BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 09-07-2009, 02:24 PM   #1 (permalink)
Knows Where the Search Button Is
 
Join Date: Oct 2005
Location: Indiana
Model: 9700
Carrier: ATT--Stick with us and nobody gets hurt
Posts: 40
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Hidden SSID prevents wifi connection on 8820

Please Login to Remove!

Hi folks,

I've searched many threads here and elsewhere without an answer. Hopefully someone can point me in the right direction. For the life of me, I can't get my blackberry to connect to my network unless I turn on transmission of the SSID. Here are the details:

Just got a new 8820 running OS 4.5.

My home wifi network is running WPA2 with AES encryption and a specific preshared key. I also use MAC address filtering and have entered the BB's MAC into the allowed list.

Normally, I leave the SSID as hidden (not transmitted) for the increase in security that provides. FWIW, I've got a Belkin N+ Gigabit router. All other devices (laptops and an iTouch) work fine in this environment.

If I turn on the SSID broadcast, the blackberry finds the network and connects to it just fine. The minute I turn off SSID broadcast, the BB loses the connection. Nothing I can do brings it back. Even manually entering the network name and re-entering the PSK does not help. It fails to find or connect to the network.

To be clear, I've tried setting up the network while SSID is on, which works, but the network fails and won't reconnect after I turn off SSID broadcast.

If I clear out that network name, and use the Manually Add Network, selecting PSK encryption and entering in my proper PSK, I have never been able to connect.

Is there some setting I need to change? Some special process to go through?

To me broadcasting one's SSID for a home network is a serious security risk so I prefer not to do this.

One additional note: originally my router was set to use WPA/WPA2 TKIP/AES. In this mode, the BB never connected, whether or not the SSID was being sent, and the BB never could even see the network in its list. Changing to strict WPA2/AES fixed that situation.

Please help! This is driving me nuts.

Marc
Offline  
Old 09-07-2009, 02:31 PM   #2 (permalink)
BBF Spam Killer Moderator
 
daphne's Avatar
 
Join Date: May 2007
Location: on a sunny beach
Model: Z30
OS: 10.2.1.12
PIN: X1ZPY34K
Carrier: VZW
Posts: 9,169
Post Thanks: 122
Thanked 146 Times in 116 Posts
Default

Quote:
To me broadcasting one's SSID for a home network is a serious security risk so I prefer not to do this.
This is a misconception that many people have. It actually gives a false sense of security and does not provide any real protection. Some info here:

Your SSID Isnxxx8217;t Hidden Forever - www.wi-fiplanet.com
Wi-fi Mythbuster: Do NOT hide your SSID - TECH.BLORGE.com

Edit, better article here:
http://blogs.technet.com/steriley/ar...ess-ssids.aspx
__________________
Report spam text messages to 7726
#BlackBerry by choice #BlacBerry 10 is here!

Last edited by daphne : 09-07-2009 at 02:37 PM.
Offline  
Old 09-07-2009, 02:39 PM   #3 (permalink)
Knows Where the Search Button Is
 
Join Date: Oct 2005
Location: Indiana
Model: 9700
Carrier: ATT--Stick with us and nobody gets hurt
Posts: 40
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default

Daphne,

OK, point conceded, disabling SSID isn't the end-all and be-all of security. That's why I use WPA2 + MAC filtering. But, it's a reasonable step to take to:

A) Make me less of an obvious target to the suburban script-kiddies in my neighborhood, and

B) Prevent "Joe-next-door" from trying to log onto my network through his sheer laziness in failing to prioritize his network association preferences.

If someone wants to hack me, they will, but I believe in doing all the simple things I can to reduce the threat from both intentional and accidental intrusion.

That said, does anybody have some ideas I can try to make this work?

TIA

Marc
Offline  
Old 09-07-2009, 02:43 PM   #4 (permalink)
Grumpy Moderator
 
NJBlackBerry's Avatar
 
Join Date: Aug 2004
Location: Somewhere in the swamps of Jersey
Model: iPh6
Carrier: AT&T
Posts: 27,821
Post Thanks: 33
Thanked 442 Times in 382 Posts
Default

It may be reasonable, but unnecesssary and doesn't do anything with respect to your A) and B) solutions. WPA2 and MAC filtering and very reasonable security measures to take in a home environment.
Offline  
Old 09-07-2009, 02:58 PM   #5 (permalink)
BBF Spam Killer Moderator
 
daphne's Avatar
 
Join Date: May 2007
Location: on a sunny beach
Model: Z30
OS: 10.2.1.12
PIN: X1ZPY34K
Carrier: VZW
Posts: 9,169
Post Thanks: 122
Thanked 146 Times in 116 Posts
Default

It's easy enought for script kiddies to find your SSID even when it's "hidden" if they have the right tools. Your not-techy neighbors may not be running AirMagnet or Linux with Kismit however. MAC address filtering is not difficult to overcome either.

I'm thinking what you want to do -- having the BlackBerry connect with the SSID hidden -- is not possible, but I might be wrong.
__________________
Report spam text messages to 7726
#BlackBerry by choice #BlacBerry 10 is here!
Offline  
Old 09-07-2009, 03:53 PM   #6 (permalink)
Knows Where the Search Button Is
 
Join Date: Oct 2005
Location: Indiana
Model: 9700
Carrier: ATT--Stick with us and nobody gets hurt
Posts: 40
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default

Googling around shows that lots of people get it working fine. I'm presuming that I'm somehow omiting a step or an obscure setting leading to my dismay.

In the worst-case scenario, I can enable my router's "guest access" which effectively broadcasts a different SSID and computers (or blackberries) that connect to it (via a PSK authentication) have internet access, but not access to other computers on the LAN.


Believe me, I realize I'm being a bit pig-headed about the security thing, and that the facts are against meabout SSID hiding, but it's the way I've got my network set up, it works, I like it, and all other devices work fine in the environment. I'm sure there's some way to get it working with the 8820. Hopefully a reader here can steer me in the correct direction. Meanwhile, Daphne thanks for the good references. Appreciated.

Marc
Offline  
Old 09-07-2009, 04:40 PM   #7 (permalink)
BBF Spam Killer Moderator
 
daphne's Avatar
 
Join Date: May 2007
Location: on a sunny beach
Model: Z30
OS: 10.2.1.12
PIN: X1ZPY34K
Carrier: VZW
Posts: 9,169
Post Thanks: 122
Thanked 146 Times in 116 Posts
Default

I do see posts on other forums where people got this to work, but I think all the threads I saw were about the Bold. Is your 8820 running the lastet OS?
__________________
Report spam text messages to 7726
#BlackBerry by choice #BlacBerry 10 is here!
Offline  
Old 09-07-2009, 05:42 PM   #8 (permalink)
Knows Where the Search Button Is
 
Join Date: Oct 2005
Location: Indiana
Model: 9700
Carrier: ATT--Stick with us and nobody gets hurt
Posts: 40
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by daphne View Post
I do see posts on other forums where people got this to work, but I think all the threads I saw were about the Bold. Is your 8820 running the lastet OS?
It is brand new from ATT so is recent. I believe corporate IT policy prevents me from flashing it to latest.
Marc
Offline  
Old 09-07-2009, 05:46 PM   #9 (permalink)
Knows Where the Search Button Is
 
Join Date: Oct 2005
Location: Indiana
Model: 9700
Carrier: ATT--Stick with us and nobody gets hurt
Posts: 40
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default

I'm on 4.5.0.110. I believe my corporate IT policy pevents me from flahing it to newer versions. They control the horizontal and the vertical.

Marc
Offline  
Old 09-07-2009, 05:53 PM   #10 (permalink)
BBF Spam Killer Moderator
 
daphne's Avatar
 
Join Date: May 2007
Location: on a sunny beach
Model: Z30
OS: 10.2.1.12
PIN: X1ZPY34K
Carrier: VZW
Posts: 9,169
Post Thanks: 122
Thanked 146 Times in 116 Posts
Default

Looks like there is a newer version posted in the 8800 series forum here, but not much you can do if the IT policy blocks it. I hope someone has a solution for you.
__________________
Report spam text messages to 7726
#BlackBerry by choice #BlacBerry 10 is here!
Offline  
Old 09-09-2009, 06:26 AM   #11 (permalink)
Knows Where the Search Button Is
 
Join Date: Oct 2005
Location: Indiana
Model: 9700
Carrier: ATT--Stick with us and nobody gets hurt
Posts: 40
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default

If anybody has suggestions, I would appreciate it. Meanwhile I have enabled the "guest wireless access" function on my Belkin router. This sets up a WPA2 / PSK authentication on a separate SSID. The devices that connect to it get internet access but no access to the rest of my LAN. For me this is an acceptable compromise, if not my prefered way of operating.
Marc
Offline  
Old 09-09-2009, 09:04 AM   #12 (permalink)
BlackBerry Extraordinaire
 
Join Date: Jan 2006
Model: LEZ10
OS: 10.0.10
Carrier: Rogers CA
Posts: 1,704
Post Thanks: 20
Thanked 77 Times in 68 Posts
Default

Before I got my Bold I used to run my 8820 this way. The only real reason to hide SSIDs, and the reason I do it, is to prevent people trying to connect to the wrong network. It is amazing how many people, when told to connect to NetA, will try to connect to NetB just cause it is stronger. Then call support when it doesn't work.

Anyway, both my 8820 and my Bold worked 'out of the box' though I use Linksys/Cisco devices running Kamikaze. Also, both have Blackberry data plans.
__________________
My other Blackberry is a PlayBook.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.