How Secure is a wireless router?

[crazyoildude]

At the shop we are thinking of installing a wireless router so we can use the laptop all over the shop. We are planning to get the D-Link N300 DIR-615 router. We are going to password protect it. I just wanted to know how secure the connection is. I don't want anyone stealing my signal, or scanning my computers for information, or snooping around in any way. Also, will it interfere with my office desktop internet connection? Any information I can get I would greatly appreciated. I have internet through my cable provider
Thank you.

 

[aquariuscsm]

Be sure to password-protect the internet access with it.

 

[beast3300]

Use WPA2 with a password, it is very hard to crack unless the other person knows what they are doing. I would recommend a Linksys product over D-link. No, it won't affect your desktop connection unless somebody is on wifi downloading a movie etc.

 

[mongo161]

Instead of WPA2, I've noticed an increased interest in "Wireless N" routers used now in homes and small businesses for security reasons????

I don't know how much better protected you would be with Wireless N vs WPA2. I do know that there is an adapter that plugs into USB port for the connection to your laptops on the system/router.

Maybe someone else can chime in on the Pros's vs Con's of Wireless N vs WPA2????????

 

[Colt45ws]

They are two separate things. Wireless-N is a specification relating to the speed of the connection. WPA2 relates to the security scheme. It does not matter if you are running Wireless-G or Wireless-N the best security is WPA2-AES with a good long random pass.

 

[OVERKILL]

I've got a setup at a local truck shop (International) with a few clustered Cisco AP541N's. I would suggest looking at something a little more robust than a D-Link device if this is for business use.

Use WPA2 security with a STRONG passphrase. That means alpha-numeric + ascii ($,!,%....etc) and LONG.

 

[Brons2]

WPA2 and Wireless N are two different things.

WPA2 is an encryption scheme, commonly used on consumer level routers with a passphrase.

Wireless N is a protocol subset of the 802.11 networking standard. In this case, it basically describes performance level it is capable of. 802.11b is 11Megabits per second max theoretical throughput, 802.11a and 802.11g have a 54Megabits per second max theoretical throughput, and 802.11N has a 150, 300 or higher max theoretical throughput.

The current standard is 802.11n for throughput, and WPA2 for security. WPA2 should be available on most 802.11g and 802.11n routers. 802.11n or "Wireless N" routers are what should be purchased nowadays, 802.11g is becoming obsolete.

 

[SOHCman]

Don't make the pass your address.

 

[Brons2]

Originally Posted By: OVERK1LL
I've got a setup at a local truck shop (International) with a few clustered Cisco AP541N's. I would suggest looking at something a little more robust than a D-Link device if this is for business use.

Use WPA2 security with a STRONG passphrase. That means alpha-numeric + ascii ($,!,%....etc) and LONG.


I think a Cisco setup would be a bit overkill for someone who just wants to walk around with their laptop. Don't get me wrong, I like and I use Cisco gear, but you're getting into a whole other class of expensive when you're talking about a d-link versus a clustered Cisco setup.

 

[punisher]

You need to be made aware that WPS encryption has been recently cracked. Any router with WPS enabled can be cracked as quickly as WEP, maybe easier. If you get a router, make sure WPS can be disabled during setup. Some manufacturers are releasing updated firmware to fix/allow WPS to be disabled.

 

[Nyquist]

Two added layers of security are to hide the SSID of the wireless network and use MAC filtering. I use those along with an alphanumeric WPA2 passphrase.

 

[2004tdigls]

Originally Posted By: Nyquist
Two added layers of security are to hide the SSID of the wireless network and use MAC filtering. I use those along with an alphanumeric WPA2 passphrase.


mac filters and hide ssid are useless and a nuisance to a hacker

http://www.zdnet.com/blog/ou/the-six-dumbest-ways-to-secure-a-wireless-lan/43


use wpa2, have a COMPLEX password with the maximum length permitted by your router (often 64 characters)

mac addresses can be changed easily, right click on your nic card and choose properties, then enter the stolen mac, its that easy

http://en.wikipedia.org/wiki/Wireless_security

 

[OVERKILL]

Originally Posted By: Brons2
Originally Posted By: OVERK1LL
I've got a setup at a local truck shop (International) with a few clustered Cisco AP541N's. I would suggest looking at something a little more robust than a D-Link device if this is for business use.

Use WPA2 security with a STRONG passphrase. That means alpha-numeric + ascii ($,!,%....etc) and LONG.


I think a Cisco setup would be a bit overkill for someone who just wants to walk around with their laptop. Don't get me wrong, I like and I use Cisco gear, but you're getting into a whole other class of expensive when you're talking about a d-link versus a clustered Cisco setup.


Well in my defence, these are "Small Business" series AP's, I have one at home

But yes, they are in a different price bracket than the D-link stuff.

 

[OVERKILL]

Originally Posted By: 2004tdigls
Originally Posted By: Nyquist
Two added layers of security are to hide the SSID of the wireless network and use MAC filtering. I use those along with an alphanumeric WPA2 passphrase.


mac filters and hide ssid are useless and a nuisance to a hacker

http://www.zdnet.com/blog/ou/the-six-dumbest-ways-to-secure-a-wireless-lan/43


use wpa2, have a COMPLEX password with the maximum length permitted by your router (often 64 characters)

mac addresses can be changed easily, right click on your nic card and choose properties, then enter the stolen mac, its that easy

http://en.wikipedia.org/wiki/Wireless_security


EXACTLY. The above quoted items just give the illusion of increased security.

 

[2004tdigls]

lol, and as you know, the mac address is easily captured if you use a traffic monitor like air-snort, some nics even allow cloning

i still cant believe that routers even have mac filters and ssid hiding as options in the firmware

its like having mammary glands on a boar

 

[zyxelenator]

With good password encryption and non dictionary pass it will take forever to crack it. Mac filter is just a second barrier. So you can sleep well.

 

[OVERKILL]

Originally Posted By: 2004tdigls
lol, and as you know, the mac address is easily captured if you use a traffic monitor like air-snort, some nics even allow cloning

i still cant believe that routers even have mac filters and ssid hiding as options in the firmware

its like having mammary glands on a boar


Yup, agreed completely.

 

[UncleS2]

I bought that exact model(DIR-615) & it has worked flawlessly since day one, only took a few minutes to get it up & running. It hasn't interfered with my desktop inet connection, & allows me to use my tablet(Nook Color) even when the desktop computer is turned off. It should be as secure as any other WPA2 protected device.

 

[buickman50401]

Originally Posted By: Colt45ws
They are two separate things. Wireless-N is a specification relating to the speed of the connection. WPA2 relates to the security scheme. It does not matter if you are running Wireless-G or Wireless-N the best security is WPA2-AES with a good long random pass.


If you're hardware is too old to support WPA2, WPA-AES is almost as good as WPA2-AES, so OP watch out for that. Though it shouldn't be a problem if the hardware is less then 4 years old.

My network is still running on WPA-AES because I've got an old laptop from 2005 that doesn't support WPA2.

OP, also do yourself a favor and download Netsurveyor.

http://nutsaboutnets.com/netsurveyor-wifi-scanner/

That way you can analyze signal strength and quality from whatever router you get as well as see who else is broadcasting in the area and select a channel that no one else is using. It will help you identify any dead or weak signal spots you might have.

 

[crazyoildude]

I am not great with computers so this stuff is over my head, i do have someone here that is good with this stuff but not really an expert so that is why i am asking... So generally does this thing help my computer and online security or will it hurt it?
And what about when we close and it is off? And danger or benefit there?
Is there anything else i can use to protect my web surfing and pc?
Someone said an encriptor which scrambles everything that is in the pc or something like that..
I dont really have anything important except customer information and a few other things i dont do banking or put any real personal information in