WEP and WPA on same network?

[greigmg]

I'm finally getting around to cinching up my network and would like to use WPA. However, my dlink wireless print server (DP-311U) doesn't supporty WPA encryption. Is it possible to use WPA for my computers and a lesser form for the print server? It wouldn't seem like it, but I wanted to get a straight answer before I start pushing buttons. Thanks.

 

[n0cmonkey]

If you offer both, and one gets cracked, everyone would use the cracked one and ignore the uncracked one. Unless, of course, you can lock down the WEP even more, restricting connections to only the print server and whatnot.

 

[spidey07]

not that I know of. A BSSID (ssid) has a set of encryption for it and only one.

Now if your AP can run multiple SSIDs then you can have multiple encryption schemes/BSSID

don't know if home gear has that capability or not.

 

[JackMDS]

Wireless security is Not downward compatible, if it was, there would No point to it at all.

I.e. with Entry Level Wireless if you configure the main Router as WPA all clients must be configured the same.

There is a partial solution to your case.

Get a second inexpensive Wireless Router (a lot of WEP only Wireless Router are sold for less then $20) connect it to the Internet Modem. Disable DHCP give the printer a static IP and configure it with WEP (use MAC filtering too if available) to work with the printer.

Configure your WPA Wireless in a segregation topology; the second segment should be Wireless with WPA (or WPA2 if you have it).

Instructions here, http://www.ezlan.net/shield.html
(in your case the second segment should be Wireless too, and second Router should be configured with a static IP that is on the same subnet as the printer?s IP).

Under such a configuration if someone brakes your WEP they would be able to ?Borrow? Internet Bandwidth, but your LAN would be WPA protected.

:sun:

P.S. Since the printer is down stream, it should be available from the second segment. I never did a printer concoction like this. I.e. you need to figure out some "fancy" printer configuration, in order to print through the second Router.

 

[nweaver]

Originally posted by: spidey07
not that I know of. A BSSID (ssid) has a set of encryption for it and only one.

Now if your AP can run multiple SSIDs then you can have multiple encryption schemes/BSSID

don't know if home gear has that capability or not.

BZZZZZT

wrong answer (and I expected the right one from you spidey). There is a solution (expensive). Cisco 1200 series ap's support "Optional" WPA, meaning devices can connect using WPA OR WEP.

 

[Zbox]

you can do this on a wrt54g with the latest talisman (and probably other more recent non-stock firmwares)

 

[spidey07]

Originally posted by: nweaver
BZZZZZT

wrong answer (and I expected the right one from you spidey). There is a solution (expensive). Cisco 1200 series ap's support "Optional" WPA, meaning devices can connect using WPA OR WEP.

oh well. I'm not always right.

 

[n0cmonkey]

Originally posted by: nweaver

Originally posted by: spidey07
not that I know of. A BSSID (ssid) has a set of encryption for it and only one.

Now if your AP can run multiple SSIDs then you can have multiple encryption schemes/BSSID

don't know if home gear has that capability or not.

BZZZZZT

wrong answer (and I expected the right one from you spidey). There is a solution (expensive). Cisco 1200 series ap's support "Optional" WPA, meaning devices can connect using WPA OR WEP.

What's the point of that? If they can get on with the same privs. using wep, why would anyone bother messing with WPA?

 

[spidey07]

probably as a means of migration.

Remember having hundreds of wireless clients isn't so easy to just change over night. I reckon having both is a migration path.

 

[RebateMonger]

Originally posted by: n0cmonkey
What's the point of that? If they can get on with the same privs. using wep, why would anyone bother messing with WPA?

Microsoft (and, I imagine, other OS's) does that with Authentication and Encryption. You can set, for instance, IPSec encryption to be optional. If the client can do IPSec, the connection will use IPSec. If not, then no IPSec.

 

[bgroff]

Originally posted by: spidey07
probably as a means of migration.

Remember having hundreds of wireless clients isn't so easy to just change over night. I reckon having both is a migration path.

And ironically enough, they actually call it WPA migration mode... Go figure. That's the difference between enterprise and HOHO (er, SOHO).