Installing and Configuring SOHO Routers and Access Points

Security Best Practices

• Avoid Default Credentials: Change default usernames and passwords (e.g., Linksys WRT54G uses 'admin'/'admin').
• Online References: Default credentials can be found online (e.g., routerpasswords.com).
• Firmware Updates: Regularly update firmware for bug fixes and security patches.

Content Filtering

• Allow List: Block all traffic except specific IPs or domain names; high maintenance.
• Deny List: Allow all traffic except specific IPs or sites; used for security purposes.

Device Configuration

• All-in-One Devices: SOHO devices often combine router, switch, firewall, and content filter.
• Access Point Placement: Secure and strategic placement for optimal coverage and safety.

Network Configuration

• DHCP vs. Static IP: Use DHCP for automation; static IPs for consistent network configuration.
  • DHCP Reservations: Assign IPs based on MAC addresses for consistency.
• WAN IP Address: Usually dynamic; a static IP can be requested from ISP for additional cost.

UPnP and Security

• Universal Plug and Play (UPnP): Automatically configures router for applications.
  • Security Risk: Can introduce vulnerabilities; best practice is to disable UPnP.

SSID and Wireless Security

• SSID Configuration: Change default SSID to avoid easy access to vulnerabilities.
  • SSID Broadcast: Disabling broadcast hides network but does not secure it.
• Wireless Encryption:
  • WPA2/WPA3 Personal: Use at home with a pre-shared key.
  • WPA2/WPA3 Enterprise: Use in offices with centralized authentication.
• Guest Networks: Separate from private network; useful for IoT devices and guest access.

Network Ports and Access

• Ethernet Ports: Disable unused ports to prevent unauthorized access.
• Network Access Control (NAC): Requires authentication even if an Ethernet port is used.

Port Forwarding

• Configuration: Redirects traffic from external to internal IPs and ports.
  • Static NAT: Permanent translation until manually changed.
  • Dynamic via UPnP: Automatically configured, often used by gaming devices.

Conclusion

Maintaining a secure and efficient SOHO network involves careful configuration of hardware and software settings, regular updates, and proper network management practices.