10 Tips for Wireless Broadband & Modem Network Security

  • Thread starter Thread starter cum_trishna
  • Start date Start date
  • Replies Replies 8
  • Views Views 4,199

cum_trishna

Regular
Messages
128
Location
NA
ISP
BSNL
Dear customer,

In view of different security issues related to modem pppoe mode configuration the following tips are given to secure your broadband modem & wi fi from illegal access.
10 tips for wireless broadband & modem network security

1.change default administrator passwords (and usernames) of modem
at the core of wi-fi home networks is an access point or router. To set up these pieces of equipment, there is a web page (http://192.168.1.1). These web tools are protected with a login screen (username and password) so that only the rightful owner can do this. However, for any given piece of equipment, the logins provided are simple and very well-known to hackers on the internet. Change these settings immediately.
2. turn on (compatible) wpa / wep encryption
all wi-fi equipment supports some form of encryption . Encryption technology scrambles messages sent over wireless networks so that they cannot be easily read by humans. Several encryption technologies exist for wi-fi today. Wep is not exactly “good” encryption. With a freely available tool like “aircrack”, you can sniff wireless traffic protected by wep and crack security on that network in a matter of minutes. Wpa is the current, common encryption standard you should probably be using — though, of course, you should use something stronger as soon as it becomes available to you. Technology is advancing every day, on both sides of the encryption arms race, after all.
for detail procedure go http://www.calcuttatelephones.com/dataoneinstall/menu.html and click on any wireless cpe provided by bsnl
3. change the default ssid
access points and routers all use a network name called the ssid . Manufacturers normally ship their products with the same ssid set. True, knowing the ssid does not by itself allow your neighbors to break into your network, but it is a start. More importantly, when someone finds a default ssid, they see it is a poorly configured network and are much more likely to attack it. Change the default ssid immediately when configuring wireless security on your network.
4. enable mac address filtering
each piece of wi-fi gear possesses a unique identifier called the physical address or mac address. Access points and routers keep track of the mac addresses of all devices that connect to them. Many such products offer the owner an option to key in the mac addresses of their home equipment that restricts the network to only allow connections from those devices. Do this, but also know that the feature is not as powerful as it may seem. Hackers and their software programs can fake mac addresses easily.
5. disable ssid broadcast
in wi-fi networking, the wireless access point or router typically broadcasts the network name (ssid) over the air at regular intervals. This feature was designed for businesses and mobile hotspots where wi-fi clients may roam in and out of range. In the home, this roaming feature is unnecessary, and it increases the likelihood someone will try to log in to your home network. Fortunately, most wi-fi access points allow the ssid broadcast feature to be disabled by the network administrator.
6.do not auto-connect to open wi-fi networks
connecting to an open wi-fi network such as a free wireless hotspot or your neighbor's router exposes your computer to security risks. Although not normally enabled, most computers have a setting available allowing these connections to happen automatically without notifying you (the user). This setting should not be enabled except in temporary situations.
7. assign static ip addresses to devices
most home networkers gravitate toward using dynamic ip addresses. dhcp technology is indeed easy to set up. Unfortunately, this convenience also works to the advantage of network attackers, who can easily obtain valid ip addresses from your network's dhcp pool. Turn off dhcp on the router or access point, set a fixed ip address range instead, and then configure each connected device to match. Use a private ip address range (like 10.0.0.x) to prevent computers from being directly reached from the internet.
8. enable firewalls on each computer and the router
modern network routers contain built-in firewall capability, but the option also exists to disable them. Ensure that your router's firewall is turned on. For extra protection, consider installing and running personal firewall software on each computer connected to the router.
9. position the router or access point safely
wi-fi signals normally reach to the exterior of a home. A small amount of signal leakage outdoors is not a problem, but the further this signal reaches, the easier it is for others to detect and exploit. Wi-fi signals often reach through neighboring homes and into streets, for example. When installing a wireless home network, the position of the access point or router determines its reach. Try to position these devices near the center of the home rather than near windows to minimize leakage.
10. turn off the network during extended periods of non-use
the ultimate in wireless security measures, shutting down your network will most certainly prevent outside hackers from breaking in! While impractical to turn off and on the devices frequently, at least consider doing so during travel or extended periods offline. Computer disk drives have been known to suffer from power cycle wear-and-tear, but this is a secondary concern for broadband modems and routers.
If you own a wireless router but are only using it wired (ethernet) connections, you can also sometimes turn off wi-fi on a broadband router without powering down the entire network
if you face any problem regarding wireless security & modem please contact concernd DE (internal).
*************************************
we are always with you for best of our services.
With warm regards,
yours sincerely
(r n yadav)
dy general manager(broadband)
calcutta telephones
 
Very helpful tips for all users. One cannot be too cautious these days.
 
i was repeatedly getting calls from MTNL asking me whether my network is secured..these steps are really helpful.
 
good info for those who really need the info.. i have done this except mac filtering/pointing correct place.. (i dont think that is important.. ) If you disable ssid broadcast and static ip(some other range), why you have to worry about unknown access? According to me.. Few best practices... Disable SSID broadcastDisable DHCP and give Static IP (use some other range than regular 192.168.1.x)Change the default SSID and give a good encryption !! (keep changing SSID)These things will secure you !! When you see the frequent blinks on WLAN signal, check the settings and change the SSID or Network Range !!
 
I suggest this should be made a sticky post
 



Top