Upgrade Wi-Fi security from WEP to WPA2

We already know that WEP security is very easy to crack, this security technology only protects your wireless network from ordinary users. Also, for hackers, even new hackers can download free tools and follow some instructions to crack your WEP key. After the lock is broken, hackers can connect to Wi-Fi networks and access shared resources on your network. In addition, hackers can decrypt real-time traffic on the network.

For that reason, we need to use the safest technology to protect our wireless network: Wi-Fi Protected Access 2 (WPA2), which uses encryption AES / CCMP. There are two types of WPA and WPA2: Personal technologies or Pre-shared Key (PSK) for home and Enterprise users.

Personal mode is easy to install and use. You can create an encryption key (like a password) on a wireless router or access point. Then enter this key on computers and devices to connect to the Wi-Fi network.

The Enterprise mode is much more complex and requires an external server, which is called a RADIUS server, to enable 802.1X authentication. However, this mode is suitable for use in businesses. You can create usernames and passwords for users to use when connecting. Real encryption keys are not stored on computers and devices, thus protecting your network better if they are lost or stolen.

When using Enterprise mode, you can revoke user access when they are not working at your company anymore. If you use Personal mode, you will have to change the encryption key (on all access points and all computers) every time a machine or a device is lost or stolen and when there are certain employees. leave the company.

Check out the current security method

If you are not sure about the security method you are using, check it out quickly in Windows by going to the list of available wireless networks.

In Windows XP (here is Service Pack 2 at least), networks that use some of these security types will have a secure message. If you are using WPA or WPA2, the message will be displayed in parentheses, the rest will be the case of using WEP. In Windows Vista and Windows 7, you just need to hover your mouse over the network that is in the list to view detailed information, which includes security.

Validate WPA2 compatibility

Most Wi-Fi products manufactured since 2005 support WPA2. If there is a wireless router, access points, computer or other Wi-Fi devices manufactured before 2005, you need to check if your device supports WPA2.

To check if the wireless router or access point supports WPA2, enter its IP address into the web browser, log in to the control panel and check the wireless settings.

Note : If you don't know what the router's IP address is, call the Wireless Network Connection Status dialog box in Windows, click the Details button , and then refer to the Default Gateway section. See figure 1.

Note : If you do not remember the password, please refer to Google user guide or search to get the default password. If you have changed the default password, you can reset the factory default password by holding the small reset button at the back of your router or wireless access point.

If you don't see WPA2 in the wireless security settings of your router or wireless access point, you may need support from additional factory software updates. In the control panel, find the system and status information to check the installed version of the software. Then go to the support section of the manufacturer's website and check the available desktops for your model. If any new software is released for the device, download it and upload it via the software page on the control panel.

If you have some Windows computers, install Service Pack 3, which is a WPA2 supported version. Click Start, right-click My Computer , select Properties . If you have Service Pack 3 installed, you will see the words 'Windows XP Service Pack 3' . If you don't see it, download and install it using Windows Updates.

If you are using an old wireless adapter, this adapter may not support WPA2 if Windows supports it. To check its support in Windows XP, open the Wireless Network Connection Properties dialog box , select the Wireless Networks tab, click Add . Make sure WPA2 is available in the drop-down menu in the Network Authentication section. See Figure 2.

If you don't see WPA2, you can find support from the driver updates by the manufacturer. Check the version of the installed driver: Open the Wireless Network Connection Properties dialog box in Windows, click the Configure button, select the Driver tab. Then go to the manufacturer website support and check the downloads corresponding to your device model.

If you have a newer driver version, download and upgrade by following the manufacturer's instructions or via the Driver tab.

Using WPA2-Personal (PSK)

To enable WPA2-Personal security, you need to enter the wireless router's IP address or access point into the web browser, log in to the control panel, and then find the wireless security settings.

If you don't know the router's IP address or don't remember the password, please refer to the notes in the previous section.

When you find the wireless security settings section, select WPA2 security and AES encryption . Then enter 8 to 63 characters as the Pre-Shared Key or Passphrase . Be aware that the longer the password and the more complex your security is. In addition, it is recommended to use both uppercase and lowercase characters as well as the digits in the password. Write down the password and save it in a safe place. Finally don't forget to save the changes you just made.

You must now enter the same password on Wi-Fi-equipped computers or devices. In Windows, you will be prompted to enter this information when connecting. However, if you have ever used WEP or WPA, Windows may not connect until you fix saved security settings:

In Windows XP, double-click the wireless network icon in the upper corner, click Change the order of preferred networks . Then click the network name and change Network Authentication to WPA2-PSK , Data Encryption to AES and enter the password twice in the Network Key field. See the figure shown in Figure 4.

In Windows Vista and Windows 7, summon a list of available wireless networks, right-click on a network and select Properties . Then change Security Type to WPA2-Personal , Encryption Type to AES , enter the password as the Network Security Key .

Use WPA2-Enterprise

Before you can use WPA2-Enterprise, you must select and install a RADIUS server. If you already have a Windows Server, you will be able to use IAS or NPS server. Other RADIUS servers include FreeRADIUS, Elektron and ClearBox. Note that some enterprise class access points (such as ZyXEL ZyAIR G-2000 Plus v2 will have integrated RADIUS servers). If you don't have the budget or don't have much experience in running a private server, you can use it through a hosting service, such as AuthenticateMyWiFi.