VPNs for WLAN's ?

[bspognardi]

I am researching the pros & cons of using IPSEC (software clients
connecting into a VPN concentrator) to secure PC's and laptops over a
wireless LAN (802.11, 802.1x, etc.). I have been unsuccessful
at finding much documentation on this subject. Does anyone know of any
security weaknesses and/or management weaknesses inherit in this
architecture?

Thanks in advance,
bob.

[MoleStrangler]

Intermec (http://www.intermec.com) will be releaseing an upgrde for all its Access Points (2100, 2101, 2102 & 2106) that add the following functionallity before the end of the year:

o VLAN support
o IP MultiCast & QOS
o 802.1D
o 802.1Q
o Mobile IP
o VPN

This will be a free firmware upgrade available for web download when available.

[yonah]

Bob,

AFAIK, An IP-Level VPN should, in theory, work on a WLAN, simply because the VPN data is encapsulated in IP. Howver, the Wireless AP routers also need to be configured to tunnel VPN packets.

As far as vulnerability goes, put it this way - you use a VPN on a non-secured network (i.e. the Internet) because you are worried that people will intercept your packets. In that respect, if you are worried that people will airsniff your WLAN, using a VPN will give you the same equivalent of using a VPN over the public Internet.

So long as you treat your WLAN as untrusted, it will have the same security as data coming in over the NET