Security for bridge connectivity

[utawakevou]

I need pointers on how to implement proper secure bridge (point to multipoint or point-to-point) Can I use radius/tacacs to authenticate non-root bridges using their mac-address ?

[smahbub]

i would suggest that you use any RADIUS server like ACS to secure your Wireless bridged network. For information on how to configure the RADIUS server read http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801bd035.shtml

[dcavanaugh]

Yes you can. Under the SSID configuration you can specify an authentication username and password. This can be an added level of security on top of MAC authentication. You can also restrict those user/mac accounts to be the only ones that can authenticate to your infrastructure SSID. A lot of layers.