Re: Handling rogue RA feedback

[David Malone <dwmalone@maths.tcd.ie>]

On Wed, Jul 25, 2007 at 07:11:14AM +0900, itojun@itojun.org wrote:
> 	- L2 switch solution: filter rogue RAs in the switches, just like
> 	  filter rogue DHCPv4.  you can detect potential RA sources by
> 	  MLD joins to ff02::2 (all-routers link local multicast addr).
> 	  CONS: you cannot protect victims within the same wireless
> 	  base station, for instance.

In 802.11 infrastructure-mode networks, communication between
stations is not direct, but relayed through the access point. The
access point could filter rogue RAs in the same way as a switch
would.  This still leaves the problem of rogue access points or
access point impersonation, but at least makes it part of a more
general well-know problem with 802.11.

(I think part of the 802.11e spec allows direct communication between
associated stations, but I'm not sure how that relates to multicasts
and broadcasts.)

	David.