laptops
How to prevent unauthorised laptops from accessing my wired lan network ?
How do I prevent unauthorised laptops from accessing the wired lan network – the wired lan network has about 10 machines on it – 9 desktops and 1 laptop. I want to prevent unauthorised laptops from plugging in physically to the network – by removing the CAT 5 cable and plugging in the same to the laptop – and then accessing information on the entire network.
The best way to protect your network is to use explicit access control based on Media Access Control (MAC) addresses that a uniquely identify each network interface. Most broadband routers have such access control feature readily available, but the degree of simplicity to configure and enable them depends on make/model and firmware revision of the router. You’ll need to consult the documentation for specific instructions for “Access Control” and/or “MAC Filtering” for wired and wireless services.
Securing the wireless portion will be relatively easy: Choose the most advanced algorithm and the longest encryption key possible. WPS is the latest and simplest technology (pretty much all systems made in the last 2 years support it), followed by WPA2 and WAP (which has 1 known vulnerability that occurs only in 1 specific type of configuration). Avoid WEP – it’s relatively easy to crack (but it’s better than nothing, as outlined in the article “Securing your wireless network” listed in the sources below).
I would suggest the following measures:
1.Change the administrator password to a non-default password.
2.Don’t broadcast your SSID (so it won’t show up in a network list).
3.Change channel from default (unless your router is capable of sensing conflicts).
4.Reduce your Wifi transmitting power (reduce the area of coverage to a minimum).
5.Use MAC filtering for access control.
6.Use the most sophisticated encryption available.
7.Use a non-default IP address range (e.g. 192.168.121.x or 192.168.137.x is better than 192.168.0.x or 192.168.1.x because these ranges are harder to guess)
For the wired ports, things are a bit more complicated (and again depend on make/model and firmware revision of your router and switches): There is usually less security on wired connections because of historical evolution and an assumption that physical access can be limited to trusted people. So, let’s start with physical access: Put all routers, switches and modems into a lockable room (or a lockable cabinet with sufficient ventilation). Try to protect CPUs and wall outlets so that there is no easy access (i.e. expose only keyboard mouse and monitor and hide the CPU and network connections in cabinets).
If you cannot physically protect the network connections (i.e. somebody can unplug a cable either at the computer or a wall outlet), you can implement some logical measures but these are somewhat limited with consumer-level hardware (because of costs and the fact that such devices are meant to enable access rather than prevent it). In some cases, routers also apply the above mentioned MAC filtering rules to wired connections. This would be your first line of defense.
However, on hubs and simple Ethernet switches, the data traveling on the wires can be seen by all devices on the network. This makes it relatively easy for a cracker to install a packet sniffer, look into the traffi and learn what devices are attached. The cracker then can configure his or her system to pretend it was a legitimate system – a process that is called “spoofing.” That’s why in high-security environments use more sophisticated ethernet switches (for example the Cisco 3550 series) that enable and disable physical ports and authenticate attached systems and their users based on access control systems like Tacacs+ or Radius. Taking advantage of such features requires authentication servers and software installed on the client systems that deal with the challenge/response mechanisms (additional hardware and software = additional costs).
Security is a trade-off based on a cost/benefit analysis (how much security do you need and how much time and money are you willing to spend on implementing and maintaining it compared to how much you could actually lose in terms of stolen data or stolen services). By the same token, cracking networks is also subject to a cost/benefit analysis: How much time and effort is a cracker willing to spend to intrude a network.
At the end of the day, no security measure is perfect and all networks can be cracked. It’s sensible to protect yourself by setting the bar as high as possible. So, I hope my answer provides you with some insights and guidelines for securing your network as good as possible with what you already have.
17 Inch Laptops – Approximately Never-Ending Opportunities
I have discovered such excellent deals on 17 inch laptops. Just about all the latest brands and makes are available. I have never had a superior computing experience than on my 17 inch laptop. The screen is apparently bright and beautiful, and I can watch DVD’s and streaming video recording in high quality, check out my email, and also download new gaming titles and favorite songs.
I have used smaller sized laptops with smaller sized screen, but the quality is so poor; you will surely receive what you pay for. With a 17 inch laptop, you are able to get full sensational wide-screen viewing, which is an important improvement from the smaller models. The actual experience is outstanding, web-surfing and video clips will not be the same. Using netbooks or other smaller sized models, almost everything was so confined together, it was almost impossible to see anything.
But then on a 17 inch laptop, the quality is beyond comparison. There are many deals and offers which can be found online where you can find 17 inch laptops for cheap. With local retailers, you will probably pay a premium price. I ordered my laptop online without any problems; it shipped fast, and shipping was cheap. I don’t feel sorry making the choice to purchase my laptop online.
I mainly use my 17 inch laptop for work, games, as well as for other office purposes like doing my taxes, or checking stocks online. My children regularly use our 17 inch laptop for enjoying games, browsing the net, and also downloading music and movies. What’s fantastic about a 17″ laptop is that you can take it everywhere, home and abroad.
I took mine with me on my vacation, and sat and used it on the beach! That is something couldn’t do with a desktop computer, and also something that wouldn’t be enjoyable on a tiny netbook. In my opinion, 17 inch laptops are definitely the way to go.
Jaya hands out laptops, cattle to voters
