wireless network and security

  • Thread starter Thread starter Brian Blinderman
  • Start date Start date
B

Brian Blinderman

I am going to set up a wireless network between my desktop and my laptop.
The network will be connected to the internet via a hub. I get on the
internet with a cable modem, therefore my computers will be assigned dynamic
IP addresses. My question is how best to maintain security. I realize that
if I had static addresses, I would be able to set my Norton firewall to
allow a specific IP address through. I also realize that if I used Internet
connection sharing, I would have more security. My questions are; can I
still use internet connection sharing if I configure my wireless network
with a hub? If yes, how? If this is not possible, are there other firewalls
that will allow me to be protected but yet still allow the machines to share
data? Any suggestions are appreciated
 
"Brian Blinderman" said:
I am going to set up a wireless network between my desktop and my laptop.
The network will be connected to the internet via a hub. I get on the
internet with a cable modem, therefore my computers will be assigned dynamic
IP addresses. My question is how best to maintain security. I realize that
if I had static addresses, I would be able to set my Norton firewall to
allow a specific IP address through. I also realize that if I used Internet
connection sharing, I would have more security. My questions are; can I
still use internet connection sharing if I configure my wireless network
with a hub? If yes, how? If this is not possible, are there other firewalls
that will allow me to be protected but yet still allow the machines to share
data? Any suggestions are appreciated
Click to expand...

Wireless networks have some security concerns that wired network
don't. At a minimum, enable WEP encryption on the network. See Barb
Bowman's article for more information:

Securing SOHO Wireless Residential LANS
http://www.microsoft.com/windowsxp/expertzone/columns/bowman/december03.asp

Both wired and wireless have security concerns when the computers get
public IP addresses from a cable modem, like yours. Without proper
setup, other Internet users might be able to access your network.

One solution is to install the IPX/SPX protocol for file sharing and
to disable file sharing on TCP/IP. I've written a web page showing
how to do it:

Windows XP Network Protocols
http://www.practicallynetworked.com/sharing/xp/network_protocols.htm

Another solution is to get a wireless broadband router and connect the
cable modem to its WAN port. In that case:

1. You'd only need to get one IP address from your cable modem
provider, which would save you money if your ISP charges a monthly fee
for more than one IP address.

2. The winless broadband router would assign private IP addresses to
your computers. Private IP addresses aren't accessible by other
Internet users, so your network would be safe.

3. You could use TCP/IP as the only network protocol, with no need for
IPX/SPX.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
"Brian Blinderman" said:
When I plug my cable modem into the WAN port of the Linksys wireless router,
the router then assigns static IP addresses to the computers? I may not be
understanding something. Is there more than one way of using the wireless
router?
Click to expand...

A wireless router includes a DHCP server that assigns dynamic IP
addresses to the computers. Dynamic IP addresses can change each time
that a computer boots.

Only you can assign static IP addresses to your computers. Static IP
addresses always stay the same.

Why do you ask?
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
Brian said:
In your response to my original post you stated, "Another solution is to
get a wireless broadband router and connect the cable modem to its WAN
port." Is this wireless broadband router different from the linksys
wireless router that I am purchasing? If the linksys wireless router is a
broadband router, can I set up the linksys in a way to make my network
secure?
Click to expand...

Network security is not absolute. That Linksys router supplies the
first level of inbound security, via NAT, automatically. Next,
you should enable WEP (128-bit if your PCs support it), and change
the WEP key periodically (monthly for light home use, weekly for
heavy use). Also, I suggest running an outbound firewall, such
as one of the ZoneAlarm (www.zonelabs.com) products; and running
a spyware monitor, such as AdAware (www.lavasoft.de). Each of those
four elements does something different.
 
Back
Top