Artur Hecker <[email protected]> wrote: > Hi Michael, > My opinion:
I don't think understood the question :-)
1) It's not about Wireless Access Points, so all of the Wifi Alliance,
etc. talk makes no sense to me. There can be no access points until they
have been configured. It's possible that there might NEVER been any
access points, because the operator actually doesn't want/need any enabled.
Think about inside of a cage in a data center.
2) It's about *devices* that have 802.11 interfaces.
You can't use WPS or anything else involving 802.1x until you have
credentials, which is what BRSKI gets you.
So you can't use WPS to *bootstrap* WPS.
(and pushing buttons on the front of the AP is by definition not
"zero-touch")
> Q3: Sorry, I did not quite understand this one. If you meant the ad-hoc
> essid based network, my first intuition would be to object, as I
> believe that we should not prescribe such modes for ACP, but rather use
> the best available one.
3) The ACP is secured inside IPsec over Link-Layer IPv6 (or MACSEC, or
a bunch of other possible technologies in the ACP document).
It's not about the security of the ACP.
Since the point of the ACP is that it's always available, it needs to be
available even when the Wifi Access Point is toast or not yet configured.
Of course, once there is a non-adhoc/IBSS network available, the ACP would
see this as additional interfaces and make additional mesh links across it
for the ACP to use. But that's not bootstrap, that's operation.
> Q4: As I believe that Q2 is strongly biased, I believe that so is
> Q4. The WiFi Alliance already specifies several ways how to bootstrap
> wireless access points, including e.g. WPS. We would rather need to
> see, how to integrate with such means. And again, I don't believe we
> have authority on that.
Maybe you could point to specific documents that would permit two devices
which have never been touched to communicate over 802.11 without configuration.
--
Michael Richardson <[email protected]>, Sandelman Software Works
-= IPv6 IoT consulting =-
signature.asc
Description: PGP signature
_______________________________________________ Anima mailing list [email protected] https://www.ietf.org/mailman/listinfo/anima
