WiNG_ How To Secure_Beacons - Overview
The Secure Beacon feature allows the SSID name to be
masked for a WLAN in the beacon so that MUs are unable to see or view the SSID.
MUs discover WLAN services by listening to beacons advertised from APs. An AP
will advertise a beacon (10 per second) for each WLAN service enabled on the
radio which includes specific information about the WLAN service. Each beacon is
forwarded in clear text and includes a Service Set Identifier (SSID) name for
the WLAN. The SSID must be known by the MU before the MU can associate to the
WLAN.
Applications:
In certain applications such as Hotspot guest
access, it may be desirable to mask the SSID name to make it harder for casual
eavesdroppers to discover the SSID and connect to the WLAN service. It is not recommended
that secure beacon be used for real-time applications such a Voice that
requiring fast roaming.
Restrictions:
The SSID name is not intended as a password and
should not be used as such. If security is required the appropriate
authentication and encryption should be used. While secure beacon can be used
to mask the SSID in the beacon, the SSID name can still be discovered by
monitoring probe response frames.
0 nhận xét:
Post a Comment