General Network setup questions

rookie_2468

Reputable
Apr 14, 2014
1
0
4,510
My home network has undergone multiple incarnations as I build/expand my network learning a little more each time I do it. At this point I was hoping that someone could confirm that I am progressing on the right path to having a secure network rather than just feeling like I have accomplished something. So here goes:

I am using a DIR615 C1. Of course the administration is password protected. I have a mix of PC systems running everything from XP to Vista (yes Vista, don’t laugh) and Windows 7 and portable devices (phones, tablets, gaming machines) connected both wirelessly and LAN cable. My SSID is currently broadcasting because I have had connectivity issues when set otherwise. (that was however on my old dir 615 B but haven’t tried it since). In order to lock down my network, I have set my available IP Addresses to exactly the number of machines that I allow to connect to the network. Each machine has a DHCP reservation. My thoughts are that this will block any “attacks” if someone tries to join my network, happens to stumble across my network password (WPA secured), they still cannot join because there is no space left on the network. Is this correct?

The whole in the network as I see it is the one LAN connection in the middle of my reservation list. Not an issue if this machine is on but if off then there is one available network location. I also have some access control rules for this address as it is for the kids so this location shuts off overnight. I tried reserving this address but received and error that the address is invalid. I have recently discovered the benefits of (and of course how set some ) a Static IP address for my phone, etc (it connects faster than but I still have the reservation so if the phone is out of the house, then the IP address is still unavailable). Can the one LAN IP address be locked down? Am I way off base on my setup? I have taught myself to date how to do this much. Am I at least reasonably secure? Any thoughts? Thanks
 
Sounds a little overkill to me. As long as you have good passwords (ie: strong) on your router admin and on your wireless, that is pretty good. Now as far as your DHCP and IP addresses, it really does not help to limit them. The attacker can simply type in an address on your subnet and it will work. He will not need DHCP. If you want to lock down further lock it down by MAC address not IP address. Most wireless routers have a place to put in all your MAC addresses and anything else can't connect. Now a hacker could spoof a MAC address but that is harder to do.
 

Pooneil

Honorable
Apr 15, 2013
1,222
0
11,960
My understanding is fairly limited, but... If you use WPA2 encryption with long and strong password, most of the rest of the stuff is unnecessary. THE WPA2 security becomes the hardest thing to crack, while all the other stuff is not all that difficult relative to the skills and tenacity needed to crack the encryption. Like most locks, the object is to make it too difficult for casual thieves and too time consuming for more skilled thieves, relative to other options for what they want to accomplish. Good WPA2 protection, at least for now, provides that level of security.