Capwap Mailing List: Re: Why LWAPP and not normal bridging!!

[Alper Yegin (alper]

>>> The primary motivator for pushing encryption in the AR is to eliminate the
>>> need to replace hundreds of APs up in ceilings in the event that IEEE comes
>>> out with another standard (which could occur if the existing security
>>> mechanism were found to be flawed). This is probably based on experience
>>> with
>>> the whole WEP debacle.
>> 
>> That sounds like a good reason to use PANA in here.....
> 
> PANA can't help upgrade AP firmware.

That is not what I am suggesting.

If there is a problem or risk with using link-layer authentication and
ciphering, and if you think the solution is to perform these operations on
the access router, then you can use PANA for that. PANA enables you to do
the authentication exchange between the host and the access router. You can
use it to enable link-layer ciphers. But if you don't even want to use L2
ciphers, then you can use PANA to enable IPsec-based per-packet access
control in your access network.

Alper