Wireless Architectures Flashcards
T/F: Some fields of the 802.11 frame header might not be present, depending on the message
T
What is the Frame Control field in the 802.11 header for?
Providing message information such as message type and subtype
What is the Duration/ID field in the 802.11 header for?
Depending on the message, can indicate:
- Time channel will be dedicated for transmission of the frame
- Identifier for the association between AP and device
What are the Address fields in the 802.11 header for?
- Destination Address (DA): final recipient of frame
- Source Address (SA): original sender of frame
- Receiver Address (RA): immediate recipient of the frame
- Transmitter Address (TA): immediate sender of the frame
What is the Sequence Control field in the 802.11 header for?
Used to reassemble fragments and eliminate duplicate frames
What is the QoS Control field in the 802.11 header for?
QoS
What is the HT Control field in the 802.11 header for?
Enable High Throughput (HT) operations
The field after the encapsulated packet in an 802.11 frame is:
FCS, same as the ethernet frame
The Frame Check Sequence field in the 802.11 header is for:
Same as Ethernet frames, used for error checking
What are the three 802.11 connection states?
- Not authenticated, not associated
- Authenticated, not associated
- Authenticated, associated
Client must be authenticated and associated with the AP to send traffic through it
What are the two ways a station can scan for a BSS?
- Active Scanning: station sends probe requests and listens for probe response from AP
- Passive Scanning: station listens for beacon messages from AP
T/F: Beacon messages are sent periodically by APs to advertise the BSS
T
T/F: Beacon messages are sent in response to probe requests sent by stations
F
Beacon messages are sent periodically
What are the three 802.11 message types?
- Management
- Control
- Data
What is the 802.11 management message type used for?
Managing the BSS, including facilitating client discovery / connections
- Beacon messages
- Probe request, probe response
- Authentication
- Association request, association response
What is the 802.11 control message type used for?
Controlling access to the medium (RF). Assist with delivery of management and data frames
- RTS (Request to send)
- CTS (Clear to send)
- ACK
What is the 802.11 data message type used for?
Sending actual data packets
In active scanning, a client sends ____ messages, and the AP response with _____ messaged
Probe request, probe response
After the discovery process is complete, the station sends ______ messages to the AP, and the AP replies with _____ messages
Authentication request, authentication response
After the authentication process is complete, the station sends _____ messages to the AP, and the AP replies with _____ messages
Association request, association response
Explain the difference between active scanning and passive scanning
Active scanning: The station sends a probe request message to the AP to initiate the connection process
Passive scanning: The station listens for beacon messages from the AP before initiating the connection process
What are the three main wireless AP deployment methods
- Autonomous
- Lightweight
- Cloud-based
What is an Autonomous AP?
Self contained system that doesn’t rely on a wireless LAN controller. Must be manually configured per AP
T/F: Autonomous APs aren’t viable in larger networks
T
What is a Lightweight AP?
An AP that’s responsible for real time operations (Tx/Rx traffic, encrypt/decrypt, beacons/probes, etc), but other functions are carried out by a WLC. APs are also centrally managed by a WLC
AKA split-MAC architecture
How is an attacker prevented from using an unauthorized lightweight AP to join the WLAN?
X.509 standard certificates are used. The WLC and the APs authenticate each other using the certificates installed on each device.