Log in

View Full Version : Wireless security and PPCs: Encryption stds & MAC addresses


martin_ayton
01-12-2005, 10:14 PM
I would like to set up my new PPC (Xda2s / MDAIII) to connect to my home wireless network. However, I do like to have some security on my home network so it is currently set up with:

1. WPA-TKIP encryption
2. MAC address filtering

I'm guessing that the PPC won't cope with the first, so I'll have to revert to WEP. Is that correct? How big a key can the PPC handle?

I really don't want to lose the MAC address filtering, but I just can't find the MAC address of my PPC. Anyone know where I should look?

that_kid
01-13-2005, 01:26 AM
I'm not sure about the xda's but I know my ipaqs have no problem with WPA, as a matter of fat I use WPA with a certificate/radius backend. You may want to check and see if those devices support WPA. As far as mac address filtering, I won't go into how easy it is to get and clone a mac address but a quick and free way to find your mac address is to download VxIPconfig (http://cam.com/vxipconfig.html)

Jorgen
01-13-2005, 09:23 AM
The pda can handle 128-bit WEP keys.

Your wireless program should show it somewhere (where you ping to a computer if not on the first page?). If no joy, get vxutil (good to have anyway) from http://www.freewareppc.com/communication/vxutilpersonal.shtml.

I would have thougt that your router would pick up the PDA's IP address so you just click to authorize it.

Jorgen

martin_ayton
01-13-2005, 12:06 PM
I would have thougt that your router would pick up the PDA's IP address so you just click to authorize it.


Doh! Yeah, that would be the obvious way wouldn't it? I'll try engaging (what's left of) my brain in future :roll: .

As far as mac address filtering, I won't go into how easy it is to get and clone a mac address


I know (in theory only, honest) that MAC spoofing is supposed to be really easy but I'm working on the basis that, for my home network, anyone who is going to sit outside my house and spend enough time to crack the encryption and spoof me is going to be:

a) Really obvious (it's a quiet neighbourhood)
b) Welcome to the connection

It's a bit like having a car alarm - it doesn't do anything to deter the determined thief, but it makes me feel better!

that_kid
01-13-2005, 01:13 PM
Have you made any progress in getting your device connected?

martin_ayton
01-13-2005, 02:15 PM
Not yet. I'm at work now. I'll try tonight and let you know. :)

martin_ayton
01-14-2005, 12:26 AM
Have you made any progress in getting your device connected?

My PPC (Xda2s) found the network, set itself up for WPA-PSK (TKIP) and asked for the key. I entered that and set the PPCs MAC address up on the router (a netgear DG834G) - Thanks, Jorgen. The connectivity box which pops up when you hit the aerial/signal strength icon at the top of the screen showed 'Wi-Fi' and three green bars against 'The Internet.' Great!

All seemed cool, except that the Wireless LAN manager on the PPC now permanently showed 'Status: Connecting to network' and nothing in the signal strength bar - worrying.

I tried firing up PIE, but got 'Page could not be found' errors.

I went into 'Configure Wireless Networks' and my home network SSID was shown as 'Connected'

I notice that under the 'Configure Network Authentication' Page, the 'Use IEE802.1x network access control' is checked, but greyed out. I do not use any such access control on my network. How do I turn this off?

I have tried assigning a network IP address, subnet mask, default gateway address, DNS and Alternate DNS adresses in the two most likely looking network adaptors - the 'NE2000 Compatible Ethernet Driver' and the 'tiacxwln Compatible Wireless Ethernet' but to no avail.

I once read a post suggesting that IT equipment should be able to pass the 'Dad test' - i.e. could my Dad set this up with no help? This one fails that test miserably :( .

I am now stumped. Any help gratefully received. :puppydogeyes:

Jorgen
01-14-2005, 09:12 AM
my home network SSID was shown as 'Connected'

Eh? Set your SSID to what it should be. (it is case sensitive so make sure you have the same on the ppc and router).

Your ppc should be set to infrastructure.
Untick "use powersavings mode" (until everything works)
Make sure WEP is disabled

Jorgen

martin_ayton
01-14-2005, 11:51 AM
my home network SSID was shown as 'Connected'

Eh? Set your SSID to what it should be. (it is case sensitive so make sure you have the same on the ppc and router).


Sorry - I was unclear. My network SSID was correctly shown automatically AND the PPC said it was 'connected'

I have disabled power saving. At the moment, all the network encryption (WPA-PSK [TKIP]) is still set. Are you suggesting that, until I get this working, I should remove all the security on the network and then rebuild it once I have a functioning connection?

Zoot
01-14-2005, 12:35 PM
I'd temporarily ramp down the security to ensure you can connect and then ramp it back up so that you can identify where the problem lies :)

Jorgen
01-15-2005, 10:06 AM
I should remove all the security

Yes. WEP can be a problemmaker and should be done when everything else works.

Start with MAC addresses. Then take off broadcasting of SSID (if your router support this). Then connect powersaving on the PPC (or do that last if you prefer). Lastly, set WEP.

Jorgen