SIGforum.com    Main Page  Hop To Forum Categories  The Lounge    Network Gurus - Router Security Question
Go
New
Find
Notify
Tools
Reply
  
Network Gurus - Router Security Question Login/Join 
Member
Picture of erj_pilot
posted
Top o' the marnin'!! Really simple question this morning...

I have a Netgear AC1900 R7000 Router. I'm going through some small reset procedures and have a choice of Security Options:

WPA2-PSK [AES] or
WPA-PSK [TKIP] + WPA2-PSK [AES]

I understand WPA2-PSK is more secure, but does choosing the second option, which combines older security protocol to newer, diminish the security of the router? Would it be best to just go with [AES] alone, or will it matter?

Thank you, collective hive!!! Smile

Coffee time!!!



"If you’re a leader, you lead the way. Not just on the easy ones; you take the tough ones too…” – MAJ Richard D. Winters (1918-2011), E Company, 2nd Battalion, 506th Parachute Infantry Regiment, 101st Airborne

"Woe to those who call evil good, and good evil... Therefore, as tongues of fire lick up straw and as dry grass sinks down in the flames, so their roots will decay and their flowers blow away like dust; for they have rejected the law of the Lord Almighty and spurned the word of the Holy One of Israel." - Isaiah 5:20,24
 
Posts: 11066 | Location: NW Houston | Registered: April 04, 2012Reply With QuoteReport This Post
quarter MOA visionary
Picture of smschulz
posted Hide Post
quote:
Would it be best to just go with [AES] alone, or will it matter?


Yes do only AES
More secure and faster otherwise the alternative will allow lesser protocols and also slow you down.
 
Posts: 23408 | Location: Houston, TX | Registered: June 11, 2006Reply With QuoteReport This Post
Member
Picture of erj_pilot
posted Hide Post
Gracias, amigo!!! AES it is, then!!




"If you’re a leader, you lead the way. Not just on the easy ones; you take the tough ones too…” – MAJ Richard D. Winters (1918-2011), E Company, 2nd Battalion, 506th Parachute Infantry Regiment, 101st Airborne

"Woe to those who call evil good, and good evil... Therefore, as tongues of fire lick up straw and as dry grass sinks down in the flames, so their roots will decay and their flowers blow away like dust; for they have rejected the law of the Lord Almighty and spurned the word of the Holy One of Israel." - Isaiah 5:20,24
 
Posts: 11066 | Location: NW Houston | Registered: April 04, 2012Reply With QuoteReport This Post
member
Picture of henryaz
posted Hide Post
 
More security: If the router has any firewall capability, turn off access to the router from outside your network. The default passwords for consumer routers are well known, and even if you set your own password, most are easily hacked.



When in doubt, mumble
 
Posts: 10887 | Location: South Congress AZ | Registered: May 27, 2006Reply With QuoteReport This Post
Member
Picture of wrightd
posted Hide Post
How do you do that, what feature nomenclature to look for in the router admin pages ?




Lover of the US Constitution
Wile E. Coyote School of DIY Disaster
 
Posts: 9087 | Location: Nowhere the constitution is not honored | Registered: February 01, 2008Reply With QuoteReport This Post
member
Picture of henryaz
posted Hide Post
quote:
Originally posted by wrightd:
How do you do that, what feature nomenclature to look for in the router admin pages ?

In my Zyxel vdsl modem, it is under Advanced/Remote Management.



When in doubt, mumble
 
Posts: 10887 | Location: South Congress AZ | Registered: May 27, 2006Reply With QuoteReport This Post
quarter MOA visionary
Picture of smschulz
posted Hide Post
Most configuration access from the outside is turned off by default.
Usually found on the management page and will say something about remote configuration or access and can manually enable.
 
Posts: 23408 | Location: Houston, TX | Registered: June 11, 2006Reply With QuoteReport This Post
Member
Picture of wrightd
posted Hide Post
Oh you mean disabling wifi admin, requiring a cable only. I didn't know that was a firewall thingy.




Lover of the US Constitution
Wile E. Coyote School of DIY Disaster
 
Posts: 9087 | Location: Nowhere the constitution is not honored | Registered: February 01, 2008Reply With QuoteReport This Post
quarter MOA visionary
Picture of smschulz
posted Hide Post
quote:
Originally posted by wrightd:
Oh you mean disabling wifi admin, requiring a cable only. I didn't know that was a firewall thingy.

No, I believe he is talking about remote configuration of the device from the internet.
Leaving access only from the LAN side.
Not a wifi thing.
 
Posts: 23408 | Location: Houston, TX | Registered: June 11, 2006Reply With QuoteReport This Post
Member
Picture of wrightd
posted Hide Post
Ok. Thanks.




Lover of the US Constitution
Wile E. Coyote School of DIY Disaster
 
Posts: 9087 | Location: Nowhere the constitution is not honored | Registered: February 01, 2008Reply With QuoteReport This Post
  Powered by Social Strata  
 

SIGforum.com    Main Page  Hop To Forum Categories  The Lounge    Network Gurus - Router Security Question

© SIGforum 2024