Re: what about mac spoofing

2012-11-23 Thread Alan Buxey
802.1X authentication ? (WPA2-RADIUS)

If so , system is authenticated by user/pass and/or a certificate and the 
client and AP have a unique encryption key.. no other device can just come 
along with the same MAC and just start using the network.

For WPA2 PSK, another client would need to know the shared key to authenticate 
and associate with the AP. you could have MAC control ...and so if the attacker 
knows the PSK then yes, they could get online by spoofing the MAC of an allowed 
client

alan

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: what about mac spoofing

2012-11-23 Thread Scott Armitage

On 23 Nov 2012, at 17:17, pideil matthew matthew.pid...@free.fr wrote:

  But my wifi laptop can already be disconnected by spoofed packet ?

Not if you use protected management frames IEEE 802.11w


regards

Scott
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html