Network Protection, Wired Intrusions

Hi,
I'm looking for suggestions on how to protect my wired network from intrusion. We have people over all the time and I want to prevent someone from being able to freely plug into an ethernet port within my home and access my network.
I understand how mac address filtering works, but this is only effective for wireless access.
Thanks.

The router is designed for use in a home or small office. It assumes that people who come to your home are trustworthy. So, with a single router, there is no protection against wired connections.
You can protect your network using 2 wired routers.
modem --- public router --- private router.
192.168.1.1 192.168.2.1
The only probem with this sysem is that if you forward ports (for gaming, etc), you will need to forward those ports through both routers. Users on the public router will not be able to access anything on the private router. You will still need to keep the private router locked up to prevent people from connecting to it.

Similar Messages

No longer any network connectivity wired or unwired for T520 laptop

I have a Thinkpad T520, and both wired and wireless network connectivity worked fine until a couple of months ago. Then, at about the time I installed a lot of Windows updates, both wired and wireless connectivity no longer works.
A green light displays at the ethernet cable plug, as well as an slow-blinking orange light. When I type in command ipconfig/ all I get Host Name: [Allen Laptop 1], Primary DNS Suffix [blank], IP Routing Enabled [No}, and WINS Proxy Enabled [No]. I have tried power-cycling the router, to no avail. Other computers connected to the same router have no connectivity problem.
I have tried re-installing ethernet drivers, and I get a message that the new drivers are the same as the existing drivers. When I try to re-install Intel Centrino and Wimax drivers, I get a message that the Centrino drivers are ready to use, and that the Wimax drivers failed to install (I had this problem when I first bought the machine in 2011, re the Wimax drivers, and I'm not sure it ever was resolved).
In Windows 7 Device Manager, there are exclamation marks next to everything listed under Network. Messages say no drivers installed.
Is it possible that both the wired and wireless laptop hardware both went bad at the same time, or is it more likely that a Windows or other update may have disabled a needed Service or corrupted a needed file? What might I try next?

I have a Thinkpad T520, and both wired and wireless network connectivity worked fine until a couple of months ago. Then, at about the time I installed a lot of Windows updates, both wired and wireless connectivity no longer works.
A green light displays at the ethernet cable plug, as well as an slow-blinking orange light. When I type in command ipconfig/ all I get Host Name: [Allen Laptop 1], Primary DNS Suffix [blank], IP Routing Enabled [No}, and WINS Proxy Enabled [No]. I have tried power-cycling the router, to no avail. Other computers connected to the same router have no connectivity problem.
I have tried re-installing ethernet drivers, and I get a message that the new drivers are the same as the existing drivers. When I try to re-install Intel Centrino and Wimax drivers, I get a message that the Centrino drivers are ready to use, and that the Wimax drivers failed to install (I had this problem when I first bought the machine in 2011, re the Wimax drivers, and I'm not sure it ever was resolved).
In Windows 7 Device Manager, there are exclamation marks next to everything listed under Network. Messages say no drivers installed.
Is it possible that both the wired and wireless laptop hardware both went bad at the same time, or is it more likely that a Windows or other update may have disabled a needed Service or corrupted a needed file? What might I try next?

WiFi Network and Wired Network

In your opinion, what would be the best configuration of a combination WiFi and wired network. Here's the situation. In my apartment, my living room is very close to my office, WiFi converage is good from the LR to the office where I have my servers and internet connection etc. But in order to provide stellar performance, I wanted to add an Access Point or Airport Express in the LR to make the signal that much better.
In this situation, would you have the Internet Modem, Time Capsule, in the office and the Airport Express in the LR? I'm assuming that would provide the best wireless coverage for the entire apartment. My only concern is the speed accessing the Time Capsule as well as the 1TB NAS as well as SAN File Storage connected to the core switch I have in my office, which is a Cisco 3750G (10/100/1000) over WiFi. I think this would be the best solution. Thanks.
-Slevin

SlevinKelevra wrote:
In your opinion, what would be the best configuration of a combination WiFi and wired network. Here's the situation. In my apartment, my living room is very close to my office, WiFi converage is good from the LR to the office where I have my servers and internet connection etc. But in order to provide stellar performance, I wanted to add an Access Point or Airport Express in the LR to make the signal that much better.
But how is the AP linked back to the office.. if you are wireless repeating.. then you lose whatever you gain.. and probably worse than lose.. you introduce double hop wireless.. This is only going to work if you have ethernet link.. and then Express should be replaced by Extreme.. as Express still uses 10/100 port. Decent wireless should saturate that. (Seldom does.. but if you are doing calcuations I am sure you can see the problem).
Do you get decent 5ghz in the LR?? The key to fast wireless is using 5ghz especially in apartment complex where you are probably surrounded by 2.4ghz wireless.
If the current equipment does not allow you decent 5ghz connection.. strongly suggest you run a single ethernet between the office and the LR and use that.. with Extreme or better AP..
If you want to start wireless bridging at 5ghz.. look at ubiquiti stuff.. it is head and shoulders above domestic standard equipment for not too big a premium.

Is the level of protection from intrusion, malware, viruses, and trojans materially better when using a Sonicwall TZ 105 with a MacBook Pro with OS X 10.8.5 than with a properly configured MacBook Pro alone?

One of our IT engineers at work mentioned the security of our home networks could be substantially improved by using a properly configured Sonicwall TZ 105 with the comprehensive security option (sold as a separate item from the Sonicwall hardware). I am interested in the experiences and advice of any MacBook Pro users who have such a device in their home networks. Is the protection the device and the add-on monitoring afford that much greater than that of a properly configured MacBook Pro running OS X 10.8.5, and in general, even if the security provided is significantly greater, is it necessary for the home user or is it overkill?
Thank you

One of our IT engineers at work mentioned the security of our home networks could be substantially improved by using a properly configured Sonicwall TZ 105 with the comprehensive security option (sold as a separate item from the Sonicwall hardware). I am interested in the experiences and advice of any MacBook Pro users who have such a device in their home networks. Is the protection the device and the add-on monitoring afford that much greater than that of a properly configured MacBook Pro running OS X 10.8.5, and in general, even if the security provided is significantly greater, is it necessary for the home user or is it overkill?
Thank you

Extending and airport extreme network with wired connection to a express

I am getting fed up of deadspots in my house that now seem to have become much worse recently. After giving up on configuring my extreme router to avoid issues I now want to extend the network.
If I put in a network cable from the extreme router to an airport express on the other side of the house can this be configured to be the same wireless network?
I know express routers have an option of extending the network is this for wired or wireless or both and if I do this will it show up as one wireless network with no interference issues?. At the moment I am planning on getting an express airport and using some of those power cable ethernet adapters to link the two routers up should this work okay?
Many thanks
Andy

Welcome to the discussions, Andy!
If I put in a network cable from the extreme router to an airport express on the other side of the house can this be configured to be the same wireless network?
Yes, post back if you need more details about this.
and if I do this will it show up as one wireless network with no interference issues?
There will be no interference issues between the AirPort Extreme and AirPort Express. However, if you live in an area with a number of other wireless networks around you, or you have cordless phones, there may well be some interference issues to tackle.
I am planning on getting an express airport and using some of those power cable ethernet adapters to link the two routers up
That should work assuming that both ethernet powerline adapters will be on the same master electrical circuit. I would suggest that you get a clear understanding of the store's return policy though...just in case.
Message was edited by: Bob Timmons

Networking with wired abd wireless comp's

I have a G5 (wired). a G5 (wireless) and 5 wireless iMacs. All the iMacs and the wireless G5 can access each other and the wired G5, but the wired G5 cant access anything (all the comps including the wired G5 can access the internet). The wired G5 and the Airport Express are conected to a 4 way WAN/LAN router which is attached toi a DSL Modem. Anyone got any advice on why the wired G5 cannot see the other Comp's. All the other comp's can see the wired G5 !?
Any help would be appreciated, also, maybe someone knows if there already exists a post which covers this ?
Dual 2.3Ghz G5 Mac OS X (10.4.5) imacs and another Dual G5

I'm having problem also connecting to anything with wire. Ethernet especially. Have bought new hub, new cables with no luck. In network preferences. Modem shows unplugged (but it is). However, I can send fax's and sign on with dial up with modem. The ethernet is showing not plugged in. And cannot get a positive light on any device.
I have not been able to use ethernet since 10.4.3. I think it is a software issue. Or Bonjour is gone on vacation one.
My 2 cents.
Don

Extreme Network Slowdown (wired)

So I just got a new Airport Extreme Base Station (n) to upgrade my old linksys router.
If i hook my MacPro up to my cable modem directly I get super fast speeds.
Once i hook up the Airport Base Station all internet traffic slows to a crawl (from 1.5 down to 35kb)
Does anyone know what would be causing this?

The two reasons for wired network slow-down that I've found:
1. 7.2.1 firmware... your options are to either downgrade to 7.1.1 (you can find instructions on this forum if you search for them) or try #2
2. Not 100% sure if this will work, but it may be worth a try before you change around your firmware. I've read that other people have simply moved their internet connection from their WAN port to one of the 3 LAN ports... and poof, after rebooting the APBS they get their expected speeds.
Good luck.

Network protected by WEP

Hi all!
I'm new to the Archlinux forum. I have a problem with my wireless network: I can't access to it with the wep authentication activated. If I switch off the authentication there aren't problem...
For wireless connections I use network manager and I tried wicd with same results.
I tried to start network manager from terminal and, during the connection attempt, I saw this message:
While connecting to session manager:
Authentication Rejected, reason : None of the authentication protocols specified are supported and host-based authentication failed.
Before Archlinux I used Ubuntu 7.04 and 7.10 and I have never had problems with wireless connections.
What can I do?
Thanks!

On internet I discovered that this message isn't important for wireless connection... It is caused by other events (it seems to be by the kernel).
Today I noticed another message:
:: Casa up [BUSY] Error for wireless request "Set Encode" (8B2A) :
SET failed on device wlan0 ; Invalid argument.
- Could not set wireless configuration [FAIL]
I tried netcfg without positive results and this is the error message. I tried network manager with WPA too, but I can't access my wireless network.
What do you think? It seems to be that Archlinux can't use encryption with my wireless usb pen. I use ndiswrapper for drivers and under Ubuntu I hadn't problems...

Unable to activate ethernet port to bridge airport network to wired clients

Hi,
I have two AE setup in a WDS arrangement. The WDS is working fine. My problem is that I want to connect wired clients to the remote station; but everytime I select "Enable ethernet port" and restart the AE, the option is unchecked and the ethernet port is disabled.
Can you help?
Many thanks,
David.

... everytime I
select "Enable ethernet port" and restart the AE, the
option is unchecked and the ethernet port is
disabled.
I saw similar behavior in my setup. I seem to have gotten it working now.
Finally, I actually attached an ethernet cable and wired client to the AE Ethernet port (instead of just trying to configure it without an actual client connected, which I tried several times). After that, when I checked the box for Enable and restarted the AE, it worked.
Did you get yours working?

Network Manager - wired connection

Hello.
At my dormitory I'm trying to automatize connecting to a local network. So far I've been
connecting to the network using this sequnce of commands:
$ sudo ifconfig eth0 up
$ sudo wpa_supplicant -Dwired -ieth0 -c /etc/kolejnet.conf -B
$ sudo dhcpcd eth0 up
It's kind of anoying.
I'm trying to get my Network Manager working but it seems that somewhere is a problem
but I don't know what it is. This is how is my file "/etc/NetworkManager/system-connections
/kolejnet" supposed to look like:
[802-3-ethernet]
duplex=full
mac-address=f0:de:f1:8:1a:a1
[connection]
id=kolejnet
uuid=3146f80e-9643-4de3-a037-6ef7e8adc888
type=802-3-ethernet
timestamp=1317798337
[ipv6]
method=auto
[802-1x]
eap=ttls;
identity="my username"
anonymous-identity=pizet
ca-cert=/etc/ssl/certs/vpn-sisal.pem
phase2-auth=pap
password="my password"
[ipv4]
method=auto
If everything is in here correct, what could the problem be?

The title says "have internet until ...", so apparently you have something else running to handle the connection. You can hope that NetworkManager will somehow find and kill this other network management tool, but a saner approach is to stop/kill it yourself before you start NM.
Note that I don't know much about steam, so there might be a better solution that allows you to continue to use your current tool (instead of NM).
And you should turn to the journal if you want to see log messages for NM.

How to access files from two computers on a network, one wired and one wireless?

I cannot seem to access one computer from the other. I have marked files for sharing, and both show the same work group. How do I make sure both computers are installed on the router?

Make sure that both computers can access the Internet through the router.
If your router has a setting for "AP isolation", verify that it is set to "disabled".
As long as you do the two things mentioned above, your router does not put up any barrier to file sharing. So then the problem is not a router problem, it is a Windows problem, or a firewall problem.
To check for firewall problem, first, make sure you can ping each computer from the other - if you cannot, then temporarily turn off your software firewall, including Windows Firewall, and see if that helps.
If you still have problems after the firewall is off, then your problem is likely a Windows problem. Make sure "file and printer sharing" is enabled on all your wireless adapters and ethernet cards. If you continue to have problems, then usually the Windows support website has the best info on how to further proceed with fixing this type of problem.
Hope this helps.

I want to switch from my wireless network to wired using ethernet. What do I need to do?

I am currently connected wirelessly, but plan to hard-wire the Apple TV to my Internet instead. What do I need to do to do that, just plug the ethernet cable in? The cable company is coming tomorrow.

Oh yes ... I will be using an ethernet cable too; I just wanted to know if I need to do anything in settings on the Apple TV, or whether it will automatically connect itself and I won't have to do anything else.

Using NAP/NAC to Protect Network Resources

Hello,
I'm intending to create ACL in a Layer3 Switch to project our network resources and enhancing the security of our network resources.
Instead of creating plenty of ACLs in the switch, is it possible to use NAP/NAC to protect these resources and allow only certain resources available to our users?
Regards,

Hi,
DHCP NAP can be used to modify the routing table, so you could limit access to an IP address, but you can't use it to limit access to specific ports (i.e. web services on 80 and 443). This requires a firewall or ACL.
I think that for what you want you will need to configure an extended ACL on the switch.
Please read the link I gave above (http://technet.microsoft.com/en-us/library/dn425037.aspx). This shows how to assign specific IP addresses to certain types of client devices. You can
then use the ACL on the switch, or a firewall, to filter access based on source IP address.
You might also went to spend time making a list of all the devices on your network, including the type of network access (wired, wireless, or both) they have, and the users (staff, student, other) that have these devices. If possible, group the devices into
2 or 3 basic groups and decide what kind of network resources they should have access to.
If you want to filter based on user group, you will need to implement some kind of authentication method, such as 802.1X with PEAP/MSCHAP v2 or PEAP/TLS. If you don't understand these methods yet and haven't been using 802.1X you should spend some
time reading about it.
http://technet.microsoft.com/en-us/network/bb545365.aspx
I hope this helps,
-Greg

Time Capsule - Can it run as DHCP router, create a wireless network and plug into switch for wired network all at the same time?

I have a closet with Wired connections from all over the house terminating in it. I also have the internet modem and a switch in this closet. My old setup was a netgear in the closet creating a wireless network and also feeding the Ethernet ports all over the house. In my room, I had an Airport express (a month old) bridging the wifi to make the wifi network larger. The Express was hard wired from the wall and my mac mini was using it's wifi (printer was plugged into other ethernet port). Everything was working great.
Fast forward to last week. My Netgear died. So, I bought a time capsule. My plan was to move the Express to the closet and have it create the wifi network and also then run cat 5 cord from express to the switch to feed all the wired wall plugs. Reset it and set it up to create the wifi network as well as DCHP NAT. Wireless was running great on it. Then I plugged in the Cat 5 in the second Ethernet Port to the switch. Wifi stopped working and none of the computers would connect using wired connections either. They would see a 'network' but nothing would work. I would unplug the Cat 5 feeding the swtich and the wireless would start working again. Plug the Cat 5 back in and wireless would stop.
So I thought I would try the Time Capsule in the closet and see if I could get it to work. Pretty much the same thing, except at this point I figured out if I went in and told it NOT to create a wifi network the wired portion worked fine and all the wired computers in the house worked fine. Of course, then I didn't have Wifi.
I'm not clueless when it comes to networking, but I can NOT figure this out! Can either the Time Capsule or Express Create the wifi network AND also feed the data to the switch for all the wired computers?
To simplify this is what I want my end result to be. I prefer the Time Capsule to be the wireless connection extender, but if I have to have the Express do it, I'm fine with that.
1. Express in the closet creating the wifi network as well as feeding the data to the wired connections via my switch.
2. have the Time capsule in my room at the opposite end of the house plugged into the hard wired connection to extend the wrieless network as well as have wired connections such as my printer and my Mac Mini.
If I can get #1 to work, I don't think I'll have any problems with #2. Help!

I have an equally complex setup with a managed switch actually but I have never seen the TC have this kind of issue.
What I do notice is you have changed the TC from defaults.. you are using a non-default IP range.
I have run across issues like this where people move things from default.
I would like you to start over.. factory reset the TC. That will set it back to default router mode.
Do the min setup on the TC..
1. Change all names from what you were using. That includes the TC name and wireless name/s
Make them short, no spaces and pure alphanumeric because that is the correct way to network. Apple default names with spaces and apostrophes are fundamentally bad.
2. With just the TC plugged into the switch.. and a single computer connected by ethernet. Power cycle the whole network.. this allows the switch to clear all the old MAC address.
3. Test on the computer just ethernet. Turn the wireless off.
The computer must use dhcp and must get an ip from the TC.
It has to get the correct Router.. ie Gateway.. I wish apple could stick with proper network terminology.
And it must get same address or valid DNS server address/es.
If it fails.. please plug ethernet directly to the TC.. bypassing the switch.
You should get the standard IP addressing and internet connection.
If not please post the screenshot from the Mac of the network preferences showing the ethernet setup.
I need to see what address it does get. I need you to make sure the ethernet is the TOP of the list. So rearrange the order of network connection. With the airport off it should just go to the top of the list.
If it appears to be working .. but a browser cannot connect, open a terminal and ping an internet address.
Ping the actual gateway address the ISP gives you and ping the ISP dns address.

Wireless and wired network??

I'm not terribly computer savvy. I have a few PC's here and a brand new iMac. My current network is wired and what I want to do is put in a new network that will work with both pc and my iMac and will be wired for the PC's and wireless for the iMac.
What do I buy, whats the best, fastest and very important, the easiest?
Susan

Hi susan-kelly
I have been a fan of AirPort Base Stations for quite some time. They are quite easy to set up.
This link may be helpful as far as the basics go: Creating a small Ethernet network
This link is more specific to getting the PC's and Macs to actually talk to one another and is a little more technical: Networking with a Windows PC
Luck-
-DaddyPaycheck

Network Protection, Wired Intrusions

Similar Messages

Maybe you are looking for