Does anyone know if disabling control plane security means that PAPI is sent in the clear i.e. without IPSec?
PAPI is encrypted, but it's recommended to use CPSec on top of it.
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-006.txt
EDIT: Let me just ammend this by saying although it's encrypted, it uses a weaker form of encryption as explained in the security advisory.
© Copyright 2024 Hewlett Packard Enterprise Development LPAll Rights Reserved.