|
This article is primarily for network administrators and others who manage their own network. If you're trying to join a Wi-Fi network, one of these articles should help:
About privacy and security warnings Before changing the settings on your router
Router settingsTo ensure that your devices can connect securely and reliably to your network, apply these settings consistently to each Wi-Fi router and access point, and to each band of a dual-band, tri-band, or other multiband router. Security
The security setting defines the type of authentication and encryption used by your router, and the level of privacy protection for data transmitted over its network. Whichever setting you choose, always set a strong password for joining the network.
Weak security settings to avoid on your routerDon't create or join networks that use older, deprecated security protocols. These are no longer secure, they reduce network reliability and performance, and they cause your device to show a security warning:
Settings that turn off security, such as None, Open, or Unsecured, are also strongly discouraged. Turning off security disables authentication and encryption and allows anyone to join your network, access its shared resources (including printers, computers, and smart devices), use your internet connection, and monitor the websites you visit and other data transmitted over your network or internet connection. This is a risk even if security is turned off temporarily or for a guest network. Network name (SSID)
The Wi-Fi network name, or SSID (service set identifier), is the name your network uses to advertise its presence to other devices. It's also the name that nearby users see on their device's list of available networks. Use a name that's unique to your network, and make sure that all routers on your network use the same name for every band they support. For example, don't use common names or default names such as linksys, netgear, dlink, wireless, or 2wire, and don't give your 2.4GHz and 5GHz bands different names. If you don't follow this guidance, devices might not connect reliably to your network, to all routers on your network, or to all available bands of your routers. And devices that join your network are more likely to encounter other networks that have the same name, and then automatically try to connect to them. Hidden network
A router can be configured to hide its network name (SSID). Your router might incorrectly use ”closed” to mean hidden, and ”broadcast” to mean not hidden. Hiding the network name doesn't conceal the network from detection or secure it against unauthorized access. And because of the way that devices search for and connect to Wi-Fi networks, using a hidden network might expose information that can be used to identify you and the hidden networks you use, such as your home network. When connected to a hidden network, your device might show a privacy warning because of this privacy risk. To secure access to your network, use the appropriate security setting instead. MAC address filtering, authentication, access control
When this feature is enabled, your router can be set up to allow only devices that have specified MAC (media access control) addresses to join the network. You shouldn't rely on this feature to prevent unauthorized access to your network, for these reasons:
To secure access to your network, use the appropriate security setting instead. Automatic firmware updates
If possible, set your router to automatically install software and firmware updates as they become available. Firmware updates can affect the security settings available to you, and they deliver other important improvements to the stability, performance, and security of your router. Radio mode
These settings, available separately for the 2.4GHz and 5GHz bands, control which versions of the Wi-Fi standard the router uses for wireless communication. Newer versions offer better performance and support more devices concurrently. It's usually best to enable every mode offered by your router, rather then a subset of those modes. All devices, including older devices, can then connect using the fastest radio mode they support. This also helps reduce interference from nearby legacy networks and devices. Bands
A Wi-Fi band is like a street over which data can flow. More bands provide more data capacity and performance for your network. Channel
Each band of your router is divided into multiple, independent communication channels, like lanes in a street. When channel selection is set to automatic, your router selects the best Wi-Fi channel for you. If your router doesn't support automatic channel selection, choose whichever channel performs best in your network environment. That varies depending on the Wi-Fi interference in your network environment, which can include interference from any other routers and devices that are using the same channel. If you have multiple routers, configure each to use a different channel, especially if they are close to each other. Channel width
Channel width specifies how large of a ”pipe” is available to transfer data. Wider channels are faster but more susceptible to interference and more likely to interfere with other devices.
DHCP
DHCP (dynamic host configuration protocol) assigns IP addresses to devices on your network. Each IP address identifies a device on the network and enables it to communicate with other devices on the network and internet. A network device needs an IP address much like a phone needs a phone number. Your network should have only one DHCP server. If DHCP is enabled on more than one device, such as on both your cable modem and router, address conflicts might prevent some devices from connecting to the internet or using network resources. DHCP lease time
DHCP lease time is the length of time that an IP address assigned to a device is reserved for that device. Wi-Fi routers usually have a limited number of IP addresses that they can assign to devices on the network. If that number is depleted, the router can't assign IP addresses to new devices, and those devices can't communicate with other devices on the network and internet. Reducing DHCP lease time allows the router to more quickly reclaim and reassign old IP addresses that are no longer being used. NAT
NAT (network address translation) translates between addresses on the internet and addresses on your network. NAT can be understood by imagining a company's mail department, where deliveries to employees at the company's street address are routed to employee offices within the building. Generally, enable NAT only on your router. If NAT is enabled on more than one device, such as on both your cable modem and router, the resulting ”double NAT” might cause devices to lose access to certain resources on the network or internet. WMM
WMM (Wi-Fi multimedia) prioritizes network traffic to improve the performance of a variety of network applications, such as video and voice. All routers that support Wi-Fi 4 (802.11n) or later should have WMM enabled by default. Disabling WMM can affect the performance and reliability of devices on the network. Device features that can affect Wi-Fi connectionsThese features might affect how you set up your router or the devices that connect to it. Private Wi-Fi AddressIf you're connecting to a Wi-Fi network from an iPhone, iPad, iPod touch, or Apple Watch, learn about using private Wi-Fi addresses in iOS 14, iPadOS 14, and watchOS 7. Location ServicesMake sure that your device has Location Services turned on for Wi-Fi networking, because regulations in each country or region define the Wi-Fi channels and wireless signal strength allowed there. Location Services helps to ensure that your device can reliably see and connect to nearby devices, and that it performs well when using Wi-Fi or features that rely on Wi-Fi, such as AirPlay or AirDrop. On your Mac:
On your iPhone, iPad, or iPod touch:
Auto-Join when used with wireless carrier Wi-Fi networksWireless carrier Wi-Fi networks are public networks set up by your wireless carrier and their partners. Your iPhone or other Apple cellular device treats them as known networks and automatically connects to them. If you see ”Privacy Warning” under the name of your carrier's network in Wi-Fi settings, your cellular identity could be exposed if your device were to join a malicious hotspot impersonating your carrier's Wi-Fi network. To avoid this possibility, you can prevent your iPhone or iPad from automatically rejoining your carrier’s Wi-Fi network:
|
|
|
来自： CITSLINC66 > 《理》
Set to WPA3 Personal for better security
Set to 8 hours for home or office networks; 1 hour for hotspots or guest networks
