Networks

Ask something
Discussion Locked

How to set up a file server securely via wireless...

0 helpful
2 replies

by danlm

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I currently run a FreeBSD file server within my home. This is the only machine that is wired... I want to move this server to another room for a couple reasons.
1). I have too much chit running from too few electrical outlooks in this room. Only 3 outlets in the room with the following running of them.
a). 3 computers with all the crap that goes with them... Ie: External drives, printer, router, Monitors. Lets see, for my computers I have how many plugs? 3 machines, 1 monitor, 1 printer, 1 router, 3 external drives.... So, whats that... 8 plugs?
b). Fish tank and all the crap goes with it. 3 plugs.
c). TV, cable box, stereo, and DVD player. 4 plugs.
d). I have to see, 3 lights.... 3 plugs.
c). Cell phone charger?

If I move the file server to another room, I can at least free up the plugs used by the external drives and the BSD box itself. Cable company won't install the wire because it's a apartment complex and I like having a girlfriend, so I can't run a 100 foot of cable wire along the floor.
So, how can I set up a file server in a secure manner that is connected to the LAN via wireless? I have the firewall set up to only accept the subnet now for file shares... I could probably tighten this.. But is there any other precautions I can do?
Any sugestions????

Dan

2 replies

by sirkozz

Dan without giving me more info on your WLAN I?ll give you the generic answer, WPA2 (AES/CCMP) with radius authentication.
However questions I have are;
What type of WLAN infrastructure are you currently using, and what current security settings are you employing?
Are you sure that 20Mb sustained WLAN throughput is sufficient for a Unix file server?
Firewalls only protect the LAN for the most part; the WLAN is still potentially wide open?
My first thought however was to utilize 2 Cisco 1231?s in bridge-mode, with WPA2, MAC ACL, and both local & server based radius authentication, top notch encryption, only allowing a single MAC to associate, local authentication until the WLAN link is established, and then finally a radius server to maintain the link.
Its overkill!!!!!!!!!!!! However, or is it?????????????
Sorry personal favorite, Cisco WLAN bridges!!!!!!!!!!!!

thanx Chris

by danlm

My key settings are wpa2-psk with a 10 digit randomy generated key.

Im not mac spoofing, if thats what you asked me????

Im already restricted because my mp3 files are stored on an external usb2 drive.. Transfer speed wise is what I mean. Oh crap, I do remote ssh backups to that server. Crap...

The freebsd box, I am the one that set the rules.. I wrote all of them to this point. I only allow the other two lan address's, which are static at this point.

Hmmm.....

Local and server based radius authentication? Ok, now I'm lost.

There is no such thing as over kill. Never.

Dan

This discussion is closed to new replies.