企业无线局域网运行中的安全缺陷及其安全架构方案

In enterprise WLAN movement shortage of security and its security overhead construction plan

分析了WLAN面临的几类安全威胁以及WLAN与LAN在安全问题上的差异;对于目前在企业无线局域网中常用的IEEE802.11技术中的安全漏洞进行逐个解析。在此基础上介绍了两种采用严格的层次结构和使用多种技术的安全WLAN架构:1.使用VLAN保护WLAN;2.使用IPSec保护WLAN。

This article has analyzed several kind of safe threats as well as WLAN and LAN which WLAN faces in the security problem difference; In the commonly used IEEES02. 11 technology security loophole carries on the one by one analysis regarding at present in the enterprise WLAN. Introduced in this foundation two kinds use the strict level structure and the use many kinds of technologies security WLAN overhead construction： 1. Uses VLAN to protect WLAN; 2. Uses IPSec to protectWLAN.