So I recently changed my password on my wireless router (as I normally change it every now and again) and I noticed different Security modes: WPA2/WPA Mixed mode, WPA2 Personal, WPA Personal, WPA2/WPA Enterprise Mixed mode, WPA2 Enterprise, WPA Enterprise, WEP, RADIUS, Diabled
By default it's set WPA2/WPA Mixed mode. I did some brief research and determined that WEP is succeeded by WPA and as such, WPA is more secure. However I couldn't find any info on the difference between WPA2, WPA and Mixed Mode. I also couldn't find much info on personal and enterprise security settings.
For a home network, which setting would be best in terms of security?
-
WPA2/WPA mixed mode allows for TKIP as a cypher which is why you should use normal WPA2 Personal- which uses AES.
WPA2 Enterprise requires a RADIUS server for authentication which makes the whole thing way to complicated for a home setup.
Final recommendation: WPA2 Personal (AES cypher) -
You should always be on WPA2-AES only unless you have some legacy device that doesn't take AES (stupid corporate laptops with old OSes and locked admin rights).
-
Awesome. Thanks for the replies! +rep when I'm allowed to again.
-
OP good question, I also have my SSID hidden and the integrated firewall set to max (when I reset it goes to default which is off). I have also changed the router login (admin/password is default). And I have a very strong wireless security key.
Is it a good idea to turn on MAC authentication? I only use 2 wireless devices on my network and the range is approx 100 Feet. -
MAC authentication doesn't rally work since basically all official drivers allow you to manually change it- so it's not a security measure.
-
blue68f100 Notebook Virtuoso
If I recall MAC addresses are sent as part of the packet ID to device. That's the only way router knows where to route the incoming packet. I always had problem with connection dropping/renewing when I hid the SSID. If your using a strong password that is mixed all printable chr and at lease 20 chr long you have nothing to worry about. I had a site years ago that calculated the time to brute force crack passwords. If as above it was over 20yrs at a sample rate of 100k/sec. I've looked for it in the past and have lost my bookmark. I used it as a test for strength.
-
Thanks Downloads and Blue68f100
I tested mine here Hammer of God
It said years to crack 90,425,283,107,345,300.00 So I am reassured, and I did not use my real password (but similar length, 17 characters) -
Yup, Never use your actual passwords or the generated passwords from those password strength websites. Always modify a few characters.
They already have your IP, dont give them the router password.
WPA2/WPA Mixed Mode v.s. WPA2; Personal v.s. Enterprise
Discussion in 'Networking and Wireless' started by aznpos531, Mar 28, 2012.