PEAP authentication takes approximately 30 seconds to re-authenticate when roaming between APs
Protected EAP (PEAP) is a draft EAP authentication type that is designed to allow hybrid authentication. PEAP employs server-side Public Key Infrastructure (PKI) authentication. For client-side authentication, PEAP can use any other EAP authentication type. Because PEAP establishes a secure tunnel through server-side authentication, non-mutually authenticating EAP types can be used for client-side authentication (such as EAP Generic Token Card (GTC) for one-time passwords (OTP), and EAP MD5 for password-based authentication).
When PEAP authentication is used, there is a delay when users roam between Cisco Access Points (APs). PEAP takes a long time to authenticate because it must re-authenticate user credentials to the RADUIS server every time the user roams.
Do not use WPA/TKIP with PEAP to avoid delays.
Refer the article 826942 to obtain the patch which fixes the authentication delays.
Using Fast reconnect is another option to decrease the re-authentication delays. This should be enabled on the client and the authentication server. Refer URL configuring ACS for PEAP
Hi, today our wireless environment has WLC8540 (version 8.2) and more than 1000 APs.we are planning to move AP authorization from MIC mode to LSC mode. i thought to do so with "provision list", this way to control which APs "chunks" to work wit...
Hello and good morning to you all!!. I have a little problem casting from our devices to televisions. When I connect both the televison and my phone or laptop to the cisco access point, the devices don't show up, however, when I connect both of them to a ...
Hello all, We are having issues with wireless Pones becuase they get disconnected and the calls get affected. The Phones show "authenticating" when the issue happens and after taking some traces in the WLC, I could see that it happens every time roam...
Hello everyone. I have a problem on my WiFi network.On WLC switched on AVC profile with blocking 'bittorrent', 'bittorrent-networking', 'encrypted-bittorrent'.If i start torrent through campus wifi network it isn't working as expected, but if i start...