CCKM

vsahagian — Sun, 04 Jul 2021 17:48:55 GMT

Does the AP require CCKM enabled in order for WDS caching of security credentials or will other key management types such as WPA work?

Re: CCKM

vsahagian — Thu, 26 May 2005 17:09:38 GMT

Found the answer to my question in the below.

Currently, LEAP and EAP-FAST are the only two EAP types that are supported in terms of CCKM and

thus the only two 802.1X authentication protocols that support Fast Secure Roaming. Cisco SWAN and

WLSM support all the other EAP types (PEAP, EAP-TLS, PEAP-GTC, and so on), but for these

protocols, the roaming time is not as fast as the CCKM-enabled ones. This is because without CCKM,

there is no caching of user credential in the WDS. This means that every time the client roams from one

access point to another, a full authentication is needed with the RADIUS server. It is still a Layer 3

roaming, so the client keeps the IP address, but the roaming time is not guaranteed to be under 100 ms.