802.11g security measures

[jimmyjam]

In my research of new 802.11 technology, somewhere I read a short statement saying that among 802.11g's improvements was increased security.

I dont think I beleive them. Is IEEE waiting for 802.11i to be ratified to include it in 802.11g? Or are they talking about some other measures being taken? Or was this just mis-information?

The reason I question this is because WEP is implemented in the MAC, which is in the 802.11 spec (or at least 1/2 of it is). So WEP should be common to all flavors of 802.11. Let me know if I'm wrong.

Thanks,
Jimmy

[Pandora]

802.11g does NOT directly enhance 802.11 security. However, currently shipping products will be the first (in some cases the only) devices to be upgraded to WPA. Thus you can anticipate WPA support in the not too distant future. Until then you are stuck with WEP, or searching for a VPN solution.

802.11i isn't ready for prime time yet, the wi-fi alliance is considering badging it as wpa2 anyway. However the progression of security enhancement currently is WPA in the near future, some 802.11g cards currently support 256 bit wep which could offer greater security today. I believe some are even touting use of 256 bit wep in a wpa implementation (zyxel I believe zyair 3000). Exactly how this will work and if it is a wi-fi standard are unclear to me.

If you can enable 256 bit wep today, it will enhance your security today. Generally between now and the end of June most major vendors have promised wpa upgrades for currently shipping products. At that point you'll have much superior security.

[cheesehammer]

Just use a VPN till they get their act together !

[oshea85]

VPN protects user data, NOT your network.

VPN-only WLANs are vulnerable to DoS attacks against clients and APs, and any DHCP servers that must, by necessity, be left exposed in the clear.

Use 802.1x and EAP solutions, such as LEAP, EAP-TLS, PEAP (my fav).

[l2asriram]

We r stuck up with WEP, which is better than nothing but just not good enough.By the way can WEP be used for ad hoc 802.11 networks or is it only for infrastructure networks?

l2asriram

[Pandora]

I believe WEP can be used by ad-hoc or AP. Though I've never investigated it. The following URL points to a PDF document which discusses Although Microsoft indicates WEP will work with ad-hoc networks in the following URL:

http://www.microsoft.com/windowsxp/expertzone/columns/bowman/02april08.asp

There seems no reason why you shouldn't be able to enable wep on an ad-hoc network. Though why such disdain for an access point??