Security+ Lab · Wireless Defenses

Harden a Wireless Network

SY0-701 · 2.2.8.1 2.2.10 2.5.11.6 4.1.5

You're a contract security consultant brought in by Marsh & Halloran, a 24-person design studio. Their wireless is running on factory defaults and anyone in the building's shared lobby can associate with it. The office manager, Priya Anand, has given you console access to the new AeroLink AL-340 wireless controller and wants three things locked down today: the default administrator account, who is allowed to connect, and a standing rule to keep recreational devices off the corporate radio. Work through the console on the left, then answer the review questions and submit your completed lab.

https://10.42.7.5/manage AeroLink AL-340

Controller sign-in

Default credentials are printed on the unit. Sign in to begin hardening.

Administrator name

Password

Sticker on the AL-340: user admin · pass aerolink

Administrator account

Replace the factory account. Passwords must be 10+ characters with upper, lower, a number, and a symbol.

Credentials

New administrator name

New password

Confirm password

Layer 2 access control (MAC filtering)

Create an allow list, then add the four approved hardware addresses. Only listed devices will be permitted to associate.

Access list

List name

Mode

Allowed devices

Add MAC address

Hardware address
No devices added yet.

Device access policy

Build a named policy that keeps a category of devices off the wireless. Name it, choose the category to deny, then enable it.

New policy

Policy name

Device category to deny

Enforce this policy

Active policies

Name	Denies	State
No policies defined.