cancel
Showing results for 
Search instead for 
Did you mean: 

Best way to protect against deauth attacks and other hacks?

bdillard
Contributor
Hello,

I'm new to securing networks other than WPA2 passwords.   Other than keeping them complex and long and changing them on a regular basis is there anything else I should do to secure the wifi?    We have a guest and private network and an approved mac list.
3 REPLIES 3

ben_winslow
New Contributor II
Using an 802.1x authentication method (WPA/WPA2 Enterprise) will provide better security than than WPA2 preshared keys.  That way, each client's traffic will have a unique encryption, and eavesdroppers will not be able to decrypt the traffic.

You can also enable client isolation, to prevent clients from being able to communicate with other wireless clients, but this will prevent devices like chromecasts and printers from operating normally.

As for protecting against Deauth Attacks, I am not aware of a means of enabling 802.11w (protected management frames) on the unleashed product.  This would only work with clients that support 802.11w, but those that support it would ignore deauth frames sent from a different AP.

This is by no means an exhaustive list, you will find plenty of other methods that should be available to you.

Ankush_Chandan
Contributor II
Hi Boedillard,

You can Hide the WLAN also enable Management Frame Protection (MFP), in addition to the WPA2 encryption.802.11w Management Frame Protection provides additional security measures for management frames. Not all client devices support 802.11w.

Check your client devices before enabling 11w. If “Required” is selected, clients must support 11w in order to connect. If “Capable” is selected, clients with or without 11w should be able to connect. However, note that some clients with poor driver software may have connection problems even if 11w is set to Capable.

Hide WLAN is available under WLAN>Advance Options:
Image_ images_messages_5f91c451135b77e247a1fa78_a91eb193da0996c5fb17f70fbc2c9b10_RackMultipart20190521100270qvs-6f54c7a9-c283-4f4e-a64b-7df05bf82afb-2081212511.png1558443429

MFP can be enabled from the GUI under WLAN >
 Image_ images_messages_5f91c451135b77e247a1fa78_30e676dd6bde1ac4029a0ce0eecea5f0_RackMultipart20190521125889kh9-897a2451-1ede-4a68-9baf-53a01c9976a8-1891097461.png1558443208


You can check from your PC if it supports MFP.
 Image_ images_messages_5f91c451135b77e247a1fa78_0a392a47fa55e4cc3f9df4b5f1040f35_RackMultipart20190521100270h6t-f3997590-9472-4923-8e60-db5823fe9a62-1434733447.png1558443041


Regards,
-Ankush



charles_dickens
New Contributor
If security is your concern, then you should talk to an IT expert. I don't have that much knowledge about networking, but I always prefer contacting an IT expert over a call or chat. If you are interested, then you can get help from TheCompuLab network support Broward experts for network security concerns.