Capwap Mailing List: Security requirements for LWAPP?

[William Arbaugh (waa]

We've been talking about the best way to protect the LWAPP packets, and 
I just wanted to do a quick check on what people feel are the 
requirements.

Here's a quick view from myself:

Authentication: AP to AR and AR to AP (counters masquerading AR's and 
rogue AP's)
Integrity: All packets (prevents injections and modification attacks)
Confidentiality: Not sure if this is needed
Key Management: Something beyond EAPoL-key needed?

Bill