EAP-TLS Flexconnect roaming

yann guillemot — Mon, 05 Jul 2021 12:01:37 GMT

Hi,

I have a problem with SSID that use EAP-TLS (Radius server NPS) when my computer change AP.

I see that my computer lost connection and make a dhcp request and a new authentification.

In a cisco best pratice for flexconnect I saw that the option DHCP Addr Assignment required must be disable.

I try it but it's the same problem.

My configuration is :

WLC 5508 version 7.4.121.0

AP 1602

Computer with intel 7265 in version 18.40.0.0 CCKM 4.0

My SSID is in flexconnect WPA+WPA2 (policy + AES)

Fast transition is enable

Over the DS enable

Reassociation Timeout 20s

PMF Disabled

Authentication key 802.1x + CCKM

Flexconnect local switching enable

Lear client ip address enable

DHCP Addr assignment not required

And my ap are in the same flexconnect group

CLient Roaming RF parameters mode Custom

Min RSSI -75dBm

Hysteresis 3 db

scan Threshold -70 dbm

Transition time 5s

Thanks for your help.

topic EAP-TLS Flexconnect roaming in Wireless