mipshop-3----Page:9
1 2 3 4 5 6 7 8 9 10
|
HK Derivation via Network Access (Open Issues/Questions - Continued) Every L2 NAS MUST support this protocol (802.1x, 802.16, PANA, etc.) MN cannot handoff to legacy L2 NAS-es that don’t support this protocol Issues when MN is using GPRS Need different approach if L2 is using 802.11r or 802.11s or even 802.16 With 802.11r, a full EAP method exchange is not done unless handing off across R0 key holders 802.11s uses EAP slightly differently while hopping through multiple nodes to get to infrastructure 802.16 considering creating a “Decision Point” (DP) between BS and AAA server (similar to R0 key holder in 802.11r) for faster handoffs Need to see what security ADs feel about using EAP-AMSKs for sessions Needs further analysis to resolve issues Presently, seems to increase protocol complexity |