Chance Merlin can support WDS security?

[Livin]

Looks like others (TP-Lin, DD-WRT, etc) support WDS with AES... any chance we can get this?

I want to use WDS Hybrid but really not happy with having an insecure radio

thanks!

 

[tsunami2311]

unless i missing something the option for WDS is there on my AC66U

 

[RMerlin]

WDS by its design requires that you have a static encryption key. This is why only open and WEP is supported.

Those few manufacturers who support WPA are using a non-standard implementation, and probably disabling the key rotation required with standard WPA/WPA2, which means your network isn't as secure as you would think.

 

[Livin]

WDS by its design requires that you have a static encryption key. This is why only open and WEP is supported.

I'm using Merlin firmware (RT-AC68U_3.0.0.4_374.43_2) on both routers and don't see anywhere to input WEP key - I only have Open, two WPA & two WPA2 options?

thanks for the help!

 

[RMerlin]

I'm using Merlin firmware (RT-AC68U_3.0.0.4_374.43_2) on both routers and don't see anywhere to input WEP key - I only have Open, two WPA & two WPA2 options?

thanks for the help!

Could be some other functions that need to be changed first to allow WEP usage.

I've never used WDS, so I don't know the details on how it's configured.

 

[AndreyPopov]

Could be some other functions that need to be changed first to allow WEP usage.

I've never used WDS, so I don't know the details on how it's configured.

WEP key absent on wireless page!!!!!!!!!!!

only when select Legacy mode WEP options appear

 

[Livin]

@AndreyPopov ... nice find, thank you!

@RMerlin ... is there a way to limit MAC address ONLY on the 5GHz radio?
- Not perfect but it would provide basic security.
- Someone would have to know the MAC addresses of the routers and have to know you were limiting them to crack into the communication link.

thanks for helping

 

[RMerlin]

WEP key absent on wireless page!!!!!!!!!!!

only when select Legacy mode WEP options appear

That's on purpose. Wireless mode must be set to Legacy, as Auto would conflict with WEP mode (WEP does not support auto, n or ac).

 

[RMerlin]

@AndreyPopov ... nice find, thank you!

@RMerlin ... is there a way to limit MAC address ONLY on the 5GHz radio?
- Not perfect but it would provide basic security.
- Someone would have to know the MAC addresses of the routers and have to know you were limiting them to crack into the communication link.

thanks for helping

Not through the webui.

 

[Livin]

For those following this thread...
Using merlin on the main router and installed Shibby tomato on the WDS-side router... All works perfectly even with security enabled.
Using merlin on both sides, even with identical Ac68u routers was unstable. The distance is only about 20 feet and two inside walls
I use 2.4 dedicated for the bridge on the WDS-side, and have the 5ghz for clients
Clients can use both radios on the main router
I may switch to 5ghz dedicated on the WDS-side bride to see how that performance is.