I upgraded an AP 1100 and AP 1200 to IOS 12.3(4). I am associating to the AP 1100 and the AP 1200 is acting as a dedicated WDS server which forwards authentication requests to a RADIUS server.
I succesfully used LEAP and EAP-FAST authentication with TKIP encyption and CCKM key management. Howevever, when I changed the encryption to AES, I could not sign-on (i.e., authenticate( using LEAP or EAP-FAST. I kept the encryption to AES and changed the key management to WPA. LEAP and EAP-FAST then worked!
The documentation for IOS 12.3(4) is a little vague on encryption/key management combinations in that AES is not listed anywhere.
Anyway, is AES compatible with CCKM? If not, and I need/want AES, I guess I loose the Fast Secure Roaming feature that CCKM was giving me. Does the 12.3(4) IOS provide a standard roaming feature with WPA (I was not aware that there was a standard roaming feature)?
Thanks