CCNA 2 - Capitulo 12.4

CCNA 2 - Capitulo 12.4

1. DTLS ENCRYPTION

   • WHATS IS ?
     • PROTOCOL WHICH PROVIDES SECURITY BETWEEN
       • WLC
       • AP
   • ENABLE COMMUNICATE WLC - AP ENCRYPTING AND PREVENTS
     • EAVESDROPPING
     • TAMPERING
   • CAPWAP DATA
     • DISABLED BY DEFAULT
       • IS OPTIONAL AND IS ENABLE PER AP
       • DATA ENCRYPTION REQUIRES A DTLS LICENCE
         • TO BE INSTALLED ON THE WLC
     • WHEN ENABLED
       • WLAN CLIENT TRAFFIC IS ENCRYPT
         • AT THE AP BEFORE BEING FORWARDED TO THE WLA NA VICE VERSA
   • CAPWAP CONTROL AND MANAGEMENT IS ENABLED BY DEFAULT
     • PREVENT MITM ATTACKS

2. WLAN CONCEPTS

   • CAPWAP - OPERATION
     • SPLIT MAC ARCHTECTURE
       • SPLIT MEDIA ACCESS CONTROL (MAC )
         • AP MAC FUNCTIONS
           • BEACONS AND PROBLE RESPONSES
           • PACKET ACK AND RETRANMISSIONS
           • MAC LAYER AND DATA CRYPTION AND DECRYPTION
           • FRAME QUEUEING AND PACKET PRIORIZATION
         • WLC MAC FUNCTIONS
           • AUTHENTICATION
           • ASSOCIATION ANS RE ASSOCIATION OF ROAMING CLIENTS
           • FRAME TRANSLATIONS TO OTHER PROTOCOLS
           • TERMINATION OF 802.11 TRAFFIC ON WIRED
     • FLEX CONNECT APs
       • MODES
         • CONNECTED MODE
           • WLC IS REACHABLE
           • CAPWAP CONNECTIVITY WITH ITS WLC AND CAN SEND TRAFFIC THROUGH THE CAWAP TUNNEL
         • STANDALONE MODE
           • WLC IS UNREACHABLE
           • HAS LOST OR FAILED TO ESTABLISH CAPWAP CONNECTIVITY WITH ITS WLC
           • IN THIS MODE , FLEX CONNECT AP CAN ASSUME OF THE WLA FUNCTIONS
       • PROPRIETARY CISCO
       • WHATS IS ?
         • WIRELESS SOLUTION
           • BRANCH OFFICE AND REMOTE OFFICE DEPLOYMENTS
       • WHATS WORK ?
         • CONFIGURE AND CONTROL ACCESS POINT IN A BRACK OFFICE FROM
           • CORPORATE OFFICE THROUGH A WAN LINK
             • WITHOUT DEPLOYING A CONTROLLER IN EACH OFFICE
     • WHATS IS PURPOSE ?
       • ENABLE WLC TO MANAGE MULTIPLE APs AND WLANs
       • CONTROLD AND PROVISING APs
     • IEEE STANDARD PROTOCOL ; IS BASED ON LWAPP
     • RESPONSIBLE
       • ENCAPSULATION AND FORWARDING OF WLAN CLIENT TRAFFIC BETWEEN
         • ACCESS POINT (AP)
         • WLC
     • DIFFERENCE OF LWAPP ?
       • PROVIDES ADDITIONAL SECURITY WITH DATAGRAM TRANSPORT LAYER SECURITY (DTLS)
     • HOW WORK ?
       • ESTABLISHES TUNEL ON UDP
     • CAN OPERATE OVER
       • IPV4
         • UDP 17
       • IPV6
         • UDP 136
     • PORTS
       • UDP 5246
         • CONTROL MESSAGES USED BY THE WLC TO MANAGE THE AP
       • UDP 5247
         • CAPWAP TO ENCAPSULATE DATA PACKETS TRAVING TO END FROM WIRELESS CLIENT