Hello!
I read a lot about wireless but I am still not sure what 802.1x peap will mitigate.
Here what I would answer let me know If I am wrong.
-Rogue AP. Connected to wired internet. Does user will notice this is not the right AP? Yes the rogue AP will not reach RADIUS and the certificate.
-Man in the middle. Does the PEAP certificate will notice that the trafic pass through the attaker (rogue AP) before reaching the real AP? No there is no certificate on each AP only between RADIUS and the client.
-802.1x PEAP is for authentication how do we encypt the data between client and AP? Encyption key can be pass as RADIUS parameter back to the client and use it to encypte the session. I am not sure i it`s a wep key that will be transfer.
-De authentication AP management packet is still not encypted even with 802.1x and PEAP?
-Do you associate with the AP and then authenticate or you authenticate and then associate?
Ch
