encryption vs restricting mac addresses

rick737 · 01-31-2007, 10:06 AM

My network (dlink 634m mimo router and dlink 520m mimo adapters) gets better connection speeds without the WPA-PSK encryption I normally use. Can I get the same security by simply restricting mac addresses on the router and skipping the encryption?

And while I'm here, my cable modem is a 4 year old surfboard. Is there any benefit to getting a newer one?

**Cellus** · 01-31-2007, 11:43 AM

Not really no, as all a person needs to do to bypass MAC address restrictions is to clone a legitimate MAC address and use it. Finding the MAC address of a legitimate computer is far easier to get over an unencrypted wireless connection as all a person needs to do is simply sniff the airwaves and see a legitimate computer throw it at an access point. Restricting connections via MAC addressing with an unencrypted connection also does not anyone from seeing everything you send and receive.

As for getting a new cable modem, I can not see much of a benefit unless your old one is acting up.

johnwill · 02-01-2007, 10:58 AM

WPA/WPA2 is the only "real" security for a wireless LAN. Stuff like SSID hiding, MAC filtering, disabling DHCP, that are frequently recommended only make it harder for you to use your network.

01-31-2007, 10:06 AM	#1 (permalink)
rick737 Registered User Join Date: Nov 2006 Location: phoenix arizona Posts: 30 OS: XP My System	encryption vs restricting mac addresses My network (dlink 634m mimo router and dlink 520m mimo adapters) gets better connection speeds without the WPA-PSK encryption I normally use. Can I get the same security by simply restricting mac addresses on the router and skipping the encryption? And while I'm here, my cable modem is a 4 year old surfboard. Is there any benefit to getting a newer one? Last edited by rick737 : 01-31-2007 at 10:14 AM.

01-31-2007, 11:43 AM	#2 (permalink)
Cellus Moderator Networking Team Join Date: Aug 2006 Location: Canada Posts: 2,633 OS: Windows Vista Business SP1, Windows XP Professional SP3 My System	Not really no, as all a person needs to do to bypass MAC address restrictions is to clone a legitimate MAC address and use it. Finding the MAC address of a legitimate computer is far easier to get over an unencrypted wireless connection as all a person needs to do is simply sniff the airwaves and see a legitimate computer throw it at an access point. Restricting connections via MAC addressing with an unencrypted connection also does not anyone from seeing everything you send and receive. As for getting a new cable modem, I can not see much of a benefit unless your old one is acting up. __________________ TSF Networking Team HijackThis 5 Step Process Donate!

02-01-2007, 10:58 AM	#3 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 32,581 OS: XP-Pro, Vista, Linux Blog Entries: 1	WPA/WPA2 is the only "real" security for a wireless LAN. Stuff like SSID hiding, MAC filtering, disabling DHCP, that are frequently recommended only make it harder for you to use your network. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience