Capwap Mailing List: Re: lwapp security requirements draft

[Alper Yegin (alper]

Hello,

> Attached is a first pass at a security requirements draft for lwapp.
> This has been submitted to the ID editor, but I'm also posting it to
> this list for convenience. Comments welcome.

This is a good document listing potential security threats related to AP-AR
separation and carrying any protocol signaling between the two.

I presume these are architectural requirements, not specifically for LWAPP
protocol to solve. For handling these threats, isn't relying on physical
security or using cryptographic security (e.g., at L2 by 802.11i, or at L3
by IPsec) sufficient?

Alper