Subject: [Capwap] Comments on Objective 5.2.14: Trust Model Definitions// Re: Capwap digest, Vol 1 #333 - 1 msg

From: Yao Zhonghui 4776 <[email-masked]>
Date: Thu, 17 Feb 2005 10:07:42 +0800

Deer Chairman and all,

Here are some comments on Objective 5.2.15:

This is a security consideration when we change 802.1X authenticator role from traditional AP to a centralized controller. Centralized pre-RSN architecture is existent in many enterprises and service providers and need to update to support up-to-date IEEE 802.11i  security supplement.It is required from STA view that keep the trust relationship as same as IEEE 802.11i.

IEEE 802.11i  fixed 802.1X authenticator role on AP that identified by  BSSID. In centralized network , 802.1X authenticator role may be relocated on a centralized controller, so if we want to keep the trust relationship of IEEE 802.11i, the centralized controller must be act same as AP of IEEE 802.11i from STA view. Or we can see the centralized controller as a logical AP of IEEE 802.11i. The concept of logical AP means that BSSID value on
 air radio MAC frame may be decided by the centralized controller. 

Thanks,

Zhonghui Yao

_______________________________________________
Capwap mailing list
[email-masked]
http://mail.frascone.com/mailman/listinfo/capwap