[120059] in North American Network Operators' Group
Re: Breaking the internet (hotels, guestnet style)
daemon@ATHENA.MIT.EDU (Tony Finch)
Tue Dec 8 17:36:55 2009
Date: Tue, 8 Dec 2009 22:36:10 +0000
From: Tony Finch <dot@dotat.at>
To: Joe Abley <jabley@hopcount.ca>
In-Reply-To: <783413A3-6EDB-456C-927D-B47FAE84C374@hopcount.ca>
Cc: nanog@nanog.org, Joe Greco <jgreco@ns.sol.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Tue, 8 Dec 2009, Joe Abley wrote:
>
> I once thought that PANA was the clean answer to this. Now the PANA
> effort has concluded, and documents have been published, but reading
> through them I can't tell whether PANA is in fact any kind of answer to
> this. It'd be nice if there was a hotspot authentication solution buried
> in there, somewhere.
I know nothing about PANA except that abstract to RFC 4058 says it's a
generalized replacement for link-layer authentication protocols such
as 802.1x. But 802.1x wifi authentication works today - see for example
http://www.eduroam.org/ - though the setup effort is only worth it if you
are going to be using the authenticated network(s) a lot.
Tony.
--
f.anthony.n.finch <dot@dotat.at> http://dotat.at/
GERMAN BIGHT HUMBER: SOUTHWEST 5 TO 7. MODERATE OR ROUGH. SQUALLY SHOWERS.
MODERATE OR GOOD.