Capwap Mailing List: Re: Why LWAPP and not normal bridging!!

[Alper Yegin (alper]

>>> PANA can't help upgrade AP firmware.
>> 
>> That is not what I am suggesting.
>> 
>> If there is a problem or risk with using link-layer authentication and
>> ciphering, and if you think the solution is to perform these operations on
>> the access router, then you can use PANA for that. PANA enables you to do
>> the authentication exchange between the host and the access router. You can
>> use it to enable link-layer ciphers. But if you don't even want to use L2
>> ciphers, then you can use PANA to enable IPsec-based per-packet access
>> control in your access network.
> 
> I think this discussion is required in the PANA mailing list, so I will
> refrain from contributing to cross-mailing list discussions, but suffice it to
> say that IPSec and L2 mechanisms already exist, so adding another level of
> negotiation on existing clients makes it rather difficult to deploy. But I
> will admit that I am completely out of touch as to the latest progress that
> PANA has made since the last BOF.

I didn't quite get your point here regarding adding another level. (more
precisely, what level is that?). Anyways, the latest PANA documents can be
found at:

http://www.ietf.org/html.charters/pana-charter.html

Alper