Wifi is a layer2 standard. Always felt like security should be handled by upper layers. Layer2 secures one data-link segment at a time,layer3 secures a network

Wifi is a layer2 standard. Always felt like security should be handled by upper layers. Layer2 secures one data-link segment at a time,layer3 secures a network connection at a time. There is a missing .5 protocol(.5== inter-layer,e.g.: arp,ndp,mpls and dhcp) that could use layer2 parameters to establish layer3 security. Or maybe all that is needed is a feature-stuffed version of dhcp that would configure a default gateway and a secure l3 tunnel to that default gateway as well as on-demand tunnel establishment parameters for intra-vlan endpoints. This would secure wired and non-wifi wireless IP networks as well.