On Mon, Mar 17, 2008 at 10:04 PM, Johannes Berg <johannes@xxxxxxxxxxxxxxxx> wrote: > > > > > > > > BSS defines security setting which defined by key management for > > > > pairwise and group key + cipher method for both . > > > > You can run multiple SSIDs over single single BSSID. This is done > > > > using VLANs > > > > > > Actually, we don't support that in mac80211. > > Last time I worked on AP project it worked. It was older mac hopefully > > it's not totally broken > > > > And the way I understand > > > VLANs they are simply done by negotiating different group keys with > > > different groups of stations each forming a VLAN. > > > > We are saying the same. That's okay. > > Well, you were suggesting the use of multiple SSIDs, which we don't > support, we only support VLANs within a BSS/single SSID. Not that I've > been able to test it, hostapd needs radius stuff set up for VLANs... I think it's transparent since it's handled by MLME in hostapd so multiple SSID is supported Maybe we did some minor changes in mac to support that.. Will check again. I think it's always done by means of VLANs > Right. I was just saying that the way it currently is I think you could > detect it that way. b43 simply assumes WEP keys are always 'static' > which seems to mostly work well in practice. > I suppose then set_key needs a new argument key_type: > > enum ieee80211_key_type { > KEY_TYPE_PAIRWISE, > KEY_TYPE_GROUP, > KEY_TYPE_TXONLY, /* group key in an AP */ Can we drop it? Hm still not sure why you like it so much. > KEY_TYPE_STATIC, > } > > where the MAC address pointer would only be non-NULL when the key type > is PAIRWISE, and STATIC can only be used for WEP keys. > Do you know anything about mesh security are we breaking here anything? Thanks Tomas > johannes > -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html