How can I fully secure my DIR-655 router Wi-Fi without using WPA2-Enterpirse?

Question

Hi,

I seem to be living a neighbor hood of hackers.
I have a DIR-655 Xtreme N Gigabit router who's Wi-Fi SSID is hidden and is encrypted with a 32 random character WPA2-Personal encryption key (TKIP/AES). I have it configured to allow only specific MAC addresses access the network (using mac filter) and I have the DHCP server configured to manage and RESERVE only 9 local IP addresses (because there are 9 devices in my home that use the internet).

The router has been working great but I have been noticing something strange, some unknown MAC addresses keep finding their way into my MAC filter list. Tried using the access control options, under the advanced tab, to block all their mac addresses (got them when they sneaked into my mac filter list), but still no luck, they keep finding their way into my MAC filter list.

Would you know of any other way I could strengthen my network security besides upgrading the encryption to WPA2-Enterprise (AES only)? I need it to remain at this security level [WPA2-Personal (TKIP/AES)] because I have a device (PSP) which doesn't support such encryption (all thanks to Sony for their sluggish behaviour in adding such small but mighty update).

Side note:
About the hackers, I don't think they are doing this for internet but more for spying because the access control is to block them (their MAC addresses) from getting internet but even though it's there, they still keep coming back and replacing some MAC addresses with their own.

Answer 1

MAC filtering and SSID hiding do not provide any security at all. They are pure snake oil. Only the encryption key provides security.



If you find that your MAC filter list is being modified, then someone has the ability to log into your router. You should change the *login* password to something unguessable.

Answer 2

I was about to suggest the same as JoelKatz.



You could completely lock down access to devices with approved MAC addresses - that won't help if someone is hacking your router admin password though.



Can you allow your PSP MAC while upgrading the encryption? (again, if the router can be hacked...)



Is there a firmware update for your router?



It's odd that you are being hacked so easily while taking exceptional care - the CIA or FBI would not crack your router this quickly!. Make sure you don't have a keylogger or malware infection, or wherever you save your passcode is not being told to people.

Answer 3

JoelKatz is right