1. Wireless Authentication - This is a huge part of why wireless networking is so secure, you know exactly who is accessing your LAN. With out a RADIUS Server anyone who has happened upon your passpharse has open access to your WLAN. IF someone steals your passphrase some how they won't be able to access your lan because they still need user creditials. 2. Wireless Policy - You can set any number of policies you like but my favorite is limiting the time and days that users can access the wireless network. Most often if a hacker is going to try and crack your network it's going to be at night, so don't let users authenticate at night or on the weekends. 3. DMZ or Subnet - You can assign wireless clients to a subnet that is locked down or keep them in a DMZ. If a hacker starts probing the network he won't be able to see much. 4. Limit Access time - You can limit your access time of wireless clients. If a hacker can't hack the LAN he might try to hack the wireless clients, kick idol users off after couple hours. 5. Per user or group Control - You can give specific users certain access or you can give whole groups different access policies. A common senerio is that you have contractors or out of town sales employees visiting and need temporary access to the wireless network. You won't want to let them have the same access that the normal employees do so limit them as needed. I will be posting a tutorial soon about how to setup a wireless RADIUS server |
Site Home
