Introduction to Security Configuration method of wireless router

As more and more users choose wireless networks to improve their mobility, the safety of wireless networks is also starting to get a lot of attention. It can be said that wireless is more difficult to protect than a wired network, because the number of fixed physical access points in a wired network is limited, and any point that a signal can achieve in a wireless network can be used.

At present, the major brand manufacturers in the wireless router configuration design has increased the key, the prohibition of SSID broadcast and other means to ensure the safety of wireless networks.

Set Network key

Wireless Encryption Protocol (WEP) is a standard method of encrypting data transmitted in a wireless network. At present, wireless routers or AP key types are generally two, 64-bit and 128-bit encryption type, they need to enter 10 or 26 strings as the encryption password. Many wireless routers or AP at the factory, data transmission encryption function is turned off, must be configured when the wireless router manually open.

Disable SSID Broadcast

Typically, the same SSID is used by the same manufacturer's wireless router or AP, and if an attacker who attempts an illegal connection uses a generic initialization string to connect to the wireless network, it is easy to establish an illegal connection that poses a threat to our wireless network. Therefore, it is advisable for you to name the SSID as some of the more personalized names.

Wireless routers generally provide the "Allow SSID Broadcast" feature. If you don't want your wireless network to be searched by the SSID name, it's best to "ban SSID broadcasts." Your wireless network can still be used, but it will not appear in the list of available networks that others have searched for.

By prohibiting the SSID broadcast settings, the efficiency of the wireless network will be affected, but in exchange for security improvement, I think it is worthwhile.

Disable DHCP

The DHCP feature automatically assigns IP addresses to each computer in a wireless LAN, without requiring the user to set the IP address, subnet mask, and other required TCP/IP parameters. If DHCP is enabled, it is easy for others to use your wireless network. Therefore, disabling the DHCP feature is necessary for wireless networks. Set the DHCP server to not enabled under the DHCP server settings for the wireless router.

Enable MAC address, IP address filtering

When you enable MAC address filtering in wireless router settings, be aware that you must select the option "Allow only MAC addresses that have been set up in the MAC address list to access wireless networks" in the filter rules.

In addition, if DHCP is disabled in a wireless LAN, it is recommended that you set a fixed IP address for each computer that uses wireless services and then enter these IP addresses into the IP address allow list. When IP address filtering is enabled for the wireless router, only the users of the IP address in the list will be able to access the network normally, and others will not have access.