Gerhard Potgieter

After moving about a month back, I decided that I would need to get signal to my new place. Lucky for me it was only about 1km from my parents’ and los was great towards my new place.

So I modified the kit a bit, and now broadcast with a 14dbi panel towards Bellville Larochelle area.

This weekend 2 members had great success in connecting to the site, one is a brand new member and the other one just moved over from bot so pings and speed will be allot faster for him.

So if you are in that area feel free to scan and if found do the right thing and connect.

With the increased popularity of wireless technology today more and more homes and businesses are starting to use this technology.

What most of these users don’t know is that if you don’t secure your wireless network anybody within range of the network can gain access to it if you don’t have security measures in place.

A while back Telkom started giving away free wireless ADSL routers to all new self install users signing up. This move contributed to a even larger percentage of unsecured wireless networks out there, and these networks are unsecured without the users even knowing it.

If you are into wifi like I am, every now and then you would do a scan just to see how many networks is in your area. With these scans almost every time I picked up at least 2 unsecured wireless home networks. Just to mention I can then easily connect to these networks and then use the ADSL, some cases I could even log in to the wireless router with the default username and password. In a country like South Africa where bandwidth is so expensive there are allot of people out there that exploit these unsecured wireless networks and use up all the bandwidth there is, leaving the owner flabbergasted to hear from his ISP that he used up all his bandwidth.

So I thought it would be a good thing just to list a few things you can do to ensure that your wireless network is protected from unauthorized use.

1. First thing you do when you receive your wireless router is to always change the default username and/or password.
2. Enable some form of security, like WEP, WPA, WPA2, or MAC authentication. This will ask new users to the network for a passkey to be able to connect to the network, or the user’s mac must be enabled on the router.
3. Use static IP addressing rather than a DHCP server. This will make it harder for an intruder to guess your IP range and Gateway IP for internet use.
4. If you are a large business running advanced wireless network use RADIUS to authenticate your users.
5. And last if you can check your router logs as often as possible to see attempts of unauthorized access.

If your are still not sure how to secure your network feel free to leave comments and I’ll try and direct you into the right direction to help you secure your wireless network.

Remember a wireless network is never safe from unauthorized access but you can always make it harder for a person to be able to access it. Always remember a form of security is better than none at all.

DD-WRT has for long been the custom firmware of choice for many Linksys WRT owners. The initial target was just a modification of the original Linksys Firmware for supporting simple Radius Authentication. But the creator decided to add some more small tools and fancy things, just for fun.

Today it has become one powerful firmware and most Linksys WRT owners run it on their devices. To date DD-WRT V23 SP2 was the release that seemed to have the biggest success and many people still use it to date. At the time of DD-WRT V23 SP2 release the creators also started porting the firmware to other platforms like Avila Gateworks, X86, FON Fonera and whatever was comming to the dev table. (about 90 different router types so far).

Today I’m proud to announce the release of DD-WRT v24 packed with even more features.

DD-WRT v24 offers many new features, on of the most important is support of Atheros wlan chipsets and SOC designs. By supporting special features of the Atheros wireless designs like half- and quarter channels and extended channel support DD-WRT is now perfectly suited for long range wireless links. With this DD-WRT is now also supporting the whole Ubiquity line of wireless products using all available features the hardware offers.

Highlights of DD-WRT v24:
- Virtual SSIDs, Virtual DHCP-Servers, PPTP over WAN enhencements, Bridging + VLAN support, VDSL Support, OLSR-Routing / Freifunk, My Ad Network (powered by AnchorFree), Quaqqa instead of Bird (in X86 + Xscale default),  PPPOE-Server, EOIP-Tunnel, Network configuration enhencements, UP-Downstream (QOS), New Packet Scheduler HFSC, Save & Apply, extended DDNS options, extended status information, New Languages, Sipwerk integrated Milkfish into the new release, turning every DD-WRT router into a SIP-aware firewall.

New hardware platforms:
- X86, Avila Gateworks, Cambria Gateworks, Atheros Soc (for a list, please look into the Download Section), Compex,Senao, Fonera, Ubiquiti

I will certainly be upgrading my DD-WRT v23 SP2 to the new one as there is some nice new features aswell as support for longer distance links now. Or with the support of X86 I’ll even consider turning an old pc into a nice RouterPC with some Atheros cards.

Can you say 30ms pings? CTWUG certainly can now. Yesterday some of the guys braved the cold rain and marble sized hail and went out to install the latest addition the the CTWUG high site family namely Jupiter.

Jupiter is situated on top op Tygerberg Hill and cuts the hops in more that half to go from one side of the network to the other side. It boast backbone links to Saturn and Neptune, also another new site, aswell as a 5.8 sector and 2.4 panel towards Durbanville/Brackenfell area. What is great is the latency, its the lowest the WUG has had so far and this is a great plus point for all the gaming enthusiasts.

Just want to give a great thanks to the guys that made this possible in the weather, we as a WUG greatly appreciates it. As for all the users on the WUG, hope you have your KY ready!

During this weekend some of the guys from CTWUG went out to do some maintenance on our Mars high site. During this time they also thought it would be a good opertunity to sort the backbone link to LoemWug.

LoemWug is a Wireless User Group operating in the Southern Suburbs of Cape Town, they have about 40 users according to their admins. CTWUG en LoemWug have been negotiating now for a long time to link up and the day has finally arrived.

CTWUG and LoemWug are now officially linked via the Mars high site, so it safe to say the the combined user total of both WUGS are now almost 100 users. All that has to be done now is sort the routing as the 2 WUGS run on different ip ranges, but I’m sure this will be sorted anytime soon.

And some other news, CTWUG will be putting up its Tygerberg Hill high site tomorrow. After the completion of this site we will have our own fully owned backbone reaching from one point of the network to the other end. The site will provide a one hop link to the other side of the hill which should drop latency quite a bit, it will also have 1 5.8 sector covering Durbanville Brackenfell side of the hill aswell as a 2.4 panel cover the same area. The site will be called Jupiter and will link to Saturn and Pluto via Rellik for now.

Good luck to the team going up tomorrow, hope everything goes smooth and as planned. We are really starting to build a kick ass network now.

Mikrotik announced the release of the RB433 early this week. The RB433 is a high performance AP (Access Point) with a 300mhz Atheros CPU. With the announcement of the RB433 came the EOL (End of line) announcement of the RB333 a performance AP that was based on the PowerPC CPU.

The RB433 is the replacement for the RB333, which is weird cause the RB333 hasn’t been in production for that long. Mikrotik probably used the RB333 to test the PowerPC CPU in their devices. We at CTWUG have a RB333 on one of our highsites and it perform very well.

Back to the RB433, it is kinda a exact replica of the RB333 with exception to its hardware specs and price. The RB344 boasts a Atheros AR7130 300MHz CPU, 64MB Memmory, 3 x 10/100 Ethernet ports with one POE (Power over ethernet) enabled, 3 miniPCI slots for wireless radios, 12~28V DC power jack aswell as POE, and the great RouterOS level4. One thing that it doesn’t support is remote voltage monitoring, something that is expected in a later hardware release.

I spoke to william at Scoop Distribution earlier today and they expect stock arrival by the end of May. The best thing about the RB433 is the price, it will be sold for just under R800 here in SA as apposed to the RB333 that is currently going for R1300 exlc vat. Scoop also told me that they will be selling the RB333 for R1150 as they are trying to clear our the RB333 in expectation of the new RB433.

All and all I’m looking forward to this new High Performance AP from Mikrotik and know they won’t dissapoint as always. Im sure CTWUG will be stoking up on on the RB433 for new highsites and even relay nodes as soon as these babies goes on sale.

So this is the NanoStation2, it gets described as “The Ultimate CPE for the Global WISP Community” but lets see what makes its manufacturers think that this device is so leet. Firstly this is the NanoStation2, where the hell was the NanoStation1? Me being part of CTWUG I have all my doubt in this little device as all devices I know that really packs a punch in the wireless industry is Mikrotik Routerboards. So lets have a look at the NanoStation2 specs as given by the Ubiquiti website.

• Processor Specs: Atheros AR2316 SOC, MIPS 4KC, 180MHz
• Memory Information: 16MB SDRAM, 4MB Flash
• Networking Interface: 1 X 10/100 BASE-TX (Cat. 5, RJ-45) Ethernet Interface
• Wireless Approvals: FCC Part 15.247, IC RS210
• RoHS Compliance: Yes
• TX Power: 26dBm, +/-2dB
• RX Sensitivity: -97dBm +/-2dB
• Antenna: Integrated 10dBi Dual Pol + External SMA
• Outdoor Range: over 15km
• TCP/IP Throughput: 25Mbps+
• Max Power Consumption: 5 Watts
• Power Supply: 12V, 1A (12 Watts). Supply and injector included
• Power Method: Passive Power over Ethernet (pairs 4,5+; 7,8 return)
• Operating Temperature: -20C to +70C (System PCB optimized for hi-temp)
• Operating Humidity: 5 to 95% Condensing
• Shock and Vibration: ETSI300-019-1.4
• Weight: 0.4 kg

Out of personal experience with wifi networking I dont think this devices comes close to the Mikrotik Routerboard 133c, and just to mention the 133c is not being produced anymore as its being replaced with the RB411 that packs a powerful 300Mhz Atheros Networking processor. And the lack of a high gain antenna puts me off, as 10dbi is not worth it for a CPE. The throughput listed there is hard for me to believe, maybe in a lab at a distance of 5m but still then i have my doubts as a 175Mhz Atheros cpu maxes out at about 14mbps. Sure it has a kinda powerful radio, but that anway illegal in South Africa. If I must take a guess the NanoStation would retail at about R700 - R900 here in South Africa and for that price I would rather buy a custom Routerboard CPE from scoop. All in all the NanoStation looks good from the outside but with the multitude of CPE enclosures you get nowadays there is better designs out there.

Just to sum it up, I dont forsee this device competing with any Mikrotik produk in the near future as Mikrotik has a good OS on their devices and has allot of power behind their devices that overtakes the NanoStation by far.