 |
|
 |
|
|
|
|
Some wireless security experts suggest you disable the DHCP servers on your network. This forces you to set the IP address, subnet mask, and gateway IP address on each and every client, which sounds like a lot of extra work. However, leaving DHCP enabled makes it easier for any war drivers to log into your network. If they can get a signal outside your building, they can use DHCP to join your network.
Large companies often rely on SNMP (Simple Network Management Protocol) for device management. If your company does, change the public and private community strings from the defaults. Leaving those open with a leaky wireless network (and stopping a wireless network exactly at your walls is tough) gives hackers one more way to discover network information.
Here's another bit of advice that contradicts normal management practice: Use a separate set of access control lists on all your access points for your wireless clients. Normal management practice says to cut down the number of user lists you keep, but wireless security needs dictate the use of control lists on your access points. Advanced access points that use access control lists usually also offer a way to upload the list of allowed clients rather than forcing you to type them into a configuration screen on each access control point.
Security seems more involved with a wireless network, but that's not really the case. You just have to be aware that your wireless network reaches beyond your walls, making it easier for outsiders to become insiders.
|
|
|
|
|
Printable version
