Re: Anybody working on 802.11 generic framework?

Hi,

Some ideas for any generic layer:
- in host AP mode, make sure each association can be seen as a different 
port (maybe like a vlan, but then one should be able to run vlans over each 
association...)
- add some 802.1X hooks (both client and authenticator) -- this is not 
802.11 specific, it's a lot more general for any 802 devices, but 802.1X 
needs to be able to distinguish each association)
- a standard API to change encryption keys on the card

Most of the 802.1X stuff can be done with bpf/libpcap/libnet in userland, 
but I think some of the stuff might require lower-level hooks (especially 
on the authenticator side to actually prevent packets from going through... 
As far as I know ipfw does not support mac-level filtering, does it?). Note 
that I actually say hooks, because 802.1X must be extensible with any EAP 
method, which is probably better off running in userland...

Maybe all this can be done with netgraph, but I have to admit I'm still 
quite unfamiliar with that beast :-/

Just my 0.02 EUR...

Jacques.

At 23:25 01/07/2002, Brooks Davis wrote:
>2f15aae.jpg Re [bsd-wireless] Anybody 
>work.ems<file://c:\docume~1\caronj\applic~1\qualcomm\eudora\attach\Re 
>[bsd-wireless] Anybody work.ems <0880.0002>>
>*** PGP Signature Status: good
>*** Signer: Brooks Davis <[email protected]> (Expired)
>*** Signed: 01/07/2002 23:25:47
>*** Verified: 01/07/2002 23:43:46
>*** BEGIN PGP VERIFIED MESSAGE ***
>
>On Mon, Jul 01, 2002 at 02:01:28PM -0600, M. Warner Losh wrote:
> > Greetings,
> >
> > I've been told that newer chipsets are more "winmodem"-like for the
> > 802.11{a,b,g,ti's22mbs} cards.  These cards generally just give you
> > beacon packets and nothing else (maybe ack too).  This, coupled with
> > HostAP mode, means it might make sense to have a generic 802.11 stack
> > in the kernel to deal with the MAC layer issues that future drivers
> > will require.
> >
> > Has anybody else thought of this?  Anybody working on it?
>
>I thought Julian did this in netgraph for this firmware based AP stuff
>so he might have some thoughts.  I think there was also a suggestion on
>the FreeBSD lists (maybe -net) at some point of adding this stuff as a
>layer on the level of ethernet, but I don't remember who suggested that.
>
>-- Brooks
>
>--
>Any statement of the form "X is the one, true Y" is FALSE.
>PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4
>
>
>*** END PGP VERIFIED MESSAGE ***


-- Jacques Caron, IP Sector Technologies
    Join the discussion on public WLAN open global roaming:
    http://lists.ipsector.com/listinfo/openroaming