eap-11----Page:6
1 2 3 4 5 6
|
Feedback on Network Selection If an EAP-layer based solution is used, EAP identity request hints are probably OK Prefix-based NAI decoration is problematic AAA routing instructions from RFCs are violated All proxies have to recognize the decoration Suffix-based NAI decoration would be better Neither the hints or the decorations are authenticated Applies to SSIDs in part too, at least for dishonest AP case Scanning APs and trying EAP is problematic Particularly hard if there are multiple APs and fast roaming And particularly if identity re-query is used Consider combining AP selection and network selection? Beacon-based approach is limited to ~dozen brokers Particularly if lowest beaconing speed is small |