i'd like to know if WPA-Enterprise implementations have built-in anti-IP-spoofing. here's what i mean:
it seems to me like IP spoofing should be easily detectable and handled under WPA-Enterprise. when you've authenticated, the router knows that your personal encryption credentials are associated to the IP it grants you, say 220.127.116.11. thus if a packet not encrypted with your credentials comes in with source 18.104.22.168, it's not from you but from a spoofer; if a packet encrypted with your credentials comes in with source other than 22.214.171.124, you're a spoofer; and last but not least, no one can send a packet encrypted with someone else's credentials.
given the above, i'd like to know
- is my understanding correct (i.e., can one easily identify IP spoofers and IP spoofed packets under WPA-Enterprise)?
- is it standard/common or unheard of/uncommon for routers to drop/reject spoofed packets under WPA-Enterprise?
- in the latter case, does anyone know of any (ideally OpenWRT-compatible) packages that do this or alternatively have any pointers about where to start to implement one?