Suggestions for a secure WLAN...

[srx70024]

I have both a Linksys 802.11b and 802.11a access points that I would like to setup on my Windows 2000 AD network in a secure manner. Could anyone recommend some methods or technologies that I might want to take advantage of ? How about any good articles that could get me started in the right direction.

Thanks all.

Matt

[oshea85]

You need to define what level of 'secure' you require.

Linksys products support various levels of static WEP, which is prone to well-publicized and freely-available attacks.

To make your WLAN as bulletproof as is going to be possible, you need methods for user authentication and strong encryption.

Your options are third-party software, such as Funk Odyssey; or using VPNs across all wireless links.

If "pretty good" is acceptable, then MAC authentication and static WEP might suffice.

That said, if your clients are all running Windows XP, then you could deploy an EAP-architecture based on digital certificates. The issues involved vary widely from organization to organization, but in general, they require significant managemant effort.

Homogenous hardware environments can help make securing the network easier, but ease of implementation and use varies between the vendors.