Cannot change router to WPA from WEP

[drjones]

Hi, got a client with a Netgear WNR1000v3 router. It does not distribute DHCP; their server does. This netgear is configured strictly as a wireless access point.

They want to change their wireless passcode, which is currently configured with WEP. I'd like to move them to WPA, but I cannot select the radio button; it just won't let me.

There is another Netgear WN802T access point connected to this, to extend their wireless range.

I'm stumped...any ideas?

Conversely, if we just kept it on WEP, is there a way to use a simple, shorter password than the 26-character WEP key they are currently using? I'm not familiar with WEP admittedly....

Thanks

 

[Knightsman]

Did you try to set the device to factory defaults and see if it would let you change it?

 

[SilverLeaf]

Not sure why WPA won't work, but WEP is not secure. It is currently fairly trivial to sniff the WEP passphrase on a network. I would advise against keeping WEP.

 

[angry_geek]

If they're using the other unit as a range extender, then you won't be able to go from WEP. I'd advise an upgrade. The wnr1000 is a cheap consumer grade unit not suitable for business use. Get some real stuff in there.

 

[Knightsman]

I would recommend a Picostation by Ubiquiti. Great price, awesome performance.

 

[DocGreen]

angry_geek has a good point... don't use consumer-grade equipment in business environments. If the customer doesn't want to upgrade, maybe you could install DD-WRT on the existing hardware. I've used it on my own routers and love it... adds a lot of control and functionality that the stock firmware tends to omit.

 

[smashedbotatos]

Ah WEP keys. It takes me roughly 2 minutes from injecting packets to cracking them.

Backtrack 5 has all the tools for Pen Testing and WEP is horrible. WPA on the other hand, as long as you don't use a word from the dictionary and use MIxED caps a number or two and a symbol....you are good.

The router and the extender are most likely bridged, so in order to change security you have to unbridge them and change from WEP to WPA on both. Then you should be able to rebridge them.

As far as upgrades go. Maybe suggest a plan to upgrade their consumer grade products over time. For now this will work.

 

[bertie40]

Cracking WEP codes.
There's an app for that.

That says it all.

 

[Knightsman]

Still doesnt make sense he cant change it. I've done it with a base station. My guess is the one he cant change is actually bridged to the other device, and the other device is what needs to be changed first.

On the other hand, he has been there, and knows the setup. Just find it weird he cant change the primary ap, even in bridge mode, to WPA. At the very least he should be able to disable bridge mode, change the security, setup the bridge again, and then configure the 2nd AP

 

[drjones]

Did you try to set the device to factory defaults and see if it would let you change it?

No I did not. That occurred to me, but honestly, it was something they asked me to do as I was heading out the door & I thought it would be simple. I didn't want to take down their wireless network and rebuild everything in the middle of a work day and when I had other appointments to attend to. I thought I'd ask here to see if there was something simple I missed before resetting everything.

If they're using the other unit as a range extender, then you won't be able to go from WEP. I'd advise an upgrade. The wnr1000 is a cheap consumer grade unit not suitable for business use. Get some real stuff in there.

Yes, this also occurred to me....bummer. I will circle back with them and see what they want to do. It's too bad, as we just installed a SonicWall for them, but went with the hardline-only unit since their wireless has been working just fine.....

 

[drjones]

Still doesnt make sense he cant change it. I've done it with a base station. My guess is the one he cant change is actually bridged to the other device, and the other device is what needs to be changed first.

On the other hand, he has been there, and knows the setup. Just find it weird he cant change the primary ap, even in bridge mode, to WPA. At the very least he should be able to disable bridge mode, change the security, setup the bridge again, and then configure the 2nd AP

I would assume that you'd need to change the base first, and that's the one that won't allow me to change. I did look at the repeater but now don't recall whether it allowed me to change it there....I do not believe it did.