Best way to protect against deauth attacks and other hacks?

bdillard

Hello,

I'm new to securing networks other than WPA2 passwords.   Other than keeping them complex and long and changing them on a regular basis is there anything else I should do to secure the wifi?    We have a guest and private network and an approved mac list.

unknown

Using an 802.1x authentication method (WPA/WPA2 Enterprise) will provide better security than than WPA2 preshared keys.  That way, each client's traffic will have a unique encryption, and eavesdroppers will not be able to decrypt the traffic.

You can also enable client isolation, to prevent clients from being able to communicate with other wireless clients, but this will prevent devices like chromecasts and printers from operating normally.

As for protecting against Deauth Attacks, I am not aware of a means of enabling 802.11w (protected management frames) on the unleashed product.  This would only work with clients that support 802.11w, but those that support it would ignore deauth frames sent from a different AP.

This is by no means an exhaustive list, you will find plenty of other methods that should be available to you.