topic WPA encyption client <-> Controller MSM760 in M and MSM Series

WPA encyption client <-> Controller MSM760

Jan-Philipp Warmers — Wed, 15 Dec 2010 10:13:56 GMT

Hello out there!

After i read:
http://cdn.procurve.com/training/Manuals/MSM7xx-MCG-Apr10-5998-0308-v54.pdf
and
http://cdn.procurve.com/training/Manuals/MSM7xx-CLI-RG-May10-5998-0313-v54.pdf

i don't know if "authentication server access controller"
or any other command encrypt the whole way from Client to controller?

or is there a way to encrypt the data without VPN?

thanks Jan

Re: WPA encyption client <-> Controller MSM760

Ian Vaughan — Fri, 17 Dec 2010 11:27:29 GMT

If you a have client data tunnel on a particular VSC isn't there an option for "extend WPA encryption to controller" so that it is encrypted all the way back? Seem to recall something like that.

Beats up the CPU on your controller though.

HTH
Ian

Re: WPA encyption client <-> Controller MSM760

Jan-Philipp Warmers — Fri, 17 Dec 2010 11:35:31 GMT

I don't know
i do not own one yet.
the datasheet says there is some WPA between Client and Controller

Re: WPA encyption client <-> Controller MSM760

Ian Vaughan — Fri, 17 Dec 2010 12:25:37 GMT

When you use centralized access control ("Use controller for access control" - this also necessitates "Use service controller for Authentication") there is an option to extend the encryption until the user data has traversed the wired network back to the controller.

It basically keeps the user data in an encrypted stream.

This is on a per VSC basis.

HTH
Ian