hi sbwright:

on which subnet is the the server you control with yout subnet? If it is on the internal net you have a routing between your two nets and then botz networks are open (regarding to WEP).

That's all not very practical. If you use WEP anywhere in your network you open a whole to ALL machines which are sending traffic to this access point.

No second router, firewall, or seperate VLAN will help !

bye

One thing you can do on the WAP router is only allow certain ports available to the WEP network via Port Forwarding. You need to know what things you want the Pronto to control on the WAP network and only allow that access because WEP will be a hole into the WAP network. Not a perfect solution but it could limit your exposure.

Currently my Windows 2003 server is connected on my Internal network not the Pronto network. The 2 networks can NOT talk to each other, and I have had no need to be able to until now. (Well actually they could connect together thru the laptop which contained 2 network cards but I never ran with both cards active.)

I am currently changing my configuration as I am adding Slim devices and require an XP machine on the pronto network on which to run SqueezeCenter due to the Pronto WEP requirement. I then need to be able to replicate and keep sync'd the music directory on my server to the pronto XP machine. I will be following the same layout as Lembke has described from GRC using 2 routers in SERIAL. Unfortunately this XP machine will be out there and will require locking down the best I can. Its sole purpose is squeezecenter so the risks are low, other than giving away my music collection and Internet connection.

For anyone looking for help with networking and security you should check out GRC.com. S. Gibson does a free security podcast,.he has the ability to translate this material into language any of us can understand.

Howdoin---

I see you have a Vudu box on the network. Do you control it using a pronto over the network? If so, what box do you have? I have the basic box but they stopped supporting netremote on that box. I am trying to do it myself but don't know where to get older firmware or how to intstall it. Any help would be appreciated. TIA

rdb001,

This thread has not been active for 6 months. You will likely have better luck sending Howdoin a private RC message as with 49 or so posts, he/she is not a frequent poster.

I see now that this thread is pretty old but will try here first.

I like nyjklein (Jeff) have the Dlink DIR655. I have a few 11g devices around the house: laptop, ipod touch, wifi Xbox adapter, etc. All work flawlessly with the DIR-655 with 128 bit (open) WEP and the same passphrase key.

Before introducing the TSU9600 I also did as the Phillips KB suggests:
disable automatic channel selection, and I also set the router to only connect to 11g and 11b devices.

Problem is I cannot get the 9600 to connect to the router for anything. I verifed it can work after much shotgun troubleshooting by turning router WEP off, changing the XCF for the panel to same, reloading, and testing went fine. Signal levels are solid and extender connection and panel responsiveness were OK.

Then I switched back again to WEP 128, and tried both passphrase and hex keys to no avail.

Anybody ever see the TSU9600 dislike certain wifi WEP stacks?? Anythiing else anyone can suggest for troubleshooting? One thing that would help are any 9600 pages that have more status and error information than the "tools" info tab. Are there system pages in the control panel that can be accessed to find why the connection is failing?

Thanks in advance

I'm seeing exactly this with my recently purchased TSU9600. I have a D-Link DWL-2000AP+ WLAN access point and I'm running the latest 6.0.21 firmware on the 9600.

- Mixed mode b/g is not a problem.
- "Shared key" mode is a non-starter: I don't even get the wireless symbol.
- The 9600 connects with no problem when the network is open and unencrypted.
- With WEP 64 and 128 in ASCII mode, I get the ? symbol (IP problem) over the wireless symbol.

However, both WEP 64 and 128 modes seem to be working if I enter a hex key in for the 9600.

I also had that problem, with some routers the ASCII works, with others not.
That's my conclusion, maybe someone elso has a solution......
So i just always take the hex key.

I am a proponent of "Seperates". In my A/V work I have seperates, a video processor, and sudio processor, a power amp not a receiver.

In my Home Automation work I build independent subsystems, each self sufficient but under the control and monitoring of a central authority

In my network I have ONE main router that connects to the WAN modem, has a 4 port switch, and two analog telephone ports for VoIP. On the network sit several WAP's all running WEP 128, two with the same SSID, and one with a different SSID. The three WAP's use radio channels 1,6,11.

The network philosophy (not good for others) is open communications (no firewalls on any host) on the LAN, and high protection on the WAN side. The WAN connection download speed is 4 mbps (measured). The house is very unfriendly to wireless signals coming in from the outside due to its construction. I run a DHCP server on one of the 24/7 PC's that handles reservations and other features.

Am I perfectly safe hacker wise? I doubt it, no one is unless they want to spend a lot of money. Wireless is only used by the Pronto's and occasionally a laptop if I want to work in bed. The network is under utilized with about 20 hosts configured (PC's, Wall tablets, Pronto's, TCP/IP interface devices). The network is trouble free and has been that way for several years with many changes along the way. If I am not streaming music the network load is under 2%.