Re: [ipw3945-devel] [PATCH 1/5] mac80211: allows driver to request a Phase 2 key

[Jouni Malinen <j@w1.fi>]

On Tue, Mar 18, 2008 at 10:18:00AM +0100, Johannes Berg wrote:

> > At least the original d80211 design supported multiple SSIDs per BSS and
> > yes, as far as kernel code is concerned, this was done in the identical
> > way for both multi-SSID and dynamic-VLAN (RADIUS assigned). A new
> > virtual interface is added for both cases and STAs are bound to the
> > specific virtual interface based on MLME/RADIUS results.

> Ah. I guess that requires hiding the SSID though?

Not necessarily. The AP can advertise one SSID in Beacon frames and then
reply with Probe Response to multiple SSIDs (well, these other SSIDs
would of course be "hidden" in the sense that they are not broadcast in
Beacon frames). This works relatively well with most clients as long as
the security policy with the main SSID (the one advertised in the Beacon
frames) and the secondary ones (the ones that are only visible in Probe
Response frames) are identical. If they are different (e.g., open vs.
WPA), problems are to be expected with many client implementations since
this does not exactly match with the standard..

-- 
Jouni Malinen                                            PGP id EFC895FA