In today's corporate and home security environment, wireless network access control is a particularly pressing issue. It's often necessary not only to password-protect traffic, but also to make the access point itself invisible to unauthorized scanners. The company's equipment Eltex, widely used by providers and in the business segment, allows you to implement the SSID hiding function, which is the first barrier for casual users.
Hiding your network isn't a panacea, but it significantly reduces "noise" and the likelihood of unauthorized connection attempts by inexperienced users. In this article, we'll cover how to set it up in detail. Broadcast SSID on various Eltex switch and router models, and we will also discuss additional perimeter security measures.
Before changing settings, ensure you have physical or remote access to the device via the console port or web interface. Any changes to the radio module configuration may temporarily interrupt the connection, so it's important to proceed sequentially and test the results at each step.
⚠️ Note: Hiding the SSID does not encrypt data. It only hides the network name from available lists, but traffic can still be intercepted without WPA2/WPA3 encryption.
Why hide the SSID on a corporate gateway?
The main reason administrators hide the network service set identifier (SSID) is to reduce the visibility of their infrastructure. When a network isn't visible in the list of available connections on guests' or employees' smartphones, it eliminates unnecessary questions and random connection attempts. For equipment Eltex, often operating at the edge of the network, this is a standard practice to minimize the attack surface.
Hiding the network also helps avoid name conflicts in densely populated areas or office buildings, where multiple access points may have the same factory name. This simplifies the management of client devices, which will only connect using the exact name specified in the profile.
However, it's important to understand the technical side of the process. Even with broadcasting disabled, control packets (beacon frames) continue to circulate, simply without the network name field. Advanced traffic analyzers will still be able to detect activity, but to the average user, the network will appear as a "hidden network."
Preparing to set up Eltex equipment
To make changes to the wireless interface configuration, you will need access to the device's command line. This can be done via a console cable connected directly to the device's port or via the protocol. SSH, if remote control is already configured. Make sure your account has permissions at the level Privileged Exec.
Before starting work, it is recommended to create a backup copy of the current configuration. This will allow you to quickly roll back changes in the event of unexpected errors or loss of connection to the device. In the environment Eltex This is done with the standard command of copying running-config to startup-config or to an external file.
It's also important to know what mode your device is operating in. On switches of the series WES or SM with wireless network controller functions, the steps may differ slightly from the classic series routers NRCheck your software version, as command syntax may be updated in new firmware versions.
Hiding the network via the web interface
The best way to manage settings is through the graphical interface. To access it, enter the device's IP address in your browser and log in. Eltex It is usually structured logically, allowing you to find your wireless network settings without having to delve into the documentation.
You need to go to the section responsible for wireless settings. Depending on the model, this may be the tab Wireless, WLAN or WiFi SettingsFind a list of existing SSIDs or radio access profiles.
Select the desired network profile (for example, ssid1 or corporate). In the settings window that opens, look for the setting related to broadcasting. It may be called Broadcast SSID, Hide SSID or Visibility StatusYou need to change the value to Disable or Hidden.
☑️ Checking web interface settings
After applying the settings, the device may reboot the radio module. Clients connected at this point will lose connection and will need to reconnect by manually entering the network name, as automatic discovery will not work.
Configuration via the command line (CLI)
For professional administrators, a more efficient approach is to use the CLI. This method gives finer control over parameters and allows for automation of the process. Configuration mode is entered with the command configure terminal.
Next, you need to switch to the configuration context for a specific wireless network interface. This is usually done using the command interface wlan 1 or similar, where the number denotes the virtual interface number or SSID. In this mode, all radio channel parameters are available.
configure terminalinterface wlan 1
no broadcast-ssid
end
write memory
Team no broadcast-ssdi (or variation ssid-hide depending on the OS version Eltex) disables the sending of beacon frames with the network name. After executing the command, remember to save the configuration to non-volatile memory, otherwise the settings will be lost after a reboot.
⚠️ Note: Command syntax may vary depending on the model (e.g. Eltex MES vs NR vs WES). Always use the command
?after entering part of the command to view available options.
To check the result, use the command show running-config interface wlan 1In the output, you should see a line confirming that broadcasting has been disabled. If the parameter is missing or set to broadcast-ssid, which means the network is still visible.
Features of setting up different Eltex series
Equipment line Eltex The range of devices available is extensive, and configuration approaches may vary. Below is a table to help you understand the differences between the main series of devices supporting WLAN functionality.
| Device series | Device type | Setting location | CLI command (example) |
|---|---|---|---|
| Eltex NR | Router | Wireless -> SSID Settings | no broadcast-ssid |
| Eltex WES | Wi-Fi switch | WLAN -> Global Config | ssid-hide enable |
| Eltex MES | Access switch | Not directly supported* | N/A |
| Eltex TAU | Gateway | WiFi -> Basic Settings | hide-ssid |
Pay attention to the line about the series switches MESThese devices often work in conjunction with external access points or controllers. In this case, network hiding should be done not on the switch, but on the controller itself or the access point to which it is connected.
For devices of the series TAU, which are often used as subscriber gateways, the interface can be simplified. There, the hiding option is often located on the main wireless network settings page and indicated by the "Hide SSID" checkbox.
What to do if the command doesn't work?
If the command isn't recognized, your firmware version may be outdated or your device may not support this feature in its current operating mode (e.g., bridge mode). Try updating the firmware or checking the documentation specifically for your hardware revision.
Connecting clients to a hidden network
Once you've successfully hidden a network, the connection process becomes more complicated for end users. Operating systems (Windows, Android, iOS) will not offer this network in the general list. The user must manually create a new connection profile.
In the device's Wi-Fi settings, select "Add network" or "Connect to a hidden network." It's critical to enter the SSID name exactly, including capitalization. Any error will result in connection failure, as the device will not be able to find the access point with the specified name.
You also need to select the correct security type. If the router Eltex installed WPA2-PSK, then you need to select it on the client. Automatic encryption type detection often doesn't work when connecting to a hidden network.
Additional wireless network security measures
Hiding the SSID is just one layer of protection, known as "security through obscurity." It shouldn't be relied upon alone. To build a truly secure infrastructure based on Eltex It is necessary to use an integrated approach.
First and foremost, use strong encryption algorithms. Avoid outdated ones. WEP and even WPA in favor of WPA2-AES or WPA3Eltex equipment supports modern standards, and there is no reason to use leaky protocols.
- 🔐 Use complex passwords of at least 12 characters, including numbers and special characters.
- 📡 Implement network segmentation (VLAN) to prevent guests from accessing internal company resources.
- 📋 Set up MAC address filtering for critical devices, although this is not absolute protection.
- 🔄 Update your router software regularly to patch vulnerabilities.
It is also recommended to disable the function WPS (Wi-Fi Protected Setup), as it often contains vulnerabilities that allow network passwords to be recovered, no matter how complex. On Eltex devices, this is done in the same wireless settings section.
How safe is it to hide your SSID?
Hiding the SSID provides a basic level of privacy by concealing the network from regular users. However, this isn't a barrier to hackers, as the network name is transmitted in clear frames when authorized clients connect. This provides protection from prying eyes, but not from a targeted attack.
Will my Wi-Fi speed decrease after hiding?
No, the data transfer rate will not change. Hiding the SSID only affects service frames (beacons), which take up a negligible portion of the bandwidth. The main load is generated by user traffic, which remains unchanged.
Is it possible to restore access if I forgot the name of a hidden network?
Yes, if you have physical access to the Eltex router. You can reset the device to factory settings by pressing the Reset button (usually holding it for 10-15 seconds), after which the network will become visible with the factory name indicated on the sticker. Alternatively, you can connect via LAN cable and view the settings in the interface.