Click to See Complete Forum and Search --> : network authentication newbie
poly4life
11-02-2004, 05:41 PM
I feel rather stupid asking this but here I go: I don't think I fully understand the practicality of having open or shared network authentication, as every time I set the latter, the settings revert back to the former. Why is it doing this? Also, can someone tell me an example of how and when one should use open and shared network authentication, respectively? Can someone please point me to other sites that can tutor me on network authentication, as well as IEEE 802.1x authentication? I need to understand how to implement these and how they work.
Thank you very much.
cat5e
11-02-2004, 07:03 PM
Open System Authentication - Usually means No authentication. Typically would be employed by Hotsopt, etc. that provides you with only withInternet Access with no access to LAN content.
Shared Key Authentication requires every one that log on to be authenticate.
There are few scenarios of how Wireless is used.
At home there are usually one or two sources with few users on peer to peer Network.
Internet café has to deal with many diverse users.
Cooperate envioroment need to deal with many users that might roam between Access Point.
There might be differences between login on to Peer Networks Vs. Domain based Network.
Each one of these scenarios might entail different way of securing the system.
You should use the Model that fits you Wireless Network.
For regular home use usually this would usually suffice:
Link to: Wireless Security. (http://www.ezlan.net/Wireless_Security.html)
As for Windows 802.11x that might help: IEEE 802.1X Authentication for Wireless Connections. (http://www.microsoft.com/technet/community/columns/cableguy/cg0402.mspx)
:t
poly4life
11-02-2004, 07:53 PM
I think I get the "jist" of 802.1x authentication, but I'm not sure how to distinguish it from the Network Authentication label in the xp zero-configuration utility. That label allows you to choose open, shared, and wpa, for instance. Below that label is a label titled "Data Encrryption" where you can choose disabled or wep. So, from what I understand, wpa is not for data encryption but more like 802.1x - authentication that sits in a particular layer of security. So, it is possible to have wep and wpa, where the former protects your data as it passes through and in between your network and wpa prevents illegal access to the data in your network, right?
Even if that's all right, I still am not sure what is the difference between 802.1x and that Network Authentication label (where you can choose wpa, shared, etc). Why not have one or the other? Why would you run both at the same time? I mean, do they sit in different security layers? Lastly, how do I enable shared authentication? Just choosing "shared" doesn't enable it. I must need to do something else.
Thank you so much for your time.
cat5e
11-02-2004, 08:12 PM
Windows Wireless interface is very general. It needs to cater to variety of situation including old type and equipment and New type of Wireless.
Assuming that you are a regular Home user.
WEP was the previous attempt to secure the Wireless connection. WPA is a replacement to WEP it provide better security. If your Wireless support WPA use it. Otherwise you have No choice but to use WEP.
More here: WEP, WPA, and the Future (802.11i). (http://www.ezlan.net/wpa_wep.html)
In addition some manufactures Entry Level Wireless is Not even compatible with Windows 801.11x and it is better to switch Windows Zero Configuratin (WZC) Off.
This page includes few notions about WZC: Link to: Wireless - Basic Configuration. (http://www.ezlan.net/Wireless_Config.html)
Could be that you are in the category that can not use Windows Wireless Configuration and need to use the Brand Util.
:t
poly4life
11-02-2004, 11:46 PM
Thank you so much for the links and your knowledge. I've been doing a lot of research on this, but I still haven't figured out one thing and I hope you have the answer: What do I need to have and do in order to enable shared key authentication? I know it's not secure and it's extremely tedious to type in the shared key over and over. Still, I just want to know for the sake of knowing it.
Thank you.
cat5e
11-03-2004, 11:38 AM
Since you did not provide any information about your system, I would guess.
Update the firmware and drivers of your Wireless Hardware.
Switch Off Windows Wireless management, and use the manufacturer utility.
If your hardware is OK it should stay with WEP/WPA and would not have to retype.
If looking for some thing more secure than WEP/WPA install a RADIUS Server.
:t
poly4life
11-03-2004, 12:33 PM
I'm using the wireless-G Linksys router and its NIC counterpart. All the latest drivers and utilties have been updated, and I have free will to use the montioring utility that comes with it. The thing is that I can't tell the difference between open and shared on my system. Allow me to explain.
In WZC, I have WEP selected and the router has this set, as well. I select open for Network Authentication, then right click on the two-computer icon in the system tray, and finally select view available wireless networks. I see my SSID and instructions telling me that it requires the use of a WEP key, which has been already typed in the WZC.
Now I do the exact same thing but select shared instead of open in WZC, right. I see the same screen in the view available wireless networks window. There is no difference. Yet, WZC does reflect the change from open to shared. I would think that this must mean that my router supports WEP/open and WEP/shared. Why can't I tell the difference between these two? If someone on the WAN wants to connect to me, wouldn't the screen be the same in this case whether I have WEP/open or WEP/shared selected?
Also, there's a checkbox in WZC that says the key has been provided for me automatically. What is this for? Is this setting used for RADIUS servers?
Thank you very much for your continued assistance.
SysOpt.com
Copyright Internet.com Inc. All Rights Reserved.