capwap-2----Page:22
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20  21  22  23  24  25 

Two crypto modes
802.11i
Provides privacy and authentication of 802.11 payload
Does not secure the CAPWAP header
Breaks some 802.11 features (see next slide)
DTLS
Already present on AC and WTP (needed for control plane)
Supports any CAPWAP binding
Protects payload and CAPWAP header
PPT Version