Configuring your Home Wireless Network

1. Configuring your Home Wireless Network Presented by Lou Koch March 14, 2006 Adapted from Presentation at APCUG By Jay Ferron ADMT, CISM, CISSP, MCDBA, MCSE, MCT, NSA-IAM

2. Questions • How many of you have more than one computer at home? • How many of you connect to the Internet using broadband (Cable or DSL) • How many already have a home router? • Already have a wireless router? For those who have not already done so, we will show you how to install a WLAN tonight. More critically we will discuss ways to secure your wireless network

3. Agenda • Connecting things together • Home network - terminology • Security – Firewalls, Filtering, etc • Setting up a home router • Setting up Print and File Sharing • Questions

4. Home Network • Internet – ISP • Wire to home • Modem • Translates electronic data • Router • Disperses electronic data • Network Adaptor • Required for each Computer • Wired • NIC (network interface card) or ethernet card • Wireless • Wireless Adaptor

5. NetworkOne or more devices connected together • To the Internet with a router • To each other in order to share Resources: • Internet Connections • Sharing Files • Sharing Printers • WAN, LAN, WLAN, PAN • WAN – Wide Area Network … many computers, locations • LAN – Local Area Network … few computers, 1 location • PAN – Personal Area Network … home network • WLAN – Wireless Local Area Network

6. Wireless • Wireless Networking Standards • 802.11 a, b, and g • configuration specifications to insure compatibility • Different speed/range capabilities • Equipment conforming to “g” is most popular/available • Good for 100-400 feet … in a house • General rule – don’t mix equipment made to different standards • Bluetooth • Standard which is often used for peripheral devices • Printers, scanners, cell phones, etc • Short range (10 ft), high speed

7. What is a Cable/DSL Modem • Modem (modulator/demodulator) • encodes/decodes information transmitted to the internet • Usually provided and controlled by your ISP • Connects your home to the Internet. • This is the device that gets your public IP (internet protocol) address • Normally has no firewall protection

8. What is a Router • Connects one network to another … Sometimes called a “Gateway” • Connects your computer to the internet (cable modem or DSL Line) – keeps LAN traffic local • Routers keep track of IP addresses and physical (MAC) addresses of hosts • IP (Internet Protocol) address … your computers internet address • MAC (Media Access Control) … id for each physical communication device

9. What is an Access Point • A point where computers access a network • Device which links wireless users to network • Transmits and receives data (Transceiver) • Bridge between wireless and wired networks • Can be linked together to cover broad area • No security or firewall implemented

10. What is a Firewall • A device that filters packets of data or traffic • Its job is to be a traffic cop • You configure the firewall: • What will allow to pass • What will it block • Hides your home network from the outside world • Can be either in hardware or software • Most popular routers for home have built in firewall protection

11. What Does a Firewall do? They: • Protect your home computer from the bad guys • Keep your information private • Make you less of a target By: • Stopping viruses • Hiding your computer from the world • Making the bad guys work harder to get your info

12. Internet Firewall Home Network Firewall Protection • Checks incoming traffic from the network before it gets to your home network …. default – Blocks all Incoming connections • Traffic leaving your home network … default - Allow all outbound connections • Hardware firewalls protect you home network by stop all traffic before it get to your computers • Personal software firewall on your computer blocks incoming and outgoing (lets you know what is leaving your computer)

13. HardwareFirewall Routers The idea is layers of protection • Examples of home combo units include • Belkin(we will demo tonight) • Dlink • Linksys • Netgear

14. Software Firewalls • Adding a second level of protection • Controlling what leaves your computer • By being aware of application level attacks • By allow you to schedule • Usage of the internet by time (control access at night) • By location (block content for young children)

15. Software Firewalls for Home Use • Examples • Zone Alarm (Free) • McAfee Firewall • Symantec’s Norton Personal Firewall • Computer Associates with Firewall (free) • Windows Firewall in XP Service Pack 2 (free)

16. Configure Wireless Firewall/router Overview • Basic Settings … name, ip address, etc Check for firmware updates • Set Account name and password Change name and password … don’t used default • Wireless Settings SSID broadcast … make sure that remote computers are set to automatically connect Do not enable DMZ Do enable ping blocking • Security - Blocking and Filtering Wireless Security encryption MAC filtering • Back up settings

17. Basic Settings and Info • Run Install CD that comes with router • Basic info will be automatically entered or requested • To change info: • For Belkin the default IP address is 192.168.2.1 • Other manufacturers use different ip addresses (later slide) • Enter this into address bar • Setup page will be displayed • Firmware - software that is embedded in a hardware device • Updated occasionally by manufactures • Check whenever you access router

18. Account Name • Change name • Default name is set by manufacturer … eg, Belkin54 • Bad guys know defaults and default administrative passwords • Create Administrative Password • Use Strong Password • Record your password where you can find it so you can make changes

19. Default Info • Router default info is easily available on internet for consumers … and the bad guys • eg • http://www.otosoftware.com/wwhelp/Default_Router_Usernames_and_Passwords.htm • http://forum.pcmech.com/showthread.php?t=64258 • So Change Name and Password

20. Passwords Your computer password is the foundation of your computer security • No Password = No Security • Old Passwords & Same Password = Reduced Security • Set and change the “administrator” password on router (and your computer logon) • STRONG PASSWORD … 6-8 digit passwords • use upper, lower case, numbers and symbols

21. Wireless Settings • SSID - service set identifier • name given to your wireless network • Broadcasting this ID makes network visible to PCs in area • can be turned off so it will not be detected by other PCs in area • Be sure to set up your own pc to automatically detect and logon to your WLAN • DMZ – • allows you to select a PC to access WLAN outside the firewall • do not enable unless firewall interferes with some activity • Ping Blocking –troubleshooting tool • Signal sent and echo received indicates valid ip address • Used by hackers to find active computers • Enable ping blocking … won’t send echo back

22. SecurityBlocking and Filtering • Encryption – coding transmissions • Multiple variations. 2 most common: • WPA-PSK … Wireless Protected Access (Pre-shared key) • Use same password for all computers • Preferred Choice • WEP … Wired equivalent privacy • 64 or 128 bit encryption … doesn’t matter • Enter Password … converts to hex code • Must enter hex code • 2nd Choice (if WPA not supported)

23. MAC Filtering • MAC address … Media Access Control address • Unique ID permanently attached to each communication device by manufacturer – hardware id • Can find MAC address: run  cmd  ipconfig/all • Enter MAC addresses of acceptable network clients • If address is not on filter list, access to network will be denied • Very effective security method

24. RECAPSteps to protect your wireless network • Change the default password on your router • 2. Enable WPA(PSK) or WEP on router and wireless workstation • Use MAC address filtering • SSID broadcast off • Prohibit Peer-to-peer (Ad Hoc) networking • 5. Keep current on hardware bios upgrades

25. Print and File SharingOverview • Print and File Sharing: • Useful, but Risky if all computers are not secure • Setting up Network for Printer and File sharing • Interface card • Set Interface card to allow • Each computer in network • Make sure each computer is part of network • Printer • Make sure that Print sharing is allowed for printer • Load appropriate print drivers on each computer • Firewall Settings • Reset network IP range to trusted zone • Place files to share in “Shared Documents” folder

26. Print and File SharingDetails (1) • Be sure WLAN is working and secure • Interface card • Start  connect to  NIC or WLAN card  properties • Check “File and Printer sharing on Microsoft Networks” • Repeat for all PCs on Network • Printer • Start  Printers and Faxes  shared printer • Select properties  sharing  check “share this Printer)

27. Print and File SharingDetails (2) • Firewall • Be sure WLAN IPs are allowed in Firewall for all PCs • Zone Alarm •  Firewall  zones  add  IP range  <enter appropriate range> • Network ID for each computer • Under My Computer  Properties  Computer name • Click Change and add WLAN name as Workgroup • Shared Documents Folder for each computer • Any files in the Shared Documents folder will be accessible from all computers

28. Questions