Securing your WiFi network

Sudeep Naik, Sep 15, 2008 1936 hrs IST

Here are a few tips on how you can secure your WiFi network.

EXPERT REVIEW

I don't know of anyone who could be more unlucky than Mr. Manohar Kamath at this point in time. For those who tuned in late, Mr. Kamath is the co-owner of Kamran Power Control. His company's wireless (WiFi) network was allegedly hacked and was used to send a terror email to news channels around the time of the blasts that rocked Delhi on Saturday.

Although, at this time, you can't blame him for the blasts, his misfortune of being entangled in this mess is more or less his own doing. Why? Because he forgot the golden rule of IT; securing his network and I'm sure there are thousands like him in the country and around the world.

We asked a few such people why they never secured their networks and here are some of the answers we got.

1. Who'd hack into MY network?

2. I've got more important stuff to worry about.

3. I never knew I could secure my network.

4. How do I secure my WiFi network?

Now, for those of you whose answers match or resemble the first two statements - GODSPEED.

For the rest, here are some tips on how you can secure your WiFi
network.

In our illustrations here, we have used the DLink DWL-2100AP, one of the most commonly used WiFi routers. If you don't own this particular model or brand, don't fret. You will get similar options from other routers too, albeit with a different looking interface. Now let's begin the lockdown.

First things first

The first and probably the most important thing to do would be to turn on the security features that are offered by your router. These options could either be enabled via a physical button/switch on the router or can be a part of the software disc that comes with the router package.

Disable SSID broadcasts

A service set identifier, or SSID, is a name given to the particular 802.11 wireless LANs to which a user wants to connect. A client device receives broadcast messages from all access points (or routers) within its range giving their SSIDs. The client can now choose a network to connect to.

As you can see from the screenshot above, the best practice is to change the SSID name (good practice) and to DISABLE the SSID broadcast. Disabling the SSID broadcast makes your wireless network invisible to others who might walk into the range of your router.
Using WPA2-EAP . (Wi-Fi Protected Access - Extensible Authentication Protocol) authentication protocol gives you better protection as compared to others.

Also, if you are running a small business network or more than a couple of PCs on your WiFi network, it is advised that you use RADIUS protocol that gives you centralized authentication, authorization and access control (AAA). It also uses Advanced Encryption Standard (AES) that allows a maximum of 256-bit encryption.

Control access to the network

By controlling the number and type of devices that can connect to the network, you can give network access to a limited number of people who are known to you. It's a kind of Guest List that you can find at most pubs or fine-dines. Only those invited can go in.

USER COMMENTS

desktop & lapop keliye wifi internet ka setup kamptee mein dalna chhata hon please advice me

by wakeel ahmed, kamptee, on Feb 24, 2009 12:32 PM, Report abuse Reply

Hi. I am using BSNL wireless lan. But it is working strange. unfortunately, BSNL persons dont have that knowledge to guide. So Please give a detailed gude to secure bsnl wireless lan.

by Madhu Sudhha, Hyderabad, on Jan 01, 2009 12:12 AM, Report abuse Reply

i m using bsnl wifi router and no disc or software is installed in my vaio for connecting it so how can i secure it please assist me

by ritesh patel, anand, on Oct 27, 2008 09:56 PM, Report abuse Reply

yes , you can do that .... type 192.168.1.1 in your IE and get connected to the Router web-interface . You will find tabbed options ...go to Wireless security and DISABLE option can be choosen ..

by Jai, Bangalore, on Nov 03, 2008 11:36 AM, Report abuse

Here u showed an example of using WPA-EAP. This is not possible for most of the home users. So would be better if u could add an example of using WPA2 passphrase. Thanks

by Anonymous, Bangalore, on Oct 23, 2008 06:14 PM, Report abuse Reply

M A C address f i l t e r i n g is the best way to go if any 1 needs help just buzz me nine ate 1 nine 4 ate won won 79 @ chembur lets make the cyber streets safer than the streets outside

by Semi Automatic , Mumbai ( C H E M B U R ), on Sep 23, 2008 05:41 PM, Report abuse Reply

I kind of liked the way this article was drafted - " It's just another way of feeling "safe", just as safe when you use a 500-rupee lock to shut the doors on your 10 million rupee home" ! True that - technology hasn't yet matured to its ultimate and intrusions are inevitable beyond a certain point but trying to be safe is not a bad option :D

by Aswin, Bangalore, on Sep 18, 2008 11:36 PM, Report abuse Reply

Hi If i disable the broadcast, how will i find the network if i get a new system ? Will that be manual config? Why not add mac filter? instead of disabling broadcast ?

by Anup, Bangalore, on Sep 18, 2008 12:44 PM, Report abuse Reply

I have not disabled SSID, but have turned on Access control and added a 10-digit security key. Is that not enough? I am somewhat computer-illiterate

by K V SRIDHAR, Bangalore, on Sep 16, 2008 08:40 PM, Report abuse Reply

It's very good that you have added a security key to your network. But disabling the SSID broadcasts will make your network invisible to those who don't know about it's existence.

by Shyam Mehta, Mumbai, on Sep 17, 2008 11:09 AM, Report abuse

good article. thats why i visit your page always

by ab chavan, jorhat, on Sep 16, 2008 06:56 PM, Report abuse Reply

Thanks TT for the article... although we knew we should secure our wifi, we never knew how to do it. This would help a lot of people if they take wifi security seriously.

by Shakti, Ahmedabad, on Sep 16, 2008 02:51 PM, Report abuse Reply

Can you help us with securing the mtnl broadband wi fi router. wa3002-g4

by Aalok Jain, Mumbai, on Sep 16, 2008 12:43 PM, Report abuse Reply

Hey nice article on WiFi security. another feature that could be used along with all the features already mentioned could be the MAC filter. take care :)

by Avinash Nayak, Bangalore, on Sep 16, 2008 12:11 PM, Report abuse Reply

Hi, I am using a Reliance Data Modem for internet purpose.So can you please tell me how to secure it from misuse. Thanks

by chiranjib dhar, new delhi, on Sep 16, 2008 10:12 AM, Report abuse Reply

This is a very good information for laymen who donot understand the nitty gritties of WIFI

by Paresh Kamat, mumbai, on Sep 16, 2008 10:09 AM, Report abuse Reply

Many of the home users using the BSNL connection get the wifi router thinking thats a modem, added they are unaware of the fact that those routers can be misused easily, The responsibility lies with the service providers to ensure their customers are safe.

by Ravi, Chennai, on Sep 16, 2008 09:43 AM, Report abuse Reply

its very good to guide a people how to secure us if u have any other tips for security so please foward me thanku

by nadeem khan, aligarh, on Sep 16, 2008 09:35 AM, Report abuse Reply

Let's secure our wi-fi !

by Rajesh Sharma, Delhi, on Sep 16, 2008 09:19 AM, Report abuse Reply

airtel ppl did a nice job for me the guy who came i asked him to even make my connection hidden, no one can even see it in the list while searching wi-fi, you have to actually do all the settings manually.

by Anuj, Bangaloreo, on Sep 16, 2008 07:17 AM, Report abuse Reply

Techtree Team, thank you for bringing out this issue. I think the major issue with unsecured WiFi access is because most of the WiFi AP's come with default settings that enables WiFi access without any security. And most of the vendor's installing the WiFi devices have no idea on how and why security should be enabled.

by Umesh D., Mumbai, on Sep 16, 2008 02:06 AM, Report abuse Reply

nice way told, disable broadcasting ssid, days back in powai, i usually got a list of wifi avaialable to connect and majority of them were open to connect to internet., people need to understand what they are using

by harpreet, fortworth, on Sep 16, 2008 12:48 AM, Report abuse Reply

Nice thing to do TT. hopefully people will try securing their Wi Fi networks. With Wi Fi being so easy to hack into it has given a free run to the negative elements. I feel that even the work hack is to much to be used here. Because using an open network can be as simple as just switching on the Wi Fi Card and clicking on "Connect". I myself have seen many networks when moving around. Have very seldom seen Wi-Fi networks locked. I hope people set up their networks responsibly... :-) ...

by Anant Bhushan, Roorkee, on Sep 15, 2008 09:48 PM, Report abuse Reply