Wireless local area network security system What about security for WLAN? Today wireless networks are anyhow equally invulnerable as wired. You only need to apply the proper tools and configurations.Physical security is the most all-important aspect of security. In the event you don't possess physical access to the network, you can not use it. If you can't plug cable you won't have network. This is the situation in the wired word.The largest security system problem, in any type of wireless network, is lack of physical security.802.11 criteria apply Authentication as alternate for tangible security. Problem is that application uses WEP as encryption.WEP - Wired Equivalent Privacy has never merited its name. It doesn't take more than two minutes, with cracking tools, to breach WEP.First WEP versions have used 64-bit shared key. 40 bits are for a shared secret and 24 bits are for IV (initialization vector). IV is used that receiver could decrypt the frame.Next improvement of first WEP key was 128-bit shared WEP key. With that WEP version 104 bits are used for shared key and 24 for initialization vector.IEEE proposed in 2004 new version of WEP - WEP2. It uses the same RC4 algorithm with 128-bit initialization vector. WEP2 has not improved significantly security. It only increases time for cracking.Next step in wireless security is WPA - Wi-Fi Protected Access.What is WPA encryption? Wi-Fi Alliance launched in October 2003 Wi-Fi Protected Access - WPA, the next generation in WLAN security. Wi-Fi Protected Access doesn't need a computer hardware upgrade in 802.11 gear.Only software package and firmware upgrade is required and it makes minimal debasement in network performance.WPA was configured as an alternative all WEP failings. It uses Temporal Key Integrity Protocol (TKIP) with Message Integrity Check (MIC). It also has mutual pre-shared key (PSK) authentication system utilizing 802.11X/EAP.WI-Fi Alliance launched WPA2 in September 2004. It's certified interoperable version of WPA. WPA2 besides PSK 802.1X/EAP authentication, use advanced encryption mechanism.This fresh mechanism is Counter-Mode/CBC-MAC Protocol (CCMP) called Advanced Encryption Standard (AEP).WPA and WPA2 have 2 certification modes. Enterprise, & Personal: You have 4 different versions of Wi-Fi CERTIFIED devices: 1) WPA-Personal2) WPA2-Personal3) WPA-Enterprise4) WPA2-EnterprisePersonal Mode is configured for home and office (SOHO) environs. You don't need authentication server (Radius or IAS).It uses manually inserted PSK (pre-shared key or pass-phrase). Security level of your wireless network is founded on this particular PSK.therefore, use a mix of letters, numbers and non-alphanumeric characters. Personal mode utilizes methods of encryption as Enterprise-per-user, per-session, per-packet encryption along with TKIP (WEP) or AES (WEP2).Enterprise Mode works in managed mode with authentication servers (Radius or IAS). In addition to this mode you are able to meet rigorous prerequisites of enterprise security.nearly all of the access points and wireless routers have option of MAC filtering out. With MAC filtering, you are able to restrict access to stations that you have entered in MAC filtering list.The main key to wireless security measures is to place as many obstructions as you can. If you simultaneously apply WEP, WPA, MAC filtering, and if you use IPsec tunnel and SSH then your wireless network is secure like it's wired.