|Skip Navigation Links|
|Exit Print View|
|Oracle Solaris Administration: Network Interfaces and Network Virtualization Oracle Solaris 11 Information Library|
Radio wave technology makes WiFi networks readily available and often freely accessible to users in many locations. As a result, connecting to a WiFi network can be an insecure undertaking. However, certain types of WiFi connections are more secure:
Connecting to a private, restricted-access WiFi network
Private networks, such as internal networks established by corporations or universities, restrict access to their networks to users who can provide the correct security challenge. Potential users must supply a key during the connection sequence or log in to the network through a secure VPN.
Encrypting your connection to the WiFi network
You can encrypt communications between your system and a WiFi network by using a secure key. Your access point to the WiFi network must be a router in your home or office with a secure key-generating feature. Your system and the router establish and then share the key before creating the secure connection.
The dladm command can use a Wired Equivalent Privacy (WEP) key for encrypting connections through the access point. The WEP protocol is defined in IEEE 802.11 specifications for wireless connections. For complete details on the WEP-related options of the dladm command, refer to the dladm(1M) man page.
The next procedure shows how to set up secure communications between a system and a router in the home. Many wireless and wired routers for the home have an encryption feature that can generate a secure key. This procedure assumes that you use such a router and have its documentation available. The procedure also assumes that your system is already plugged into the router.
Refer to the manufacturer's documentation for instructions. Router manufacturers typically offer an internal web site or a graphical user interface for router configuration.
Follow the manufacturer's instructions for creating a secure key for the router. The router configuration GUI might ask you to supply a passphrase of your choice for the key. The software then uses the passphrase to generate a hexadecimal string, typically 5 bytes or 13 bytes in length. This string becomes the value to be used for the WEP key.
Refer to the manufacturer's documentation for instructions.
For more information, see How to Obtain Administrative Rights in Oracle Solaris Administration: Security Services.
Open a terminal window on the system and type the following:
# dladm create-secobj -c wep keyname
where keyname represents the name you want to give to the key.
The create-secobj subcommand then runs a script that requests the value for the key.
provide value for keyname: 5 or 13 byte key confirm value for keyname: retype key
This value is the key that was generated by the router. The script accepts either a five byte or thirteen byte string, in ASCII or in hexadecimal for the key value.
# dladm show-secobj OBJECT CLASS keyname wep
where keyname is the name for the secure object.
# dladm connect-wifi -e network -k keyname interface
# dladm show-wifi LINK STATUS ESSID SEC STRENGTH MODE SPEED ath0 connected net1 wep good g 11Mb
The wep value under the SEC heading indicates that WEP encryption is in place for the connection.
Example 10-3 Setting Up Encrypted WiFi Communications
Connected your system to a home router that can create a WEP key
Followed the router manufacturer's documentation and created the WEP key
Saved the key so that you can use it to create the secure object on your system
# dladm create-secobj -c wep mykey provide value for mykey: ***** confirm value for mkey: *****
When you supply the WEP key generated that is by the router, asterisks mask the value that you type.
# dladm show-secobj OBJECT CLASS mykey wep # dladm connect-wifi -e citinet -k mykey ath0
This command establishes an encrypted connection to the WiFi network citinet, using the secure object mykey.
# dladm show-wifi LINK STATUS ESSID SEC STRENGTH MODE SPEED ath0 connected citinet wep good g 36Mb
This output verifies that you are connected to citinet through WEP encryption.