Why not transfert the wireless-independant AP functionalities onto a central Ethernet-PC ?

[Michael Richardson]

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Dominique" == Dominique Blas <ml at blas.net> writes:
    Dominique> I'm using IPSEC everyday so I know about it.

  okay.
  have you seen www.wavesec.org?


    Dominique> That is why I suggested to transfert this kind of public
    Dominique> secure fonctionalities on a PC rather than using the ones
    Dominique> insides the APs. 
 
  I agree. it also has a major win once you consider a conference or other
event with dozens of APs, and you want them cheap, low power, and trivial
to set up. That means no space for hifn crypto chips. You need to put that
stuff in a central place.

    >> Now, if we could get IPsec accelerated hardware and proper
    >> IPsec integration in the OS, life would be much better.

  so, the other thing we (Xelerance.com) are doing is to see about supporting
Win2K's built in IPsec. We know we can support OS/X once we figure out how
to interface to its dhcp client. People on the inside have told us how,
but I haven't followed their instructions yet.

] Collecting stories about my dad: http://www.sandelman.ca/cjr/ |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr at sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian/notebook using, kernel hacking, security guy");  [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys - custom hacks make this fully PGP2 compat

iQCVAwUBP5X8poqHRg3pndX9AQGAuAP/cjtYNgHKINrWFPG3MZYfLE6E8btVTkqn
+CBF+dgsDxa+vf2e8MZWFRNsPSzEuZdWJXggSGIKxDWWNDaQNqh1eIimrNDtkAQe
qQSvIovhyF4vmowqJmJ3H9gHL53pJuyurGw4GXqYR88PMKutYOUlJgauvHQ8Hazu
CWrX+5XuBcE=
=Db3M
-----END PGP SIGNATURE-----