Richard Sheridan loves Thomas Edison, hates wires and until recently was thwarted by his wireless network.

His software design firm, Menlo Innovations in Ann Arbor, Mich., is rooted in the principles Edison espoused in his Menlo Software factory in Menlo Park, N.J. Housed in an open space, its 40 software developers work elbow to elbow at large tables; groups form and disperse as projects dictate.

"Edison counted on people overhearing each other so they could share ideas without more meetings," Sheridan says.

But network cables and computer wiring were anathema to Sheridan's vision. So two years ago, Sheridan plugged a wireless router into Menlo's network. He didn't consider that Café Verde next door had a wireless network, too.

Within 15 minutes, Sheridan discovered the café's patrons were riding his connection. He shut down the wireless network.

"In most people's minds, security is a theoretical concern," Sheridan says. "We thought it can't happen to us, then we realized we were quite vulnerable." Unlike in many small firms, everyone at Menlo can handle network administration tasks. The group rotates the work among four people.

Sheridan needed to restrict access from accidental wireless LAN (WLAN) tourists and manage the dynamic flow of office visitors who require a wireless connection. First, he considered restricting WLAN access by network card media access control (MAC) address, but that made adds, moves and changes cumbersome. "We wanted something that didn't require a lot of support," he says, adding, "we didn't want to lose too many billable hours."

All options required more support and maintenance than Sheridan's team could give, so the company remained "shackled" to the network until three months ago, when Menlo began trialing InterLink's LucidLink 802.11 security software.

LucidLink provides enterprise-level network security and access control but hides the configuration details behind a handful of easy setup screens. When a new user tries connect to the wireless network, he's prompted to create a user ID by typing in his name. When he hits "OK," the request is sent to an access point, where an Extensible Authentication Protocol key exchange takes place between the access point and the server.

The exchange generates an eight-digit authentication code that is sent to the user and administrator. The system prompts the user to provide his authentication code. If the codes match, the administrator will authenticate the user.