Hidden SSID

[glennzo]

Recently, I changed some of the configurations in my router with regard to wireless. Originally I had it set up to broadcast the SSID and used WEP on channel 6. Now I've set it up to use WPA2-Personal, use a much stronger password, hidden SSID and channel 11. It works well, but now every time I log into my Gnome desktop I have to choose what wireless I want to connect to. I have to choose Connect to a hidden wireless network then I need to choose mine and tell it to connect. Before these changes it would connect automatically. I'm wondering if there's something I can change to have wireless connect automatically or is this just the way it is with hidden SSID's and stronger security?

[JonEberger]

If this is a laptop that changes position (different wireless networks), I think I would like this behavior. I wouldn't want nm-applet searching for a network that wasn't there draining battery power or trying to switch to that network during the middle of another connection.

[smr54]

My experience (only on wife's Ubuntu laptop), is that this shouldn't be happening. It should automatically, once you've set it up in NM, see it and connect.

(WIth my laptops and Fedora, I don't use NM, so no experience there. )

[Iron_Mike]

Glenn, unhide the SSID and it will connect automatically like before.

[JonEberger]

Originally Posted by Iron_Mike

Glenn, unhide the SSID and it will connect automatically like before.

Agreed....

[glennzo]

Originally Posted by JonEberger

If this is a laptop that changes position (different wireless networks), I think I would like this behavior. I wouldn't want nm-applet searching for a network that wasn't there draining battery power or trying to switch to that network during the middle of another connection.

Good points and I thank you for that, however, this is a laptop that never sees the light of day outside of the house. That said, it would be nice if the old behavior returned.

I shall unhide the SSID when I get the next opportunity. Thanks gents.

[JonEberger]

You're very polite. :-)

I keep mine unhidden. In practice, is there a security advantage to keeping your SSID hidden if you have strong passkeys on WPA2 plus a MAC filter?

I know that MAC addresses can be sniffed, but can't SSIDs as well? It seems like the same dilemma for one plagues the other.

[smr54]

Meh, hidden SSIDs are just another, not very strong, layer of security by obscurity. Mine is hidden because it was the default and I never bothered to change it. However, it will still show up on a scan with the MAC address, if not the name.

On the other hand, when I use laptops, (the only desktop that uses it is my wife's Mac, and that had no trouble with it--though I don't remember if it saw it, or if I had to check something off), I configure wpa_supplicant.conf manually anyway, and it's very easy to add the line scan_ssid=1. With my wife's laptop, the only time I've really tried with NM to get it working, I just had to add it the one time, and have had no trouble since. I haven't tried with Fedora's NM, so don't know if Glenn's issue is a Just Him thing or typical.

Regardless, the amount of extra security it provides is very small.

[glennzo]

So back to my original question, assuming that I was clear (debatable). Why do I have to choose a network now when I didn't before. It's a minor PITA but just the same I'd rather it just comes up connected. I assume that it must have something to do with the changes I made.

[glennzo]

Originally Posted by JonEberger

You're very polite. :-)

That's the way it should be, no?

[Dan]

Hmmm.

I run hidden because I live next to a city park, but the best security I've found so far is the little white button on the top of the router that shuts off the wireless when not in use. Most of the time I'm hardwired (CAT5) to the desktop.

[Dan]

Glenn ... I just got curious, and booted my business laptop and it is doing the same thing here now. (F13)

EDIT: Try going in through System>Preferences>Network connections and cleaning out the list until only the ones you want are left in there. Seemed to help here. Now it isn't looking for connections that aren't available, and settles on the one that is.

[Dangermouse]

Originally Posted by Dan

Hmmm.

I run hidden because I live next to a city park, but the best security I've found so far is the little white button on the top of the router that shuts off the wireless when not in use. Most of the time I'm hardwired (CAT5) to the desktop.

Hi Dan,

Its only hidden when no ones connected to the network really, when your connected it will still show the ssid, and to a hacker it will still show in aircrack etc.. ip restriction is a better option and just using characters in the password will stop 99.99999999999999999% of password hacks, anyone who uses wep is asking for it nowadays.

And just as another point wpa2 etc. can only be hacked when someone is connected to it, so switching off the router will make no difference

[Dan]

Ayup. You are correct. My "security plan" here is multi-layered. Mac filtering and ip restriction are part of that. (Separate router and wireless AP) Switching off the router when not needed and unattended is just a little crowbar style method of protecting my bandwidth. <....>

[glennzo]

Originally Posted by Dan

Glenn ... I just got curious, and booted my business laptop and it is doing the same thing here now. (F13)

EDIT: Try going in through System>Preferences>Network connections and cleaning out the list until only the ones you want are left in there. Seemed to help here. Now it isn't looking for connections that aren't available, and settles on the one that is.

I thought about that. I think that it may be worthwhile, hoping that when I connect to it for the first time after clean out it will remember.