Does anyone know how to setup VPN over a WAP connection?

[wyvrn]

I have a wireless connection to my cable modem at home, and have had it for a couple of years. About 6 months ago I noticed my neighbors wireless network showing up on my list. I immediately enabled encryption, enabled static IP, and limited access based on MAC address. The reason I didn't use encryption before is that my client card did not support it (f'ing Dlink!!), and it was only me using the network and I didn't put out anything sensitive. I also used firewall software to limit inbound connections. Now my sister uses it too, and I am worried about security. After reading a recent article at ZDNet, I am trying to decide if I should install a VPN to further secure our home network. Normally I am not the paranoid type, but at the same time I would like to be 99% sure that our network is secure as we are using it more and more lately.

So, does anyone have experience with VPN software and could recommend a decently priced or free product?

 

[SaigonK]

You would have to put a TON of data through the air for someone to sniff it and break the WEp keys..dont worry too much if it is just for home.
VPN is a great way to secure your wireless network, but in my opinion it is overkill for home users.

 

[cmetz]

Security is expensive until after it's too late. I would never run a wireless line with cleartext or only WEP. I'm still very surprised that none of the usual suspect vendors have put IPsec endpoint capability into their wireless routers -- it's a terribly obvious thing to do.

Get a Linksys BEFVP41 or some other IPsec-endpoint SOHO router that has a HARDWARE crypto chip in it. The BEFVP41 can't actually keep up with the max speed of 802.11b, but it can get close enough that when you factor in that you rarely really get max speed anyway it'll be fine. The ones without hardware crypto are likely to be a bigger problem.

Then use the appropriate Win2K, WinXP, Linux, or *BSD included VPN client software. If you have a Windows before Win2K, it'll cost you as much to buy a software VPN client as it would for the OS update (I thought there were some free IPsec clients for Win<2K, but haven't yet actually found 'em).

 

[SaigonK]

For the business yes...for the home...not a reality.
i think we often confuse business/enterprise needs with the home user.

You just cannot put out enough data for someone to justify sitting in front of your house to break 128wep.
most business dont do that much traffic as wireless isnt their backbone, more just a toy or frivolity.

 

[wyvrn]

Ok thanks for the answers. I think we are fine now as we have it as long as I remember to adjust the WEP keys periodically. If you find a free VPN software compatible with Windows ME (sister's laptop, not mine), let me know.