With the growth of wireless networking a very common question we hear is “How should I secure my WLAN?”<\/p>\n
Well as I said in my last post, “It Depends”<\/p>\n
What are you looking to do? Do you have administrative control of the devices that are going to be on the network? Do you have AAA, want to implement one, what about PKI? Oh and my favorite question, is your LAN secure?<\/p>\n
Don’t get me wrong, I love a well oiled EAP-TLS environment (PKI is required here folks it is not an option) . But if I can walk in and connect my laptop to the LAN and get access to your network, what’s the point in securing the wireless?<\/p>\n
I am by no means saying that you should have a completely open wireless network. Except for guest, that needs to be open and ACL to high heaven to just have internet access. You need to have a secured wireless network, encryption at a minimum.<\/p>\n
So notice I said encryption at a minimum.<\/p>\n
WEP<\/span> TKIP and AES-CCMP are encryptions. PSK or even better 802.1X are authentications. So decide how much you want to invest in your security, PSK minimal, TLS high. And remember to secure all your layer 1.<\/p>\n","protected":false},"excerpt":{"rendered":" With the growth of wireless networking a very common question we hear is “How should I secure my WLAN?” Well as I said in my last post, “It Depends” What are you looking to do? Do you have administrative control of the devices that are going to be on the network? Do you have AAA, … Continue reading “Secure Wireless…Why?”<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-70","post","type-post","status-publish","format-standard","hentry","category-wireless"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"http:\/\/www.wifijanitor.com\/index.php?rest_route=\/wp\/v2\/posts\/70","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.wifijanitor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.wifijanitor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.wifijanitor.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.wifijanitor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=70"}],"version-history":[{"count":0,"href":"http:\/\/www.wifijanitor.com\/index.php?rest_route=\/wp\/v2\/posts\/70\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.wifijanitor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=70"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.wifijanitor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=70"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.wifijanitor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=70"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nPSK is a shared key. Think of this like the password to your clubhouse as a kid. It could be overheard and anyone could have it.
\n802.1X uses either credentials (usually domain) or certificates (PKI). Everyone has been trained to not share their domain login.<\/p>\n