I'm new to wireless networking and I have a question that might be dumb.

Regular 802.11 uses AES/TKIP encryption. CAPWAP uses DTLS encryption, but CAPWAP is also 802.11 spec. Can you please explain how this works? Thank you.

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can post and accept your own answer.
    – Ron Maupin
    Dec 17, 2020 at 19:45

1 Answer 1


CAPWAP is an application-layer protocol for wireless management. It's got its own DTLS encryption (in what you may call a sublayer).

Usually, CAPWAP runs over the wired network between the wireless controller and the WAPs. If you run it over a (probably separate) 802.11 link, the encapsulating frames are additionally WPA2/3-encrypted on the data link layer.

  • Thanks for your answer. So it's like double encryption then when it comes to wireless.
    – mikal
    Aug 15, 2020 at 13:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.