cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
513
Views
0
Helpful
1
Replies

CCKM

vsahagian
Level 1
Level 1

Does the AP require CCKM enabled in order for WDS caching of security credentials or will other key management types such as WPA work?

1 Reply 1

vsahagian
Level 1
Level 1

Found the answer to my question in the below.

Currently, LEAP and EAP-FAST are the only two EAP types that are supported in terms of CCKM and

thus the only two 802.1X authentication protocols that support Fast Secure Roaming. Cisco SWAN and

WLSM support all the other EAP types (PEAP, EAP-TLS, PEAP-GTC, and so on), but for these

protocols, the roaming time is not as fast as the CCKM-enabled ones. This is because without CCKM,

there is no caching of user credential in the WDS. This means that every time the client roams from one

access point to another, a full authentication is needed with the RADIUS server. It is still a Layer 3

roaming, so the client keeps the IP address, but the roaming time is not guaranteed to be under 100 ms.

Review Cisco Networking for a $25 gift card