Doc.: IEEE 802. 11-12/0547r1 Submission May 2012 Dapeng Liu, China MobileSlide 1 Extend 802.1X for...
8
doc.: IEEE 802. 11-12/0547r1 Submission May 2012 Dapeng Liu, China Mobile Slide 1 Extend 802.1X for higher layer configuration in FILS Date: 2012-04-21 Authors: Name Affiliat ions Address Phone email Dapeng Liu China Mobile 32 Xuanwumen West Street Beijng, Xicheng District, 100053 China +86- 13911788933 liudapeng@chinamobi le.com
-
Upload
dustin-oliver -
Category
Documents
-
view
212 -
download
0
Transcript of Doc.: IEEE 802. 11-12/0547r1 Submission May 2012 Dapeng Liu, China MobileSlide 1 Extend 802.1X for...
doc.: IEEE 802. 11-12/0547r1
Submission
May 2012
Dapeng Liu, China MobileSlide 1
Extend 802.1X for higher layer configuration in FILS
Date: 2012-04-21Authors:
Name Affiliations Address Phone emailDapeng Liu China Mobile 32 Xuanwumen
West Street Beijng, Xicheng District, 100053 China
+86-13911788933 [email protected]
doc.: IEEE 802. 11-12/0547r1
Submission
Abstract
• This document proposes extend 802.1X to carry the higher layer configuration information in FILS scenario.
May 2012
Dapeng LiuSlide 2
doc.: IEEE 802. 11-12/0547r1
Submission
Conformance w/ Tgai PAR & 5C
May 2012
Slide 3
Conformance Question Response
Does the proposal degrade the security offered by Robust Security Network Association (RSNA) already defined in 802.11?
No
Does the proposal change the MAC SAP interface? No
Does the proposal require or introduce a change to the 802.1 architecture? No
Does the proposal introduce a change in the channel access mechanism? No
Does the proposal introduce a change in the PHY? No
Which of the following link set-up phases is addressed by the proposal?(1) AP Discovery (2) Network Discovery (3) Link (re-)establishment / exchange of security related messages (4) Higher layer aspects, e.g. IP address assignment
3,4
Dapeng Liu, China Mobile
doc.: IEEE 802. 11-12/0547r1
Submission
Background
• 802.1X is used for 802.11 authentication. The authentication and IP address configuration procedure is separated in current specification. It normally requires a DHCP or RA procedure after the authentication to configure the IP address and other higher layer information after the authentication. This will increase the link set up time.
May 2012
Dapeng Liu, China MobileSlide 4
doc.: IEEE 802. 11-12/0547r1
Submission
Current authentication and higher layer configuration procedure
May 2012
Dapeng Liu, China MobileSlide 5
Authentication procedure
IP address and otherHigher layer configuration
Additional procedure for IP address and other higher layer configuration will increase the linkset up time
doc.: IEEE 802. 11-12/0547r1
Submission
Proposal: Combine IP address configuration and higher layer configuration with authentication
May 2012
Dapeng Liu, China MobileSlide 6
STA AP
Auth
ASAssoc
EAP-TTLS/MS-CHAPv2
EAPOLKey
802.1X extensionto carry IPand higher layer configuration IP address and higher
layer configuration
Combine authentication and higher layer configuration
After authentication, the IP address and other IP layer configuration is done
doc.: IEEE 802. 11-12/0547r1
Submission
802.1X extension
• Define new 802.1X message to carry higher layer configuration information– Packet type: EAPOL-configuration– Payload:
• IP address• Subnet mask• Default gateway
May 2012
Dapeng Liu, China MobileSlide 7
doc.: IEEE 802. 11-12/0547r1
Submission
• Questions?
May 2012
Slide 8 Dapeng Liu, China Mobile
