ponline
join:2004-03-04
presheva
| Double Mac addresses trying to associate on AP
I have my APs open wide, no encryption.
Lately i can notice that someone is sniffing the mac adresses trying to have free internet.
He can't sucseed becouse he has to have a pppoe acount to conect to internet.
But still he is making me some troubles. When he associates with someone elses MAC adress, the original user is disconected, and than again conected, and that game continues while the "hacker" is associating to the AP with that MAC adress.
He thinks that if he uses some of my users mac adresses will get free internet.
Should i write on my SSID 'no pppoe acount - no internet' :P
I think WEP encryption will be one of the options to aply so i can avoid this problem, but nl2511 its not suporting it in Mikrotik, and I think he can brake the WEP too. My CPEs dont suport WAP encryption.
Any idea how to resolve this problem? |
|
lutful
Premium
join:2005-06-16
Ottawa, ON
| I recall seeing PPPoE_AP_XYZ style SSIDs before. Told me what it was right away. 
Even if you use WEP, it is possible for determined free-loaders to decode the PPPoE or MAC/Radius username and passwords.
If you plan extensive network upgrades, please consider using AP and CPE that support "WPA2 Enterprise" authentication. |
|
