RE: Wireless access

["Rosado, Rafael (Rafael)" <rarosado () lucent com>]

Michel:

Couple of things to recommend your enduser on their own access point:

1. Change the SSID to a unique one (combination of letters, numbers and
special characters)
2. Disable boradcasting of SSID (the client will need to specifically
transmit the specific SSID instead of the access point/router beaconing the
SSID)
3. Enable MAC filtering (in the access point, enter in the MAC filtering
table the MAC address of the client card - WLAN NIC/PCMCIA card)
4. Establish 128 bit+ encryption (in his case, with the Dlink 614+ he can go
up to 256 bit encryption).

Go to - http://www.dlink.com/products/?pid=20 for more information on his
wireless AP.

Good Luck!

Rafael Rosado, CISSP, CISA
Network Security Manager
Lucent Technologies
IT Infrastructure - Network Design
2400 SW 145th Avenue 
Miramar, Florida 33027 
Office: 954-885-2176 
Facsimile: 954-885-3861 
Email: rarosado () lucent com 

This electronic mail message contains information belonging to Lucent
Technologies, which may be confidential and/or legal privileged. The
information is intended only for the use of the individual or entity named
above. If you are not the intended recipient, you are hereby notified that
any disclosure, printing, copying, distribution, or the taking of any action
in reliance on the contents of this electronically mailed information is
strictly prohibited. If you receive this message in error, please
immediately notify us by electronic mail and delete this message.

-----Original Message-----
From: Bruyere, Michel [mailto:mbruyere () ezemcanada com] 
Sent: Thursday, March 25, 2004 8:36 AM
To: security-basics () securityfocus com
Subject: Wireless access

Hi, 
        I have a user who uses a wireless network at home. He just asked me
(it's a director) to find a way to avoid his laptop (Toshiba tecra running
XP Pro) connecting on the neighbor's router instead of his. He has a D-Link
614+, I don't know this model at all so I'm asking you guys if you know 
614+a
way to restrict his laptop to only HIS router.

As you can see, I'm not very familiar with Wireless :/

Thanks for any inputs

M.Bruyere
Network/systems administrator
CompTIA A+, Network+


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the
skills of an Ethical Hacker to better assess the security of your
organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------