Capwap Mailing List: Re: Certificates, Discovery Request/Reply, and validation.

[Alper Yegin (alper]

>> PANA protocol does not state that AP MUST be the encryption end point. PANA
>> can be used in architectures where AR is the encryption end-point.
> 
> But one well versed in 802.11 would quickly understand that this will NOT work
> with APs, unless the AR does the 802.11 framing and therefore can encrypt the
> packets.... and then we're talking about LWAPP.

Unless the operator is willing to use IPsec between the host and the access
router.

If the operator wants to use L2 ciphering, then yes, 802.11 frames should
reach the access router. But note that this is just one of the many things
LWAPP does. Doing this does not mean that we must use all other LWAPP
features along with that. Please see my earlier message for the problem
break-down and possible alternatives...

> 
> But, dead horse, moving on.
> 
> PatC

Alper