I'm new to wireless networking and I have a question that might be dumb.
Regular 802.11 uses AES/TKIP encryption. CAPWAP uses DTLS encryption, but CAPWAP is also 802.11 spec. Can you please explain how this works? Thank you.
Network Engineering Stack Exchange is a question and answer site for network engineers. It only takes a minute to sign up.Sign up to join this community
CAPWAP is an application-layer protocol for wireless management. It's got its own DTLS encryption (in what you may call a sublayer).
Usually, CAPWAP runs over the wired network between the wireless controller and the WAPs. If you run it over a (probably separate) 802.11 link, the encapsulating frames are additionally WPA2/3-encrypted on the data link layer.