my network plan - may need some help....

[AUTOgod]

ok guys. i had a d-link dir-615 doing some basic switch tasks, with my significantly better dir-635 doing the routing tasks, DHCP, and MAC filtering.

recently, the 615 stopped working, so i hard reset it, and gave it an upgrade, in the shape of DD-WRT.

now, here comes the complicated part:
the idea is to pass the DHCP and MAC filtering to the DD-WRT DIR-615, and still let the stock DIR-635 still do the routing for the internet traffic, since i know it is good.

 

[Hybrid_theory]

Should be easy, set your router to static IPs, set the DD-WRT's WAN address to static as well, the router as its gateway. If you can with DD-WRT, turn NAT/routing off.

 

[AUTOgod]

the DD-WRT dir 615 is already set as a switch, but is it really just a matter of disabling the 635 dhcp and mac filter, and just turning them on in the 615?

heres a diagram:

i use the MAC filter, so i can use no wireless security, but keep out strangers

 

[Hybrid_theory]

the DD-WRT dir 615 is already set as a switch, but is it really just a matter of disabling the 635 dhcp and mac filter, and just turning them on in the 615?

heres a diagram:
http://e3iuca.bay.livefilestore.com...hMCMC7ygAgTswYlX/how i want layout.png?psid=1
i use the MAC filter, so i can use no wireless security, but keep out strangers

Hmm different then i was thinking, in terms of the diagram. You need to filter MACs on the same device that is doing wireless.

ok you like mac filter but no security? i could take my laptop to your house, and get onto it in probably minute or less. all mac filtering does is keep the honest people out.

 

[AUTOgod]

ah, well, i had been told that a mac filter would stop anybody with a different MAC from getting in.

in that case it should be easy.

thanks

 

[Hybrid_theory]

ah, well, i had been told that a mac filter would stop anybody with a different MAC from getting in.

in that case it should be easy.

thanks

There's free software to change your MAC address thats broadcasted. so i just boot you off and get on myself.

 

[AUTOgod]

There's free software to change your MAC address thats broadcasted. so i just boot you off and get on myself.

ah, however, how do they get a MAC that works, considering the number of possibilities in a MAC code (12 digits of hex, thats 281,474,976,710,656 possible MAC codes according to this), with only 25 allowed, thats a chance of 1 in 11,258,999,068,426 of getting the right one. that could take days/months/years (dont know how quickly you can change/retry).

i could pass the wireless off onto the 615, but that isnt as fast, or strong, as the 635.

 

[Hybrid_theory]

MAC filtering needs to be on the device you do wireless otherwise it wont be in effect. As for your question on MACs, you have specified MACs which you allow on, which are your devices correct? So i sit outside your house, capture the packets on your wireless network from you to the access point. Look at one of the packets for your MAC address then im set. just need to boot you off so i can use it.

 

[AUTOgod]

MAC filtering needs to be on the device you do wireless otherwise it wont be in effect. As for your question on MACs, you have specified MACs which you allow on, which are your devices correct? So i sit outside your house, capture the packets on your wireless network from you to the access point. Look at one of the packets for your MAC address then im set. just need to boot you off so i can use it.

there has been a significant change anyway.

the dir-615 with DD-WRT is now routing. the dir-635 was starting to show its age, and was maxing out with the broadband at about 4.5MB/s. so i switched to the dir-615 DD-WRT, and now its a rock solid 50Mb/6.5MB/s, so i am thoroughly impressed with DD-WRT and what it can do with a poor router.

as such, im not using filtering anymore. since the WPA protected N with the dir-615 seems to be able to manage 45Mb easily, and with the dir-635 acting purely as a wireless AP can manage double that (theoretically), it will be ok with WPA N.

 

[Hybrid_theory]

protected N as in you're using 802.11n? just curious what that means. Any event, great that works for yah and yeah you should be nice and secure with WPA. Just a note if your using TKIP encryption, it is crackable to the point of someone getting on your network, but your data is still encrypted. But that takes a lot more time than the process i described earlier.

 

[AUTOgod]

protected N as in you're using 802.11n? just curious what that means. Any event, great that works for yah and yeah you should be nice and secure with WPA. Just a note if your using TKIP encryption, it is crackable to the point of someone getting on your network, but your data is still encrypted. But that takes a lot more time than the process i described earlier.

yes i do mean 802.11 N.

these are my options:

right now i am using WPA2 personal with TKIP+AES.

 

[Hybrid_theory]

ok tkip+aes means someone can connect to it with tkip if they want to. But if every1 uses AES, your good and secure against pretty much anything. well except a supercomputer. so if you see a guy in a transport truck with connections to the powerlines, maybe get suspicious

 

[AUTOgod]

its ok, everybody around here is either an idiot, or too lazy to try lol

 

[Hybrid_theory]

its ok, everybody around here is either an idiot, or too lazy to try lol

oh yeah the odds of some1 trying to break onto your network are slim. and even still they wont see your banking (or anything else using https) info unless they conduct some other exploits which you usually have to fall into. such as accepting a self signed certificate when logging into your bank. dont ever do that.