Step 2: Configure your wireless LAN |
Install the access point. |
| Connect the access point to your wired LAN with an Ethernet cable. Use the software that ships with the access point to assign an appropriate network name and an encryption key. |
 |
|
|
 |
 |
 |
| Make sure you turn on and properly configure your access point security settings so your internal network and the data that flows across it are inaccessible by the rest of the world. The Use it section provides more detail on how to use different wireless security tools to secure your network.
|
 |
Activate the connections. |
| Next, turn on the access point, activate the wireless connections for your devices and verify that they're all transmitting a wireless signal. |
 |
 |
 |
| Review your user manual to find out how to be certain your wireless connections are on and transmitting. |
 |
Connect other devices to the network. |
| Other devices, such as printers and PDAs, use different methods to make a wireless connection. Review your manual for specific instructions on how to connect each one. |
 |
| If you don't have a wireless printer, most ordinary printers manufactured within the last year work well with wireless print servers. Just connect the printer to the wireless print server with a USB (Universal Serial Bus) or Ethernet cable, configure the print server as a node on your WLAN, set up the printer's port on the print server and then load the appropriate printer driver on the PCs and other devices that need access to the printer. |
 |
Secure your connections. |
| After you install a wireless access point, you need to perform the initial setup on the device by: |
 |
 |
• |
Entering an IP (Internet Protocol) address with a port number (usually port 80) into a web browser to access a web page. |
 |
 |
• |
Issuing commands at a command prompt |
 |
| The devices are usually shipped from the manufacturer with default settings that are generally known or easily learned by the public, so you should change these immediately: |
 |
 |
• |
Default user name and password: Every boxed unit has some or no factory-specified administrative login and password. Change these to meet your company's administrative policy. That way, no casual or criminal discovery of your devices will provide an easy means for intrusion. |
 |
 |
• |
Default SSID (service set identifier): An SSID is the name you give each router or access point in your organization. The default name is usually specific to the manufacturer, which you should change to be site-specific but not easily discerned by the public. This includes eliminating any generic identifiers that can be spoofed or imitated by attacker-controlled wireless devices. |
 |
 |
• |
Default broadcast beacons: Many wireless devices announce their presence to the world, which can have a significant security impact on your business. Unless you offer an on-demand open-access wireless network, you should turn off beacon broadcasting, at least to the outside world, even though there are ways to still determine the SSID. |
 |
 |
• |
Automatic setup or zero-configuration: Some devices provide automatic connectivity or zero-configuration options for users to instantly bind to those networks it detects in its service area. Turn off this feature if your company doesn't need it for specific reasons. |
 |
 |
• |
Integrated firewall: In lieu of a proper organization-wide firewall, use any onboard functionality related to perimeter defense. Wireless access points and routers generally provide this level of capability, and you should particularly be concerned where wireless contact meets the wire. |
 |
 |
• |
Product placement: Perhaps the most crucial aspect to functionality – and to some extent, security – of a wireless access point or router is in its placement. Keep devices well out of reach from anyone who could change its settings or inputs, preferably secured within an enclosure. Also keep the devices far from outside walls and windows, whenever possible, to prevent accidental extension of your network beyond your building perimeters. |
 |
 |
• |
Access cut-off times: You can regulate if and when wireless access is provided to clients. If your business has no need for Wi-Fi after closing hours, schedule periods of inactivity so the device isn't available during those times. |
 |