How to make my wireless home network more secure?

So I finally connected my sons desktop and my desktop wirelessly at home.
I received my Linksys bundle from Newegg yesterday and hooked it up last nite.
Not as difficult as I tought but not sure if I did everythign right for making it secure.

I have the Linksys WRT54GS v4 (wow I got lucky at Newegg, I heard bad rap on v4 of these models) and the accompanying USB wireless router that came with the bundle.
(I got the WKUSB54GS package from Newegg which came with teh above items)

I have my Home Desktop, that i am slowly turning into a HTPC, connected to the Router via direct cable link wired.
I have my son's desktop connected via the USB Wireless router.
I am still waiting for my laptop to arrive this monday but so far both systems are connected to the net.

I am still also in the process of trying to make it so all 3 PC can share files/printer/etc but thats another post I will have to reread.

I am just wondering if there are other things I can do to make my whole Wireless Home network Secure?
This is th 1st time I have ever put a wireless network or any network together.

All I did is follow the directions that was included in the CD for the router and adapter.

I also heard WEP is best security and not sure if I did that or how to do it.
So anyone have any suggestions?

 

First, change the name of the router. Make it something unique. Second, turn on the highest level of security you can. For me, it is WPA/TKIP but I'm sure the newer Linksys routers use higher security. Disable broadcasting the SSID. Choose a unique SSID and a very long, random password for the key.

If you've got a few hundred thousand bucks laying around, you could buy a nice encryption device for each end of the router.....

 

How do I get access to this?
Do I do this via Control Panel or run the Disc I had to use to setup?
I think I did see WPN/TKIP soemtime while I was putting the thing together, just not sure where.
It did state soemthing about WPA in teh product pag in Newegg here:
http://www.newegg.com/Product/Product.asp?Item=N82E16833124177
And the Router itself is a WRT54GS v4.

And once I setup the Rouetr w/ my desktop on it, do I need to do anything with my sons desktop that has the USB wireless adapter?

Uhm, I really do not think this is happening

 

this is what you want to do (some of this is redundant from the above post)...

1. disable SSID broadcast
2. enable the highest level of encryption you can
3. use random numbers, letters, symbols for your password
4. limit access to all computers except the ones you "allow" and then only "allow" your own computers; do this for LAN and WWW access
5. disable dynamic IP addressing

you can do all or some of the above, depending on your paranoia level

 

How do I Disallow other computers and only allow my 3 PCs?
Not sure exactly how to do this and here to start.

But I think I found an answer in the Linksys website.
http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=759

I did soemhow went thru the "Buil a Home or Office network" last nite tryign to figure stuff out.
Can anyone tell me how to disable whatever I may have made?
I did see a Shared Folder made, do I just need to delete that to reset it all? and also delete the workgroup I made?

 

All of those things are done on the router. Unless things have changed, access your Linksys router from the computer that is physically connected via your browser at 192.168.1.1. There's a default password for your router, which should be in the quick setup guide that came with your router. Look under wireless security. Remember that the security settings only apply to the computers that connect wirelessly.

You don't have to delete any folders you have shared out.

 

yes, you need to read your user manual, it should all be in there.

 

The bundle only came with the Wireless Router, ISB Wireless Adapter, Ethernet Cable, 2CD for the adapter and Router and no Manual

 

I think i did it

• Changed SSID and disabled SSID Broadcast
• Put Security in WEP
• Enabled MAC Filtering (Is this how you limit "Allowed" users?)
• Upgraded Firmware to latest version

I wasn't sure exactly how to disable Dynamic IP Adressing.

Did I miss anything?
Please be gentle, Im a Networking Virgin

 

Well, I can help you only with the router part as I don't know much about the WiFi card you have. Try to set the highest security and if anythink does not work try lowering these.

- So you have changed SSID and disabled broadcast- that's fine.
- Enable MAC filtering- fine provided that it's "allow only these MACs" option not "dissallow only MACs listed"- don't remember the default linksys firmware, I'm using DD-WRT for some time now.
- WEP is wrong. It's the weekest security- set WPA2 Personal and AES encription. If it works with the other wireless device stick to it as it is the best security available. If not lower down to WPA and TKIP encription.

You don,t have to disable dynamic adressing- that would mean setting static IPs and disabling DHCP on router. You need to use o called "static leases" or DHCPd (DHCP Deamon). Than you set a certain IP to be given to a certain MAC adress. This works with both WiFi and cable. This setting is not in general tab- it's in "services" I guess.

Still I'd recommend using dd-wrt firmware (mini version to save RAM in your case)- it has more options and it's easy to manage.

 

OK I there is WPA2 Personal & Enterprise, and WPA PErsonal or Enterprise and WEP in my wireless router

I selected WPA2 Personal and under it has AES and AES+TKIP.
Just select AES or AES+TKIP? I selected AES+TKIP for now.

I have the WUSB54GS as my Wireless Adapter.
In My Wireless Adapter I put it in PSK and AES.

So with my Router at WPA2 Personal AES+TKIP, and my USB Wireless Adapter at PSK and AES I have my sons desktop able to connect online.
Did I do it right?
I actually notice a better signal strength too this way.

Do I have to match the security features of what my Adapter has with my router?
I think my laptop coming this Monday is suppose to have the Intel 3945 wireless adapter in it.

As for the Statis Leases, I really need to get it?

And what is this dd-wrt firmware and what are its pros and cons?

 

To connect with your laptop, you have to enter the SSID (since it's not broadcast), then select the same security level and enter the same key. Thats all there is to it.

There's no need to disable DHCP. Let your router pick the IP address of your computers. Unless you require a static IP address for a particular computer, things will work just fine with DHCP.

wrt firmware is a custom firmware that gives more control over the router. You can boost signal strength, have access to hidden options, etc. Unless your router isn't operating correctly, I recommend you stick with the Linksys firmware for a while.

 

Once you have:
1. Changed the network name
2. Disabled SSID broadcast
3. Enabled Mac filtering

... I doubt you have to worry about security, unless you are a corporation in a business that deals with top secret projects that other companies might want to know about.

Wireless is so commonplace now that it is not worth the hassle for someone to be driving around residential areas trying to pick up someone's network. In fact the first two should be adequate and would make it easier for you to add more computers to your network.

 

Or you happen to keep bank information on your computer, or any personal information your computer. Of course you should worry about security.

 

Thanks Guys

I did all teh steps you guys told em to do and the wireless USB is able to connect to my router
Now I just need to wait for my laptop to get here so I can connect that also.
Then I am going to try and have my main desktop and my laptop be able to share files and stuff.

Thats why I want to have teh security

 

Sorry if i missed sth, but my addons are:

-select AES, not AES and TKIP if you can.
-DD-WRT is far better but if linksys suits your needs stick to it
-Static leases is actully what you asked for- your computers are always given the same IPs so you can easily share files or even bookmark them in IE for easier acces. So if you want to acces your son's desktop you know that it always has the same IP that you have bookmarked. Static leases are better than static IPs without DHCP because your laptop is configured to get IP from DHCP and it gets it at home (always the same) and outside (whatever AP gives to it). For desktops it makes no difference, but if you have at least one lappy connected via WiFi, you should stick to DHCPd (static leases)

Sorry if sth is unclear but I'm dead tired. Sleep...

 

OK, I got all 3 systems hooked up now

Changed Network Name
SSID Broadcast is Disabled.
MAC Filtering Enabled.
Using updated LinkSys Firmware
But I had to use AES + TKIP as AES alone is not allowing them to connect soemhow.​

Now I just need to figure out how to have my Main Desktop and Laptop to be able to Share Files/Printers/etc.
But I think I got another post bookmarked to help on that part.

My LinkSys Router seems to be runnign great so far for all 3 of my systems