled, SSID hidden and changed on an irregular
> basis. Call me paranoid, but what is the possibility that someone
> intercepts packets in the air and cracks my key ? Finds a MAC address for
> one connected machine and uses it on his laptop to associate with the
> router ?
>
> Not that I have something to hide, or that any of my computers contains
> anything precious, but I know too much about WLAN insecurity to feel safe.
>
> Thanks
>
> Lorenzo
To add to Barb's comments both MAC Address authentication and cloaking your
SSID broadcast are not considered viable security measures. Cloaking the
SSID broadcast can also lead to connectivity issues for some clients. Both
are easily discovered. You may be interested in this article...
http://blogs.zdnet.com/Ou/?p=454
The key to real security is using strong encryption and a long random key.
Personally I use a 63-character random ASCII key. Here are two key
generators that you might be interested in.
http://www.kurtm.net/wpa-pskgen/
https://www.grc.com/passwords.htm
My WiFi security recommendations...
http://theillustratednetwork.mvps.or...sSecurity.html
--
Al Jarvi (MS-MVP Windows Networking)
Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program -
http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...