> > I think in theory all eapol frames are sent to the PAE group address, > > but I have no idea which of the checks would be more efficient. It seems > > that the first could be optimised a lot because it's constant too... > > They are not.. PAE group address is used for all EAPOL frames in > non-shared media LANs (e.g., wired Ethernet switch), but IEEE 802.11 > uses the specific MAC address of the PAE since it is a shared media LAN > (i.e., the frames are between the unicast MAC address of the non-AP > STA/Supplicant and AP/Authenticator).
If that's how it's specified, ok, but I think it's not strictly necessary because the AP is addressed already by the BSSID, no? > If we end up having to drop the > PAE group addressed EAPOL frames in mac80211 anyway due to Linux > bridging code not doing this, No, we don't. We have to drop "unicast to somebody else". Group addressed frames are dropped just fine. johannes
signature.asc
Description: This is a digitally signed message part
