The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    WPA2/WPA Mixed Mode v.s. WPA2; Personal v.s. Enterprise

    Discussion in 'Networking and Wireless' started by aznpos531, Mar 28, 2012.

  1. aznpos531

    aznpos531 Notebook Evangelist

    Reputations:
    457
    Messages:
    636
    Likes Received:
    1
    Trophy Points:
    31
    So I recently changed my password on my wireless router (as I normally change it every now and again) and I noticed different Security modes: WPA2/WPA Mixed mode, WPA2 Personal, WPA Personal, WPA2/WPA Enterprise Mixed mode, WPA2 Enterprise, WPA Enterprise, WEP, RADIUS, Diabled
    By default it's set WPA2/WPA Mixed mode. I did some brief research and determined that WEP is succeeded by WPA and as such, WPA is more secure. However I couldn't find any info on the difference between WPA2, WPA and Mixed Mode. I also couldn't find much info on personal and enterprise security settings.
    For a home network, which setting would be best in terms of security?
     
  2. downloads

    downloads No, Dee Dee, no! Super Moderator

    Reputations:
    7,729
    Messages:
    8,722
    Likes Received:
    2,230
    Trophy Points:
    331
    WPA2/WPA mixed mode allows for TKIP as a cypher which is why you should use normal WPA2 Personal- which uses AES.
    WPA2 Enterprise requires a RADIUS server for authentication which makes the whole thing way to complicated for a home setup.

    Final recommendation: WPA2 Personal (AES cypher)
     
  3. tijo

    tijo Sacred Blame

    Reputations:
    7,588
    Messages:
    10,023
    Likes Received:
    1,077
    Trophy Points:
    581
    You should always be on WPA2-AES only unless you have some legacy device that doesn't take AES (stupid corporate laptops with old OSes and locked admin rights).
     
  4. aznpos531

    aznpos531 Notebook Evangelist

    Reputations:
    457
    Messages:
    636
    Likes Received:
    1
    Trophy Points:
    31
    Awesome. Thanks for the replies! +rep when I'm allowed to again. :)
     
  5. JOSEA

    JOSEA NONE

    Reputations:
    4,013
    Messages:
    3,521
    Likes Received:
    170
    Trophy Points:
    131
    OP good question, I also have my SSID hidden and the integrated firewall set to max (when I reset it goes to default which is off). I have also changed the router login (admin/password is default). And I have a very strong wireless security key.
    Is it a good idea to turn on MAC authentication? I only use 2 wireless devices on my network and the range is approx 100 Feet.
     
  6. downloads

    downloads No, Dee Dee, no! Super Moderator

    Reputations:
    7,729
    Messages:
    8,722
    Likes Received:
    2,230
    Trophy Points:
    331
    MAC authentication doesn't rally work since basically all official drivers allow you to manually change it- so it's not a security measure.
     
  7. blue68f100

    blue68f100 Notebook Virtuoso

    Reputations:
    1,020
    Messages:
    3,439
    Likes Received:
    0
    Trophy Points:
    105
    If I recall MAC addresses are sent as part of the packet ID to device. That's the only way router knows where to route the incoming packet. I always had problem with connection dropping/renewing when I hid the SSID. If your using a strong password that is mixed all printable chr and at lease 20 chr long you have nothing to worry about. I had a site years ago that calculated the time to brute force crack passwords. If as above it was over 20yrs at a sample rate of 100k/sec. I've looked for it in the past and have lost my bookmark. I used it as a test for strength.
     
  8. JOSEA

    JOSEA NONE

    Reputations:
    4,013
    Messages:
    3,521
    Likes Received:
    170
    Trophy Points:
    131
    Thanks Downloads and Blue68f100
    I tested mine here Hammer of God
    It said years to crack 90,425,283,107,345,300.00 So I am reassured, and I did not use my real password (but similar length, 17 characters)
     
  9. flipfire

    flipfire Moderately Boss

    Reputations:
    6,156
    Messages:
    11,214
    Likes Received:
    68
    Trophy Points:
    466
    Yup, Never use your actual passwords or the generated passwords from those password strength websites. Always modify a few characters.

    They already have your IP, dont give them the router password.