Hey Rob, I have to disagree with Alan. Though it is true that both methods lock unknown users out of the network (they can not view your data), WEP is more difficult to break through. It also gives your the option to be more secure (if need be) by changing your Encryption key. Here's a break down of both methods.
MAC address filtering:
With this method, computers have to have an authorized MAC address in order to connect to the network. This is great (like Alan said) because it limits the network my a hardware identification key. However it can be pretty easily hacked by someone how knows how to spoof a valid MAC address.
WEP:
WEP actually encrypts all the data that's flying through the air with a 128 bit encryption algorithm. This means that if someone wants to get on the network, they have to get the Encryption key. There is a WEP encryption key software program out there (AirSnort) but it's only written for Linux. This puts your network out of risk for most non-serious hackers. Not only would someone have to have a linux computer running AirSnort, but they'd have to be determined enough to sit there for the 6 to 8 hours it takes AirSnort to gather enough info and crack the WEP key.
Here are a couple questions to ask yourself if you want to determine how secure your network really is.
1. What's your environment? If you're a stand alone building with a good distance from other offices, there's less chance that someone is going to discover your network at all.
2. How vital is your data? If someone got on your network and started deleting stuff, would it be the end of your world?
3. How secure is your internal network? If you're on a peer to peer network with no network server then you'd be at a hackers mercy if he were on the inside of your network. However, if you have an server that is protecting your important data on your network, you're at less risk of loosing everything.
When I setup a wireless network for a client, I use WEP, MAC address filtering, and turn off beakening. If you need help setting up the WEP, let me know and I'd be glad to help you out. andrew@fmedia.homeip.net
- Andrew
Main Topics
Browse All Topics
by: drivenmadPosted on 2003-04-20 at 15:41:15ID: 8363901
rob,
I have found that useing MAC filtering is accually a better route to go. Both options are not full proof, but with MAC filtering you dont take the bandwidth hit of WEP enabled access points. Both WEP and MAC filtering can be bypassed via either a WEP crack util or a user changing his MAC address to one of yours. The MAC filter option is the way to go in my opinion. People can not even connect to the WAP at all. THe first thing the WAP does is look at your setting for allowed MAC addresses, if its not there they dont even connect to the WAP. In essence you are restricting access at the hardware level. That is alway better than software.
:)
Alan Frost
Misawa Entertainment Center
Misawa Air Base Japan