Community discussions

MikroTik App
 
canram
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 84
Joined: Tue Mar 15, 2005 11:46 pm
Location: Germany

WPA-PSA

Tue Mar 15, 2005 11:59 pm

Any news about the integration of WPA-PSK in MT RouterOS? Can I expect WPA-PSK support still this year?

Thanks so far.

Have a nice day,
canram
 
wildbill442
Forum Guru
Forum Guru
Posts: 1055
Joined: Wed Dec 08, 2004 7:29 am
Location: Sacramento, CA

Wed Mar 16, 2005 2:17 am

Use a VPN tunnel if you want higher level security and authentication on your network.

WPA-PSK is argueably better than WEP, but a VPN tunnel is the best way to encrypt data from client to endpoint (3des encryption or higher)...
 
canram
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 84
Joined: Tue Mar 15, 2005 11:46 pm
Location: Germany

Wed Mar 16, 2005 9:22 am

My users are using a simple WLAN-Bridge which only support WEP or WPA. Behind this WLAN-Bridge, they currently use a common DSL-Router doing PPPoE. Mostly, those cheap DSL-Routers do not support any kind of encrypted vpn tunnel. Therefore, the bridge must do the encryption.

Many of my users a considering WEP as very unsecure and believe that WPA is much more secure. Therefore it´s a psychological decision to change to WPA.

Is it a very big effort to integrate WPA in MT RouterOS.
 
wabbakey
just joined
Posts: 3
Joined: Thu Jun 03, 2004 7:47 pm

I asked for WPA some time ago and ...

Wed Mar 16, 2005 6:44 pm

 
wildbill442
Forum Guru
Forum Guru
Posts: 1055
Joined: Wed Dec 08, 2004 7:29 am
Location: Sacramento, CA

Wed Mar 16, 2005 7:11 pm

This whole WEP/WPA bull**** has gone on long enough in my opinion...

IF you have sensitive data and are transmitting it over a wireless connection, and you want it to be secure. Use a secure means of doing so!

Cable/DSL/whatever its all sent UNENCRYPTED from your PC to their edge router and out to the internet.

WEP/WPA encrypts the data from client to AP.. That's neat.. so all I have to do is sniff the traffic coming out the ethernet interface of the AP and i just undermined your whole security policy... IF your data is that sensitive then you should be securing it from client to endpoint using a tunnel with a higher level of encryption..

WEP/WPA creates a FALSE sense of security and is a joke if you ask me. You should be advising your clients that these standards are useless and do nothing but negatively impact bandwidth and throughput.

----EDIT-----

ALSO most residential grade DSL/Broadband routers support PPTP..

I know the big names do, Linksys, Netgear, etc.. and its becoming more and more standard on residential routers.

MT supports IPSEC/L2TP/PPTP tunneling and so much more.
 
canram
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 84
Joined: Tue Mar 15, 2005 11:46 pm
Location: Germany

Wed Mar 16, 2005 9:14 pm


ALSO most residential grade DSL/Broadband routers support PPTP..

I know the big names do, Linksys, Netgear, etc.. and its becoming more and more standard on residential routers.
Many routers support PPTP. But I don´t know any non expensive consumer router that supports "MPPE-Encrypted" PPTP or PPPoE.

You´re right in your decision that WEP/WPA are not secure enough. But there´s no way to teach this a "normal, standard" user.

Who is online

Users browsing this forum: Bing [Bot], Laxity, Pinacolada88, sdamyt and 27 guests