Enabling CCKM

[PMANAZTMC]

Will enabling CCKM  on an SSID currently configured for just 802.1x authentication reset the AP's associated with that SSID in any way?

[Rasika Nayanajith · Accepted solution]

When you are doing this SSID will momentarily disabled & enable again. So client connected to this SSID will momentarily get disturbed.

Also if you enable CCKM client needs to support CCX (Cisco Compatible Extension) in order to join.

HTH

Rasika

**** Pls rate all useful responses ****

[PMANAZTMC]

With both the 802.1x and CCKM enabled will the clients use one or the other method depending on the clients ability? So if the clients support cckm they will use cckm, and if the clients use 802.1x they will use that method? Or am I misunderstanding here?

[Rasika Nayanajith]

Yes, you are right on that.

Only CCX capable client can do fast-roaming in that situation, but both CCX & non-CCX clients able to join the SSID.

Here is 7.4 config reference on this

http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01010001.html

HTH

Rasika

**** Pls rate all useful responses ***

[PMANAZTMC]

Thank you for the information regarding the CCKM. I will move forward with my change. Thank you.

[Scott Olsen]

FYI - I've had to do some troubleshooting on this in the past, and came across a quirk as well that isn't explicitly mentioned in the "Mobility Design Guide" (it may be now). 

It was relating to whether or not mobile clients would support CCKM on a WPA2 network utilizing AES encryption.  Cisco's documentation (mobility design guide in particular) will state that CCX compatible devices will support CCKM on an AES WLAN, but what they don't explicitly state is that it only applies to CCX v5 clients.  Currently, there aren't that many that actually support CCX v5.  I think only Cisco handsets, the last I checked.

Anyway, just wanted to throw that tidbit out there as it was quite the ordeal trying to track down the details at the time.

Cheers!