[Soekris] Beyond WEP: LEAP, TKIP or CCMP support in BSD?

[Christopher R. Hertel]

Chuck Yerkes wrote:
> 
> Okay, there's a resounding silence on this...
> 
> Does this means that BSD/Linux/unix can't be used in a modern
> secure wireless infrastructure?  That we should all use
> $600 cisco boxes so we can do the key spinning that makes
> it all secure and usable?

Personal opinion only, but I don't think these are useful protocols.
They require more horsepower on the APs (which, sure, the Soekris has
but I need to consider installing hundreds of APs) and they only protect
the communication between the client and the AP.

In my opinion, this is an end-to-end problem.  It makes little sense to me
to put these features onto the AP unless the AP itself is an endpoint.

Chris -)-----

> Quoting Chuck Yerkes (chuck+soekris at 2003.snew.com):
> > I was gonna ask this on the BSD lists, but it's really about
> > running on the Soekris' and people here have their fingers in
> > these sorts of projects.
> >
> > I've been running in-house wireless for quite some time.
> > Moved from an Airport to a Soekris.  The Soekris has a pair
> > of wireless cards as my neighbor, a ham, is quite actively
> > wirelessing up our neighborhood with plans to hit the whole
> > Bay area (awesome line of sight).
> >
> > My question is if OpenBSD (or anyBSD) is able to run
> > LEAP, TKIP or CCMP to join these networks.
> >
> > As much as I love proprietary boxes like the Ciscos, there's
> > something about a box that can run IPSec and wireless AND can be
> > a shell machine for me that I like a lot.
> >
> > I'd run Linux if I had to, but really prefer the solidity
> > of the BSDs (and the handiness of /usr/ports/).
> >
> > Thanks,
> >
> > chuck
> > _____________________________________________________________________
> > Soekris Engineering, technical discussion mailing list
> > [un]subscribe: http://lists.soekris.com/mailman/listinfo/soekris-tech
> _____________________________________________________________________
> Soekris Engineering, technical discussion mailing list
> [un]subscribe: http://lists.soekris.com/mailman/listinfo/soekris-tech

-- 
"Implementing CIFS - the Common Internet FileSystem" ISBN: 013047116X
Samba Team -- http://www.samba.org/     -)-----   Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/   -)-----   ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/     -)-----   crh at ubiqx.mn.org
OnLineBook -- http://ubiqx.org/cifs/    -)-----   crh at ubiqx.org