You can get this also in pdf or plain text

NOTE: This tutorial is several pages long. The PDF is now available.
Having “wireless LAN” access (WLAN) in your office is nowadays almost a given. The challenge comes though on how to secure your WLAN and how to deploy it correctly. You probably want the least overhead for administration and a very flexible, yet secure deployment. Since WLAN access points (AP’s) have a semi limited range depending on your building, you might want to deploy more then one AP per floor, or even one AP per meeting room. But creating different networks for each meeting room is pretty much out of the question.

Also the fact that WEP encryption is not much of a cracking challenge nowadays (things like kismet or kismac helps you do the dirty work) and adding every single MAC address to every AP you have is a BIT cumbersome. What you really want is a very secure yet very simple VPN solution. Using IPSec would be secure but you need a LOT of configuration and the administrative overhead is or can be quite huge. OpenVPN is free (as in beer and speech), uses SSL for encryption and only a single TCP (or UDP) port to communicate. Configuration and installation for it is also very simple. This combination makes it an excellent choice for this little project. So how do you do it? Simple, you have a central OpenVPN server on a separate network and link all the AP’s to it.
What? Again, how? - Yes i can see the confusion here but in the next few paragraphs we will go through all the steps necessary. If you have questions or comments of course feel free to mail me or leave a comment.

First you need to be clear what you want to do. In the case of this tutorial we take the most challenging setup and deploy one AP in each meeting room, this also gives us range to the normal offices. 3 meeting rooms per floor and 2 floors. so we need 6 AP’s deployed. We also want to give guests the chance to actually access the internet as an “added bonus”. One caveat: In this tutorial we will use PKI and Certificates. However we will create a Certificate Authority specifically for this how-to. For integration of this with your central CA check “the OpenSSL for everything project”.
Now that we got this cleared, let’s move on.

Popularity: 58% [?]

Pages: 1 2 3 4 5 6