Wireless Security issues, & "Authorized MAC"

[rw120555]

I just added a Netgear ME102 wireless access point to my network. I also downloaded the latest firmware and software. One of the software options is for "Authorized Mac". What exactly is this, and how do I get it to work? Is it a feature that limits who can access the network? If so, that would be great, since I currently have only one one laptop I want to connect, maybe one or two other machines later.

The software has these options to load from file, download to ap, get from ap, authorization table enable. I don't see any way to just type in numbers. When I click on "Download to AP" I get an error message saying I have too many Macs, only 680 are allowed. I certainly don't have 680 machines on my home network.

More generally, am I correct in saying that if you don't have WEP enabled, your whole network is open to the whole world? If this authorized Mac thing is a security feature, do I still need WEP? I heard that the ESSID is sometimes claimed to be a security feature, but a worthless one -- my XP laptop detected the wireless network without me telling it anything was there. I enabled WEP and typed in 5 random hex digits and then entered them on the laptop, I figured that was a fairly safe way to go.

Thanks for any info. This Netgear update looks good, but it sure doesn't have much documentation. RW

 

[n0cmonkey]

The authorized MAC thing allows you to only allow certain MAC addresses to connect to the AP. Im not sure how to turn it on or configure it though, so consult your manuals.

WEP gives you a small amount of protections. It encrypts the traffic. Although, it is fairly easy to crack this encryption, I think it is probably worth it until something better comes along.

 

[dtoff]

ok a MAC (what they are talking about) is a physical address burned in to every network card, router, ect....
no 2 are the same. so by enabling mac address control you are allowing or dissallowing access to your network based on the specific card. so if you only have one card add that mac address to the allow list and you set.

its not unhackable but it would take someone that knew what they are doing days to get the mac address and then they have to make they're card have the same mac address as yours. enabling WEP adds another layer of security to it. change it from the standard WEP work... i bet its netgear or somthing like that..

 

[rw120555]

Thanks. It sounds like I want to figure out how to make this option work -- I can't find any docs from netgear on this.

To get my MAC address, I went to a dos prompt, typed GETMAC, and got some #s. Is that the right way to do it? If so, now I need to figure out how to get those number into the ME102.

 

[n0cmonkey]

Originally posted by: rw120555
Thanks. It sounds like I want to figure out how to make this option work -- I can't find any docs from netgear on this.

To get my MAC address, I went to a dos prompt, typed GETMAC, and got some #s. Is that the right way to do it? If so, now I need to figure out how to get those number into the ME102.

ipconfig /all

Look for physical address.

 

[rw120555]

OK, I think I finally have it (although I won't know for sure until I get another laptop to test it). I have my laptop as the only authorized MAC, plus I have a 64 bit WEP key that even I can't remember (but I can always reset it by the USB connection). Sound pretty secure? I'm not really expecting to be the target of a systematic attack, but I don't want casual snoopers messing around with my stuff either. Thanks again. RW

 

[n0cmonkey]

Originally posted by: rw120555
OK, I think I finally have it (although I won't know for sure until I get another laptop to test it). I have my laptop as the only authorized MAC, plus I have a 64 bit WEP key that even I can't remember (but I can always reset it by the USB connection). Sound pretty secure? I'm not really expecting to be the target of a systematic attack, but I don't want casual snoopers messing around with my stuff either. Thanks again. RW

Its a good start for now

 

[boyRacer]

Originally posted by: rw120555
OK, I think I finally have it (although I won't know for sure until I get another laptop to test it). I have my laptop as the only authorized MAC, plus I have a 64 bit WEP key that even I can't remember (but I can always reset it by the USB connection). Sound pretty secure? I'm not really expecting to be the target of a systematic attack, but I don't want casual snoopers messing around with my stuff either. Thanks again. RW

You see that white van outside your house? They're trying to crack into your network.