A wireless LAN architecture using PANA for secure network selection

Abstract

In this paper, we propose a new network architecture that supports IEEE 802.11i and WPA and provides the network selection functionality and the functionality to physically separate AAA clients from access points by using PANA (protocol for carrying authentication for network access) as the network access authentication protocol; both functionalities have been difficult to support solely with IEEE 802.11i. We also show our prototype system in which the proposed architecture is realized using a newly developed WPA-capable access point which provides connectivity to multiple networks, namely, a guest network, a management network, and multiple user networks. We also show performance results of the prototype system and an example of usage in an enterprise environment.