Introduction

The security measures discussed in Chapter 10, Basic Wireless Network Security are, as a general rule, sufficient for most home wireless users. Corporate users, however, should not rely on basic security measures alone to protect their wireless networks. In this chapter, we discuss some of the more advanced ways you can reduce the risk of your wireless network being compromised. By implementing some (or all) of the security mechanisms in this chapter, you have done all that you can feasibly do to reduce the risk of your wireless network being compromised.

In this chapter, you will also learn about different methods of secondary authentication such as Virtual Private Networks (VPNs) and Remote Authentication and Dial-In User Service (RADIUS). A secondary authentication mechanism requires that, in addition to association with a wireless access point, a user must authenticate (that is, log in) using some other means. But, first, we will look at the replacement for Wired Equivalent Privacy (WEP): WiFi Protected Access (WPA).