guest network security problem

[GoNz0]

I am trying to get the asus n66u doing the same job as my WNDR4500 so I can take the WNDR500 out and replace it with a AC68u

The issue is as follows.

I have a really old work PDA that I have to have, this can only run on TKIP WPA personal not WPA2 like most current devices use.

The netgear has no problem doing this via a virtual interface, the N66 on the other hand refuses to use another security protocol on the guest network and shows wpa2 when it is set to wpa1 on the guest network..

Is there a way round this without going down the DD-WRT route as I want to keep merlins fw on this and the 68u when it arrives.

 

[L&LD]

I hope someone provides an answer for you, but I think the RT-N66U is trying to get your network to a safer overall place.

Why don't you configure the WNDR4500 as the only client being this old PDA?

 

[GoNz0]

Valid point, I just took out my WNDR3700 as I can't see the point having 2 routers side by side to have a wireless b network running for this damn PDA. I may as well leave the Asus as the main 2.4ghz as it has the range with the em build and have the 4500 (for now) as the switch and wifi repeater in the front room so I get the 5ghz coverage.

 

[L&LD]

I actually meant to run it alongside the RT-AC68U you're considering.

I think that staying with the WNDR4500 for the 5GHz band you're cheating yourself of some serious performance?

http://www.smallnetbuilder.com/lanwan/router-charts/bar/116-5-ghz-updn-c

 

[L&LD]

I was just looking at the RT-N66U 374.39_0-em options for the wireless network settings and it seems like you can choose WPA Personal TPIK+AES.

Have you tried setting up a separate Guest network with those settings?

Oh, which firmware are you currently on?

 

[GoNz0]

I actually meant to run it alongside the RT-AC68U you're considering.

I think that staying with the WNDR4500 for the 5GHz band you're cheating yourself of some serious performance?

http://www.smallnetbuilder.com/lanwan/router-charts/bar/116-5-ghz-updn-c

I doubt it with my current situation m8, this will change soon and i will need a 68u as my dells coming with an AC card that will be swapped to 3x3 one day.

I am sat 8 foot from the TV, under the TV is the 4500 acting as a wired/wireless back to the 66u in the office upstairs via cat 5e, mainly for the laptop on 5ghz with a intel n6300. I connect between 400-450 where I am so no complaints

 

[L&LD]

Indicated connection speed, does not mean throughput.

 

[GoNz0]

I was just looking at the RT-N66U 374.39_0-em options for the wireless network settings and it seems like you can choose WPA Personal TPIK+AES.

Have you tried setting up a separate Guest network with those settings?

Oh, which firmware are you currently on?

yes and I am on 39-es.

I had those settings to start with.


When you look on inssider they both go to wpa2, the guest matches the main network. works fine on dd-wrt but not the asus builds.

 

[L&LD]

Is this just a matter of inssider reporting erroneously?

Did you try to connect with the older PDA? I'm sure you did, but just curious now.

 

[GoNz0]

yeh I know it wont play nice with AES, it just sits on connecting as it has no idea what it is

the netgear reports what i expected and allows connection.

If i drop the asus to TKIP & wpa1 on the main wireless it works just fine.

I did hope on the off chance this could work as they changed the specs a few years ago to enforce wpa2 used AES, since then the mainstream units didnt allow 2 encryptions on one band.

My wndr3700 used to play nice until they put out an update to enforce wpa2 + AES above 54mbs

 

[RMerlin]

Having a separate access point would also ensure that this old PDA won't force everyone else back to 802.11g speeds.

 

[GoNz0]

Having a separate access point would also ensure that this old PDA won't force everyone else back to 802.11g speeds.

yep, i did think the vap would cause that on the netgear but it went happliy at 450mbs on the main and 54mbs on the vap, although the network encryption did show as unknown during that time so I gave it up as a bad idea!

I don't need the 2.4ghz to be extended as the reach with the em versions more than enough.

 

[ckane]

I also have one old laptop that knows only WPA and 802.11g. I got it to work by setting my 2.4GHz main network to mode "auto","b/g protection" on, WPA2+AES, and the 2.4GHz guest network to "WPA-Auto-Personal", AES+TKIP. Works nicely. The old laptop connects on the guest network just fine using WPA/TKIP, while other clients connect to the main network using WPA2/AES. I never noticed any drop in performance for the 802.11n clients when the old laptop was connected.

 

[GoNz0]

I also have one old laptop that knows only WPA and 802.11g. I got it to work by setting my 2.4GHz main network to mode "auto","b/g protection" on, WPA2+AES, and the 2.4GHz guest network to "WPA-Auto-Personal", AES+TKIP. Works nicely. The old laptop connects on the guest network just fine using WPA/TKIP, while other clients connect to the main network using WPA2/AES. I never noticed any drop in performance for the 802.11n clients when the old laptop was connected.

does inSSIDer confirm this as I cannot get it to work?

 

[ckane]

does inSSIDer confirm this as I cannot get it to work?

No, it doesn't, since I don't have inSSIDer. My Mac is quite capable of scanning and showing me quite a bit of information about networks on its own. With the aforementioned settings, I see both the 2.4GHz main network and the 2.4GHz guest network as 802.11n/WPA2 networks with different SSIDs and different BSSIDs. Yet the old laptop, which can do neither, connects fine on the guest network using its old 802.11g/WPA adapter. It cannot connect on the main network, which is set to "WPA2/AES" only.

 

[GoNz0]

my pda just hangs and refuses to connect

 

[ckane]

Maybe a version problem? I'm still running .30_2. Haven't tried it with .38_2-em or newer; .38 gave me problems long before I got testing that old laptop. (Highly unstable 5GHz, and a general network performance drop.)

 

[GoNz0]

I think it is more to do with my 2006 HP IPAQ hw6915 as it is a piece of poop

it stays on wpa2 unless i use the legacy setting. oh well

legacy works but that puts everything on 54mbs