2KKUU7ita

Figure 9-19:
Ensure that
your SSID
is correctly
set.
Chapter 9: Wireless LANs
Even if your network is running WEP or WPA, you can still test your MAC
address controls. You just need to enter your encryption key(s) before
you can connect.
5. Obtain an IP address on the network.
You can do this by rebooting or disabling/enabling your wireless NIC.
However, you can do it manually by running ipconfig /renew at a
Windows command prompt or by manually entering a known IP address
in your wireless network card’s network properties.
6. Confirm that you’re on the network by pinging another host or browsing
the Internet.
In this example, I could ping the AP (10.11.12.154) or simply load my
favorite web browser to see whether I can access the Internet.
That’s all there is to it! You’ve circumvented your wireless network’s MAC
address controls in six simple steps. Piece of cake!
Countermeasures against MAC spoofing
The easiest way to prevent the circumvention of MAC address controls and
subsequent unauthorized attachment to your wireless network is to enable
WPA or ideally WPA2. Another way to control MAC spoofing is by using a
wireless IPS. This second option is certainly more costly, but it could be well
worth the money when you consider the other proactive monitoring and
blocking benefits such a system would provide.
181