Five basic points of wireless network security settings

If someone asks if you have wireless network settings, I think everyone will be very confident, but what if you want to set up to improve network security? I think this is not what everyone will do. I will introduce it to you in detail here.

Q: due to business needs, the leader needs to set up WLAN and AP in the conference room. However, I recently found that some unknown computers have accessed our resources and I do not know how to prohibit unauthorized personnel from connecting to our WLAN.

A: According to your description, your AP has never done any security settings. The following are some AP Security Settings. For more information, see.

Wireless Network Security Settings 1. Modify the default user name and password for AP Management

Avoid malicious users and modify AP security settings.

Wireless Network Security Settings 2. Disable SSID Broadcast

Each AP has its own SSID. When multiple APS exist at the same time, the client can present the correct SSID to use the AP. However, for ease of use, most of the current APS broadcast the SSID, that is, the SSID working mode is ANY, so that anyone can see the SSID of this AP and choose to use it. Therefore, you can choose not to broadcast the SSID and only tell the user who needs to use the SSID.

Wireless Network Security Settings 3. use WEP Encryption

The user's encryption key must be the same as the AP's key before it can be connected to the AP. This setting is available for the Windows Wireless Network Card Management software or the management software that comes with the network card. WEP provides a 40-bit, 64-bit, and 128-bit key mechanism. One AP can set multiple WEP passwords. Its disadvantage is that when multiple users share a set of passwords, the passwords are static and need to be manually maintained to ensure their security.

Wireless Network Security Settings 4. MAC Address binding

Each wireless network card has its own unique physical address, that is, the MAC address. Generally, the manufacturer will provide an identifier on the NIC. You can also enter ipconfig/all on the DOS interface under windpws to view the Physical Address (Physical Address) of all NICs on the local machine, that is, the MAC Address. The administrator can manually set the MAC address that is allowed to access the AP on the AP management interface. However, this method is "stupid ", before use, you must manually add the authorized user's MAC address to the license list. the MAC address that is not in the license list is not accepted by the AP. If you do not want a user to access it after use, you must manually delete the user's MAC address from the list, and the MAC address can be forged theoretically. This method is only suitable for small WLAN and users need to be relatively fixed.

Wireless Network Security Settings 5. The most foolproof method

This method is the simplest and most effective. When WLAN is idle, some wireless routers can shield wireless signal transmission, or directly cut off the AP power.

To sum up, the best way is to combine the above items. In addition, it is important to cultivate user security awareness. WLAN users do not disclose SSID and WEP keys, and do not set up APS on the LAN. In fact, WLAN security settings are far more than this, but I believe that the above methods should be sufficient for your unit's WLAN usage.