Control And Provisioning of Wireless Access Points (CAPWAP) Threat Analysis for IEEE 802.11 Deployments

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 34
Abstract: Early Wireless Local Area Network (WLAN) deployments feature a "fat" Access Point (AP), which serves as a \%stand-alone interface between the wired and wireless network segments. However, this model raises scaling, mobility, and manageability issues, and the Control and Provisioning of Wireless Access Points (CAPWAP) protocol is meant to address these issues. CAPWAP effectively splits the fat AP functionality into two network elements, and the communication channel between these components may traverse potentially hostile hops. This document analyzes the security exposure resulting from the introduction of CAPWAP and summarizes the associated security considerations for IEEE 802.11-based CAPWAP implementations and deployments. This memo provides information for the Internet community.
Publication Date: 2009-03-01
Status Note: Informational
DOI: 10.17487/RFC5418
Link: https://doi.org/10.17487/RFC5418
Author(s): Scott G. Kelly
Charles Clancy
Keyword(s): Wireless LAN, Security

Latest version of IETF RFC 5418

Document Versions — IETF RFC 5418

▶ IETF RFC 5418 (2009-03-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IEEE.STD802.1X.2004 — IEEE802.1X EXTERNAL
IEEE.STD802.11I.2004 — IEEE802.11i EXTERNAL
Edney, J. and W. Arbaugh, "Real 802.11 Security - Wi-Fi protected Access and 802.11i", 2004. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 4118 [Active*]
IETF RFC 5415 [Active*]
IETF RFC 5416 [Active*]

Bibliographic Reference(s)

Petroni, N. and W. Arbaugh, "The Dangers of Mitigating Security Design Flaws: A Wireless Case Study", January 2003. EXTERNAL
IETF RFC 3579 [Active*]
IETF RFC 3748 [Active*]
IETF RFC 4072 [Active*]
IETF RFC 4962 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5418.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 5418, Control And Provisioning of Wireless Access Points (CAPWAP) Threat Analysis for IEEE 802.11 Deployments. Available at https://doi.org/10.17487/RFC5418

Snippet:

IETF RFC 5418, Control And Provisioning of Wireless Access Points (CAPWAP) Threat Analysis for IEEE 802.11 Deployments. Available at https://doi.org/10.17487/RFC5418

HTML (ISO 690 compliant)

Preview:

IETF RFC 5418, Control And Provisioning of Wireless Access Points (CAPWAP) Threat Analysis for IEEE 802.11 Deployments. Available at https://doi.org/10.17487/RFC5418

Snippet:

<span class="citation"><cite>IETF RFC 5418</cite>, Control And Provisioning of Wireless Access Points (CAPWAP) Threat Analysis for IEEE 802.11 Deployments. Available at <a href="https://doi.org/10.17487/RFC5418" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5418</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 5418, Control And Provisioning of Wireless Access Points (CAPWAP) Threat Analysis for IEEE 802.11 Deployments
doi: 10.17487/RFC5418
url: https://doi.org/10.17487/RFC5418

Snippet:

<li>
<cite id="bib-rfc5418">IETF RFC 5418</cite>, Control And Provisioning of Wireless Access Points (CAPWAP) Threat Analysis for IEEE 802.11 Deployments
<span class="doi">10.17487/RFC5418</span>
</li>

Referenced By

IETF RFC 5415 [Active*]
IETF RFC 5416 [Active*]