wds encryption II

[John Fulmer]

On Thu, 2003-01-09 at 14:26, Alessandro Bondoli wrote:
> Thank you John for your reply: exactly what I need to do is to join two
> separates segments of the same network, because on this network there are
> wireless devices that are working on it with fixed address and no dhcp.
> First segment is from 192.168.159.1 to 192.168.159.128, netmask
> 255.255.255.0;
> second segment is from 192.168.159.128 to 192.168.159.255 same netmask as
> above.
> Connection between those two trunks have to be realized with two aps with
> encrypted point-to-point wireless tunnel. Is this possible? What are needed
> steps?

What you want is an encrypted bridge. You CAN create a point to point
IPSEC tunnel, and then (if they are two linux boxes) use the bridge code
to create a VLAN that joins the two networks, but that is way beyond me.
The IPSEC is easy enough to set up, setting up the VLAN config is
tricky, and I don't remember how to do it anymore. I would find a Linux
bridge mailing list and ask.

Sorry I can't be more help...

jf

> Thanks in advance for enlighting me.
> regards, Alex
> 
> ----- Original Message -----
> From: "Fulmer, John" <JFulmer at hrblock.com>
> To: "Alessandro Bondoli" <alessandro.bondoli at bondoli-campese.com>
> Cc: <hostap at shmoo.com>
> Sent: Thursday, January 09, 2003 7:22 PM
> Subject: Re: wds encryption II
> 
> 
> > I do encrypted tunnels using Free S/Wan IPSEC tunnels between
> > workstations and my AP. Works well, although re-establishing the tunnels
> > can be tricky sometimes...
> >
> > jf
> >
> > On Thu, 2003-01-09 at 11:22, Alessandro Bondoli wrote:
> > > Recently I had need to build a point-to-point encrypted link using
> another
> > > couple of aps (LinuxAP) and cipe. No success, and this mainy due to
> > > impossibility of routing packets along the network space.
> > > A few months ago I used hostap's wds connections to make a similar job
> (on
> > > OpenSTA) but unencrypted and all was fine.
> > > On hostap's readme, I read that wds should be encrypted in order to
> avoid
> > > problems of eavesdropping and intromissions from outer world: this is
> what I
> > > need to do, but don't know how to reach the goal.
> > > No googles on this matter out there... did anybody encrypted traffic on
> wds
> > > and tell what are the trick(s) to do that ?
> > > regards, Alex
> > >
> > >
> > > _______________________________________________
> > > HostAP mailing list
> > > HostAP at shmoo.com
> > > http://lists.shmoo.com/mailman/listinfo/hostap
> >
> > _______________________________________________
> > HostAP mailing list
> > HostAP at shmoo.com
> > http://lists.shmoo.com/mailman/listinfo/hostap
> >