Re: [radext] FW: New Version Notification for draft-xue-radext-key-management-00.txt

Hi Stefan, Bernard,

This draft is not about split MAC, local MAC of CAPWAP protocol (in the
draft those are called Fit AP, Fat AP, quite strangely).

This draft is about the case where IEEE 802.11i authenticator is moved from
the AC of CAPWAP to the access router which is not at the same time the AC.

In that case the keys, e.g. PMK has to be transferred to the AC. The
solution is described in Section 5 which uses CoA type of signaling (as in
RFC3576).  This requires some RADIUS extensions

Hope this helps.

Regards,

Behcet

On Fri, Mar 29, 2013 at 4:35 PM, Bernard Aboba <bernard_aboba@hotmail.com>wrote:

> [BA] Also, RFC 5247 desribes the security issues that can arise when
> splitting the AP function.
>
> Stefan Winter said:
>
> "You attempt to split the role of the Access Point into several
> sub-entities. This is admirable, but by no means a novelty. There are
> many proprietary approaches to this, but there's also already a set of
> RFCs describing a standard way:"
>
>
> _______________________________________________
> radext mailing list
> radext@ietf.org
> https://www.ietf.org/mailman/listinfo/radext
>
>