hacking SSID

stephenw10

I've yet to see a good use case for .11ax personally. Maybe if you really need much shorter range (at 6GHz), for.... reasons

But not much you can do with that AP security wise if you can't even flash it OpenWRT.

You can isolate it from your network in pfSense. Just assume it's compromised.

Steve

bingo600

This post is deleted!

johnpoz

@stephenw10 said in hacking SSID:

I've yet to see a good use case for .11ax personally

I would concur with the "personally" aspect.. AX does allow for more density of clients while providing higher bandwidth to the clients overall.

I think where you would see most bang for the buck is in environment where you have a bunch of clients that all support ax.. Say for example work setup where all the wifi devices (phones, tablets, laptops) all can do AX.. The QAM moves to 1024, or can - etc. and OFDMA all huge benefits for network with more clients per AP, etc. And MU-MIMO, etc. etc.. Lets not forget HEW as well..

There are for sure many new advantages with wifi 6 to be sure..

But in a home setup or a smb - prob not going to get you much. But users can be obsessed with a benchmark that quite often is meaningless - for example My phone now can see 600mbps per sec vs 400mbps when doing a benchmark on my home wifi, when they are checking email and watching some tiktok video's on it - and 50mbps would more than they would ever need, etc. ;)

I would love to have a good AX AP to play with for sure - but can not justify it as a "play" thing when I have 1 AX capable devices on my network currently ;) My work iphone 13 heheh.. Hey when I get my new work laptop here shortly - I will have 2 ;)

but my work laptop will sit on my desk with a wire - so still really only 1 ax device, hahah

stephenw10

Exactly! Not even close to the device density where the advantages come into play. The number of times I have to transfer a lot of data locally is just insignificant. I can't justify spending the money. Much as I'd like to.

JKnott

@aledio said in hacking SSID:

tp link TL-WA801ND

I have one of those and it has problems because TP-Link doesn't understand VLANs. If you suspect someone has broken WPA2 (do you have proof?), then replace your password with a strong one. I get mine from www.grc.com and use a 63 character random string.
I replaced the TP-Link with a Unifi AC-Lite AP, which not only works properly with VLANs, but also supports 5 GHz.

JKnott

@johnpoz said in hacking SSID:

This would be a good psk ;)
5pp6ZH@DSccetrWvbhj#

I uses ones like this:
BTTD7f21Zu1hLx0LwYwthJLUfJFj9rtKX696npf0jHlak8JryFpzGYqFRaLBghC

JKnott

@nogbadthebad said in hacking SSID:

I had a play with a couple of Aruba Instant APs 345 ( not the InstantOn one I run at home ) was very impressed with the abillity to use one of the APs as the controller as well as an AP.

With Cisco, dumb APs connect to a controller running on a switch.

johnpoz

@stephenw10 said in hacking SSID:

The number of times I have to transfer a lot of data locally is just insignificant

If I was moving significant data locally - I would use a wire ;) heheh even if my laptop supported AX... Sorry while AX is cool and all, and hey speeds are getting pretty impressive to be sure.

Not going to beat a wire, my wire can do 2.5.. If my wifi could do 2.5, then my wire would be able to do 10, etc..

Wire is always going to trump wireless.. It will always be the right bower, if any Euchre players about ;)

akuma1x

@jknott said in hacking SSID:

I uses ones like this:
BTTD7f21Zu1hLx0LwYwthJLUfJFj9rtKX696npf0jHlak8JryFpzGYqFRaLBghC

Oops, not good enough, no symbols...

JKnott

@akuma1x said in hacking SSID:

Oops, not good enough, no symbols...

TfffXxEe;BJ0+Tu'k^(T}/U:s2er5WhC!MC@GHC]Hc(yC}oa<p1mqz5OmCo&z_

bingo600

@jknott said in hacking SSID:

With Cisco, dumb APs connect to a controller running on a switch.

I didn't want Cisco to decide when my 2702i's should be obsoleted, so i am on Autonomous not Lite/CapWAP.

No biggie for me .... I was using them before "Lite".
And i just have 5 active AP's @home / summerhouse.

I even have an old C1242 doing 54Mb coverage in the garden via an ext antenna (have no C2702E's) , works fine for light browsing & a web-radio.

MoonKnight

@jknott

I think you are safe for some time

bingo600

@ciscox
And 10min with (when) enough QBIT's

SteveITS

@akuma1x said in hacking SSID:

no symbols

Character 47 is nonprintable? Maybe? While more secure those are definitely harder to manually put into a TV or something without a keyboard or copy/paste. I have a bit of ASCII art as my SSID and found once it's rather annoying to enter manually.

@Aledio per https://www.tp-link.com/us/user-guides/tl-wa801n_v6/chapter-3-customize-your-network#ug-sub-title-5 that model has Wireless MAC Filtering so you can block the MAC address, or as noted if they start changing MACs you can allow just your devices' MACs.

@CiscoX said:

I think you are safe for some time

yes well now he's posted it for us. :)

JKnott

@bingo600 said in hacking SSID:

I didn't want Cisco to decide when my 2702i's should be obsoleted, so i am on Autonomous not Lite/CapWAP

It would be nice if more APs went with a central controller. With 802.11r you still have to disconnect and reconnect as you move between APs. With the Cisco central controller, you connect to it, instead of the APs, which become little more than bridges.

JKnott

@steveits said in hacking SSID:

While more secure those are definitely harder to manually put into a TV or something without a keyboard or copy/paste.

My Sharp/Roku TV won't accept 63 characters. It chokes somewhere after 40 or so. So, it's on my guest WiFi, which has a much shorter password than my main SSID.

JKnott

@steveits said in hacking SSID:

yes well now he's posted it for us. :)

I don't use that one. I just got it from www.grc.com.

JKnott

@ciscox

I guess it will keep someone busy for a while.

BTW, it should have had 63 characters, but I guess I missed one when copying it.

MoonKnight

@jknott
hehe, that would be one more century for your extra character

JKnott

@ciscox

Actually, a bit longer I think. Another character means 96 times what's listed. I'd better grab a beer first.