Contents
Cal Poly Pomona

Off-campus Wireless Networking – Common Security Steps

There are several common steps you can take to enhance the security of your wireless network. For specific details on how to perform each step on your specific equipment refer to your user manual or these vendor how-to's.

Change Default Administrator Password and Username

Each wireless network has an access point or router that computers connect to. The manufacturers of these devices typically create a default administrator username and password for configuring the device. The first step when setting up a wireless access point is to change the default administrator password and username if possible.

Turn on Encryption

Unfortunately most wireless access points do not come with encryption turned on by default. You must manually turn on the encryption function with your device's setup menu. The most common form of encryption is Wired Equivalent Privacy (WEP). Alternatively you can setup WiFi Protected Access (WPA), which provides greater security but can be more difficult to set up.

Change the Default SSID

The SSID is an identifier for your wireless network. Wireless access points typically are configured by default to user some form of the manufacturer's name as the SSID (e.g. "Linksys"). Changing the SSID to something unique is a sign to would-be attackers that your wireless network has been properly secured.

Enable MAC Address Filtering

Each wireless card has a unique MAC (Media Access Control) address. When setting up a wireless access point, you can configure it to only accept connections from specific MAC addresses. Setting up your network to work only for your computer's MAC address will make it difficult for an attacker to connect to your wireless network.

Disable SSID Broadcast

Most wireless access points broadcast their SSID on regular time intervals by default. This feature enables individuals to find wireless networks more easily. Unfortunately this also makes it easier for would-be attackers to find your wireless network. Disabling SSID broadcasting can help hide your network from attackers.

Assign Static IP Addresses to Devices

An IP address is like a unique phone number for each device attached to a wireless network. By default a wireless access point will automatically assign a device a new IP address when it connects to the network. This makes it easier for a potential attacker to connect to your wireless network. By assigning static IP addresses to your computers and turning off the capability of dynamically assigning IP address (known as DHCP), you can further protect your wireless network.

Position Your Access Point Appropriately

Wireless access points have a limited range. You should position your access point in place where its range does not overlap into publicly accessible areas if at all possible.

  Did you find what you were looking for?