Search Linux Wireless

Re: [ipw3945-devel] [PATCH 1/5] mac80211: allows driver to request a Phase 2 key

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Mar 17, 2008 at 10:04 PM, Johannes Berg
<johannes@xxxxxxxxxxxxxxxx> wrote:
>
>  > >
>  > >  > BSS defines security setting which  defined by key management for
>  > >  > pairwise and group key + cipher method for both .
>  > >  > You can run multiple SSIDs over single single BSSID. This is done
>  > >  > using VLANs
>  > >
>  > >  Actually, we don't support that in mac80211.
>  > Last time I worked on AP project it worked. It was older mac hopefully
>  > it's not totally broken
>  >
>  >  And the way I understand
>  > >  VLANs they are simply done by negotiating different group keys with
>  > >  different groups of stations each forming a VLAN.
>  >
>  > We are saying the same. That's okay.
>
>  Well, you were suggesting the use of multiple SSIDs, which we don't
>  support, we only support VLANs within a BSS/single SSID. Not that I've
>  been able to test it, hostapd needs radius stuff set up for VLANs...

I think it's transparent since it's handled by MLME in hostapd so
multiple SSID is supported
Maybe we did some minor changes in mac to support that.. Will check again.
I think it's always done by means of VLANs


>  Right. I was just saying that the way it currently is I think you could
>  detect it that way. b43 simply assumes WEP keys are always 'static'
>  which seems to mostly work well in practice.
>  I suppose then set_key needs a new argument key_type:
>
>  enum ieee80211_key_type {
>         KEY_TYPE_PAIRWISE,
>         KEY_TYPE_GROUP,
>         KEY_TYPE_TXONLY,        /* group key in an AP */

Can we drop it? Hm still not sure why you like it so much.

>         KEY_TYPE_STATIC,
>  }
>
>  where the MAC address pointer would only be non-NULL when the key type
>  is PAIRWISE, and STATIC can only be used for WEP keys.
>


Do you know anything about mesh security are we breaking here anything?

Thanks
Tomas
>  johannes
>
--
To unsubscribe from this list: send the line "unsubscribe linux-wireless" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Host AP]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Linux Kernel]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]
  Powered by Linux