How to Make a Secure Wi-Fi Network (encryption of WIRELESS traffic)

[incognito]

Hello, folks

How can I secure my company's wifi traffic from sniffing by others? In other words, is there "data privacy" functionality over WiFi - regardless of higher layer protocols? 

For WPA+WPA2 Parameters i use WPA2 Policy and WPA2 Encryption (AES) 

For Authentication Key Management I use PSK.

We don't have any authenticating server.

We're using cisco wlc 2504 and several access points. 

 

[Leo Laohoo]

---

@incognito  wrote:

For Authentication Key Management I use PSK.

AES encryption is still good and widely used.  

The weakest link in this chain is PSK.  

1. How many knows the PSK key?
2. How robust (length & combinations) is the key?
3. How often is it rotated?

Not having an authentication server is not a valid excuse either.  The "smallest" authentication server I've seen is FreeRADIUS and hosted in a humble Raspberry Pi that one can purchase for US$<100.  There are even some cheap SOHO NAS that can load FreeRADIUS application.  

[incognito]

Thank you so much, Leo

I understand your point of view.

Ok, if I will have authenticating server for example.  Can existence of a server provide a secure wireless connection?

How can I achieve 100% encrypted traffic in wireless connection? Is it possible? If yes then what is the way of configuration/parameters?

[Leo Laohoo · Accepted solution]

Yes.  Traffic from the wireless client to the controller (and vice versa) is encrypted.  

One other thing:  There will be times when the encryption can be broken.  Back in 2017, the KRACK vulnerability was announced.  If the wireless AP or controller isn't patched then someone can sniff out the traffic. 

Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II