Separating wireless from LAN

[whitewale]

My attitude ti wireless has always been: I don't understand the security issues, so I stay away from it. Now I'm forced to install a wireless router to enable recipe searches in the kitchen and cloth shopping on the balcony.
So, my question is - do normal wireless routers allow you to exclude any wireless connection from accessing the wired part of the network? So basically, if someone manages to get into my access point he's at least not having open access to my shared network on the wired site.

 

[ktwebb]

Unless you can get specific answers from owners you can always look at the manuals of various routers, via pdf's typically. My speedstream can limit traffic to the WAN or to the LAN. I doubt every single router/AP combo does but it isn't something that would be unique in a SOHO AP/ROuter.

 

[Archer75]

You can permit access to only certain MAC addresses. So only YOUR computers can get on.

 

[rcolbert]

The best approach if security is your concern is to ensure you prevent unauthorized users from connecting to your wireless network at all, rather than to be overly concerned about where they can go once they've broken in.

Ensure that you're running encryption. WPA is better than WEP. If your WAP supports it, you can restrict the wireless connection down to the one wireless device you have by mac address. While you still won't be impervious to the NSA or CIA if they want to shop for clothes from your balcony, you'll be reasonably safe from the rest of the world.

Also, ensure that your router doesn't allow administration via the WAN port or from wireless clients. Most disallow one or both of these activities by default.

Also, continue to protect each system you own individually with software firewalls, virus scanning and the like. If you don't need to share files among computers there are several ways you can effectively shut down windows file sharing as well. You don't want a crunchy outside but a soft chewy inside. Protection is no longer just something for the perimeter. If each device you have is well protected, the worst that can happen is that someone who gains access to your wireless network might be able to share your Internet bandwidth.

Good luck.