Security Basics mailing list archives

Wireless security without Radius Server


From: "Mears,Caleb M" <Caleb.M.Mears () business colostate edu>
Date: Fri, 6 Jun 2003 14:24:14 -0600

Hey All,

 

Thanks everyone for your feedback regarding the biometrics.  I'm still waiting to hear back from a couple of vendors 
but the products from Identix look like they'll work for our organization.  In the interim we are reassessing our 
wireless network.  So far we've left it pretty open because we're an educational institution and have many guests that 
frequent our location.  Now I am trying to solve the impossible problem of balancing security with accessibility.  We 
have a couple dozen Cisco Aironet 1200 series access points throughout our building and I'm wondering what the best way 
to secure our network is.  Initially I planned on setting up 128 bit WEP with broadcasted rotating keys but we will 
need a RADIUS server to do that and we do not have the resources to set one up.  Compatibility is a must because many 
of our guests come in with everything from laptops to handheld pcs including Palms and PocketPCs.  Therefore, I ruled 
out MIC and I'm wondering if most clients support Temporary Key Integrity Protocol (TKIP) or if that is still not 
wide-spread.  So far Publicly Secure Packet Forwarding (PSPF) looks like our best option besides 128 bit WEP with 
non-rotating keys.  I am still fairly new to wireless technology so I may be missing something obvious.  Thanks again.

 

Caleb Mears


Current thread: