Access Point expert required...

MikeOCUK · 3 Mar 2006 at 11:35

Ok, at the moment we have a need to change the WEP KEY on our remote system on a regular basis. We just had a router, which we connected to remotely to change the WEP KEY.
Expansion has meant we have to install some access points. These are protected by WEP (not the most secure I know its just to stop the neighbouring company from using our ISP).

But how could we change the WEP key remotely on each Access point? Or can you ge acess points that will clonde the WEP key off the router?

Please somebody help :-/

NotJimNot · 3 Mar 2006 at 12:00

I am probably not understanding right but I recently just installed an access point and log into its ip address to change the key.

Just like you would with the router.

e.g 192.168.0.1 for router and 192.168.0.220 for an ap

MikeOCUK · 3 Mar 2006 at 13:02

sorry but this cannot be done remotely as youv done locally. it will be on access points in multi-point mode.

tolien · 3 Mar 2006 at 13:44

Might be able to do it with telnet or SSH, or even SNMP. Depends on the AP though.

MikeOCUK · 3 Mar 2006 at 15:40

tolien. do you know of any that can do this. it must be possible as 'the cloud' do it with there access points. hmm this is getting complicated now :|

tolien · 3 Mar 2006 at 15:51

Looks like you can change the WPA (dunno about WEP, never used it) on the WRT54GS (not just an AP) by SSH.

MikeOCUK · 3 Mar 2006 at 21:47

i thought access points couldnt comunicate with each other using WPA :-/

im on about conncting to the router remotely, changing the keys on that, and then the APs reflecting these changes, or another way of being able to remotely change the access key users need to access the wifi network.

tolien · 3 Mar 2006 at 21:48

MikeOCUK said:
i thought access points couldnt comunicate with each other using WPA :-/

The WRTs will.

im on about conncting to the router remotely, changing the keys on that, and then the APs reflecting these changes, or another way of being able to remotely change the access key users need to access the wifi network.

I'm talking about changing them using SSH. You can easy enough automate that.

MikeOCUK · 3 Mar 2006 at 21:50

sorry iv never used that before. how would it be done sorry?

tolien · 3 Mar 2006 at 22:06

Depends on the device.

oddjob62 · 3 Mar 2006 at 22:36

Might want to read up on 802.1x. Authentication is handled by a radius server, and WEP/WPA keys are changed automatically. To be honest it's quite complex to set up initially, but once set up it works nicely.

MikeOCUK · 3 Mar 2006 at 23:41

oddjobs, can you point out where i can read this? iv already read a great deal of books, specs/manuals for access points and routers etc, never come across something that will do what i need.

just_grass · 4 Mar 2006 at 07:59

some AP's..... buffalo for one - have management software to do things like this.

but in theory - something like oddjob62's on about should work.... but may need specific/expensive AP's to be compatible.

Alex

oddjob62 · 4 Mar 2006 at 11:27

MikeOCUK said:
oddjobs, can you point out where i can read this? iv already read a great deal of books, specs/manuals for access points and routers etc, never come across something that will do what i need.

This is the microsoft method of setting it up, but not knowing your current infrastructure i'm not sure if this will be possible. I'm sure there are other ways, although i have not investigated them.

just_grass: I have set 802.1x on cheep linksys and 3com APs. It's pretty much a standard on APs these days.

MikeOCUK · 4 Mar 2006 at 11:50

oddjob. does this mean if the wap/wep key is changed on the router, or a centralised point accesible remotely, it replicates this to the other access points (without changing the wep/wap key instantly and therefore rendering them unable to cominicate with each other)

oddjob62 · 4 Mar 2006 at 11:59

MikeOCUK said:
oddjob. does this mean if the wap/wep key is changed on the router, or a centralised point accesible remotely, it replicates this to the other access points (without changing the wep/wap key instantly and therefore rendering them unable to cominicate with each other)

No. You never type in a wep key. It uses the windows username/password, or certificates on the client for authentication, then the WAP creates a key for the session, and can even be made to change it at set time intervals.

MikeOCUK · 4 Mar 2006 at 13:00

ahh, so your assuming there is a windows based network in place?
in this case we have to assume there is absolutely nothing but a router and some acccess points, people come on site and access the wifi via laptop. there are no other computers on site at all.

Sone · 4 Mar 2006 at 13:34

no it doesent assume a windows network is in place. 801.2x can be used with most's modern OS's

oddjob62 · 4 Mar 2006 at 16:06

Sone said:
no it doesent assume a windows network is in place. 801.2x can be used with most's modern OS's

You still need a centralised point for authentication.

MikeOCUK said:
ahh, so your assuming there is a windows based network in place?
in this case we have to assume there is absolutely nothing but a router and some acccess points, people come on site and access the wifi via laptop. there are no other computers on site at all.

MikeOCUK: in that case you're gonna just have to connect to each device and change it manually.