Home network security

ladyofdanet

Commendable
Oct 25, 2016
2
0
1,510
Recently my home network was infiltrated by a voyeuristic scumbag and my entire world was thrown into upheaval. I have, at any given time, a minimum of 10 devices online and I run my small business from home. I am wondering what is the absolute best way to secure your home network and in doing so not lose any connectivity rate. It seems as if my speeds and wifi coverage area have decreased substantially. I have a Netgear DGND3700V2 router/modem and an Asus RTN56U both are dual band. Would it be beneficial/possible to bridge both of these devices to extend my footprint? Any and all help would be appreciated.

I forgot to mention that I am not at all what one would consider a "tech-savvy" individual. I do, however, understand and take direction well. And Youtube is my BFF when it comes to learning to do anything new, lol.
 
Solution
There's no reason why you can't use a second router as a WAP (wireless access point). Some routers have this functionality built-in whilst others need to be manually configured. In this case, you'd give both routers the same SSID and manually assign a different wireless channel to prevent interference. Static IP addressing would also be a good idea.

In terms of security, consider the following:

1. Hide the SSID and give it an obscure name.
2. Don't use WEP encryption.
3. Make the SSID network key long and complicated.
4. Keep the SSID and network key as private as possible. If you can, create a guest network to separate your business and personal devices.
5. Block all the services and ports you don't need.
6. Minimise the amount of...
There's no reason why you can't use a second router as a WAP (wireless access point). Some routers have this functionality built-in whilst others need to be manually configured. In this case, you'd give both routers the same SSID and manually assign a different wireless channel to prevent interference. Static IP addressing would also be a good idea.

In terms of security, consider the following:

1. Hide the SSID and give it an obscure name.
2. Don't use WEP encryption.
3. Make the SSID network key long and complicated.
4. Keep the SSID and network key as private as possible. If you can, create a guest network to separate your business and personal devices.
5. Block all the services and ports you don't need.
6. Minimise the amount of local administrator accounts and make sure they all have a strong password.
7. Use your common sense and don't go to dodgy-looking websites or download illegal software.

That last point is the most important. The best form of security is you.
 
Solution