Re: Wireless security

Andrew Heggie <sylva@xxxxxxxxxxxxx> wrote:

sarah wrote:

Yes. You'd need a password to join the network, and I would need to know
the MAC address of your computer to add to the router's 'Approved' list.
You'd also have to be able to enable WEP security (wireless
transmissions are encrypted to give some level of security).

Thanks Sarah, it begins to look a bit complicated for the typical B&B host.
I assume that the guest password would be entirely different from your
(w)root or host account password?

I need to find a life. Another life, soon... now, about that question.
The same password is used to give all computers (mine and guests) access
to the wireless network (ie the printer and 'the internet'). Guests
can't get access to any computers on the network unless they have Guest
Accounts on the machines, each of which would require a separate
password.

For example, Andy's laptop has full network access, with the wireless
network pwd and WEP phrase encoded in the setup for the 'Home' location.
He can only use that laptop, not any other, because my router checks the
laptop's MAC address against a list of permitted users. He also has an
account on one of my towers, which he can log into from the network (or
go upstairs and use the keyboard), using his own password to access his
own files. He has no access to my files on that machine, and no account
at all on the other tower or my laptop. A friend will be staying with us
next week; I'll give him network access once he gives me his MAC
address, but he won't have a guest a/c on the tower unless he needs one.


Could you log the MB used, in and out, during the session in order to
bill for it?

I certainly log traffic; I don't know about volume. On an uncapped
broadband connection I think a perMb charge is unreasonable; I might
levy a flat fee or a per hour charge, but then I'm not after making
money.

No you are not but the incentive for the B&B provider is to make money,
offering internet access for guests' laptops via their broadband connection
would be a service that guests would pay for, especially if their only
other means of access is via gprs or 3g at GBP1/MB.

One of my relaxations is reading e-mail and usenet, doing it via gprs is
hideously slow and expensive, which takes the fun out of it. Mind you soon
learn who's posts to ignore for their inability to snip.

I remember that from SDU. I'd have thought it would be simple enough to
charge the same swingeing hourly rate as an internet cafe or similar,
whatever that might be. The router stats easily tell me who's been on
and for how long.

all the best
sarah


--
Think of it as evolution in action.
.

Relevant Pages

  • Re: Networks
    ... In the light of my last comment above, I had a Mac in 1984, and in 1985 set ... up a network of five Macs by the simple means of plugging a cable into each ... >>> David Kelsey ... although many people seem to think computers should be as easy ...
    (microsoft.public.windowsxp.network_web)
  • Re: Unauthorised PCs
    ... IP lease to a mac address of a computers network adapter. ... If your switches can do mac filtering you may want to look at that. ... > Any ideas how I can prevent users picking up a dhcp lease when they plug ...
    (microsoft.public.security)
  • Re: SNORT: MAC Address Alert
    ... > of computers are gaining access to our network and picking arbitrary IP ... We have the MAC addresses of the ... Intrusion Prevention and Traffic Shaping Technology to: ... Precisely Define and Implement Network Security & Performance Policies ...
    (Focus-IDS)
  • Re: More on learning "Public Key Authentication"
    ... intermediate computers handling network connections on the Internet. ... as applied specifically to the Mac and OSX. ... I want to de-activate my entire OS X password system ...
    (comp.sys.mac.system)
  • Re: Network Security
    ... >>I've been tasked to protect out network from unwanted clients ... > configure the DHCP server to only give out addresses to specific MAC ... > that says no visiting computers. ... >>not 'known' to us then we can stop it getting an IP from the DHCP server? ...
    (linux.redhat)
Loading