Subject: [Capwap] IESG Evaluation of: draft-ietf-capwap-problem-statement-01.txt (I nformational)

From: "Wijnen, Bert (Bert)" <[email-masked]>
Date: Wed, 18 Aug 2004 20:55:56 +0200

CAPWAP WG members,

When IESG reviews documents, they also ask for help from various
specialists (like MIB Doctors, AAA_Doctors, OPS Directorate, etc etc)

As a result of that we got the following feedback.
Pls let me know what you think about the suggestion?
The IESG review is NOT yet complete, so pls do not yet submit a new
revision.

Thanks, Bert

--------- comment from AAA doctor:

>   o draft-ietf-capwap-problem-statement-01.txt
>     CAPWAP Problem Statement (Informational) - 6 of 6 

This document is very good. One additional item that
could perhaps be discussed in the security considerations
section is related to problem #4, securing a distributed
set of access points. I think problem #4 implies that
people want to move some of the tasks of the APs to the
controller so that the compromise of an access point would
not compromise, say, a RADIUS shared secret or perhaps
not even some of the keys used to protect the link layer.
Security considederations does not point this out. It
does say something about looking into physical security,
but perhaps it could be expanded into that as well as
the assignment of security parameters to the different
parts of the system.

_______________________________________________
Capwap mailing list
[email-masked]
http://mail.frascone.com/mailman/listinfo/capwap