7-3 Wireless Security Explained

Wireless security is crucial for protecting data transmitted over Wi-Fi networks. Understanding the key concepts of wireless security is essential for the MikroTik Certified Network Associate (MTCNA) certification.

Key Concepts

1. Encryption Protocols

Encryption protocols secure wireless communications by converting data into a format that cannot be easily understood by unauthorized users. Common encryption protocols include:

• WEP (Wired Equivalent Privacy): An older and less secure protocol.
• WPA (Wi-Fi Protected Access): An improvement over WEP, offering better security.
• WPA2 (Wi-Fi Protected Access II): The current standard, providing strong encryption.
• WPA3 (Wi-Fi Protected Access III): The latest standard, offering enhanced security features.

2. Authentication Methods

Authentication methods verify the identity of users attempting to access the wireless network. Common methods include:

• Pre-Shared Key (PSK): Uses a passphrase to authenticate users.
• Enterprise Authentication: Uses RADIUS servers for more secure authentication.

3. MAC Filtering

MAC filtering allows or denies access based on the Media Access Control (MAC) address of the device. Each network interface has a unique MAC address.

4. Hidden SSID

Hiding the Service Set Identifier (SSID) prevents the network from being broadcast, making it less visible to potential attackers.

Detailed Explanation

Encryption Protocols

WEP is outdated and vulnerable to attacks. WPA and WPA2 use the Advanced Encryption Standard (AES) for stronger encryption. WPA3 introduces additional security features, such as forward secrecy and improved password protection.

Authentication Methods

PSK is simple and widely used, but it can be compromised if the passphrase is weak. Enterprise authentication, using RADIUS servers, provides a more secure method by requiring additional credentials and centralized management.

MAC Filtering

MAC filtering can enhance security by limiting access to specific devices. However, MAC addresses can be spoofed, so it should be used in conjunction with other security measures.

Hidden SSID

Hiding the SSID can deter casual attackers by making the network less visible. However, determined attackers can still discover the SSID through other means, so it should not be relied upon as the sole security measure.

Examples and Analogies

Example: Encryption Protocols

Think of encryption protocols as locks on a door. WEP is like a basic lock, easy to pick. WPA is like a combination lock, harder to crack. WPA2 is like a high-security lock, very difficult to break. WPA3 is like a modern, tamper-proof lock, offering the highest level of security.

Example: Authentication Methods

Consider authentication methods as access control systems. PSK is like a simple key, easy to use but can be lost or stolen. Enterprise authentication is like a biometric system, requiring unique identifiers (fingerprints, retinas) for access.

Example: MAC Filtering

Imagine MAC filtering as a guest list at a party. Only those on the list (authorized devices) are allowed in. However, someone can pretend to be on the list (spoof their MAC address) to gain entry.

Example: Hidden SSID

Think of hiding the SSID as keeping a party invitation private. While it makes it harder for uninvited guests to find the party, determined individuals can still discover the location through other means.

By mastering these wireless security concepts, you can protect your Wi-Fi network from unauthorized access and potential threats, ensuring a secure and reliable wireless environment.