Group Key Rolation Interval

[Portalnet]

Hello
How are your options set for WPA2? or standard 3600 seconds, or other values? Does setting a lower value, e.g. 60 seconds, affect the security of the WiFi network (WiFi password cracking)

 

[Tech9]

Leave it at default 3600.

 

[Portalnet]

Won't it make it easy to crack the password? Does a change to a lower value adversely affect the operation of the router?

 

[Tech9]

1) English only, please.
2) Don't change any settings you don't know well what they do.

 

[sfx2000]

Hello
How are your options set for WPA2? or standard 3600 seconds, or other values? Does setting a lower value, e.g. 60 seconds, affect the security of the WiFi network (WiFi password cracking)

3600 seconds is good enough...

openwrt defaults to 600 (seconds) these days, fwiw

 

[Yota]

openwrt defaults to 600 (seconds) these days, fwiw

I wonder how they solve the depletion problem of the entropy pool

 

[sfx2000]

I wonder how they solve the depletion problem of the entropy pool

urngd handles this...

 

[Portalnet]

What exactly does this option do? yes to the usual language for a novice.
And what happens when we change it?

 

[ColinTaylor]

What exactly does this option do? yes to the usual language for a novice.

It's the rekey interval for wireless broadcast and multicast transmissions. That's about as simple as it's possible to describe it.

And what happens when we change it?

Nothing much, but in terms of "security" it depends entirely on your specific network. The default value is usually the best although arguably it could be changed to 1 day when WPA2/AES is being used.

WPA Group Key Rotation (ReKey)

Is there a way to manually trigger a WPA Group Key Rotation (ReKey) with a command from SSH, just like it default does every 3600 seconds?

www.snbforums.com

 

[sfx2000]

It's the rekey interval for wireless broadcast and multicast transmissions. That's about as simple as it's possible to describe it.


Nothing much, but in terms of "security" it depends entirely on your specific network. The default value is usually the best although arguably it could be changed to 1 day when WPA2/AES is being used.

WPA Group Key Rotation (ReKey)

Is there a way to manually trigger a WPA Group Key Rotation (ReKey) with a command from SSH, just like it default does every 3600 seconds?

www.snbforums.com

Keep in mind that any time a device leaves the WLAN, this forces the group rekey, as we don't want unassociated devices reading the group messages for broadcast/multicast..

 

[ColinTaylor]

Keep in mind that any time a device leaves the WLAN, this forces the group rekey, as we don't want unassociated devices reading the group messages for broadcast/multicast..

Except hostapd isn't configured to do that on Asus routers as I explained in the post I linked to.