Roaming Trouble

[Augustgood]

Hi all,

In a mixed environment with different client type (apple iphone/ipad/xp/ms 7/ms 8), what is the best method for roaming on wlan with wpa2-aes (eap-tls) ? 

the controller work with 7.6.x release, in my opinion the best is the default method , OCK, but new apple device support only SKC and 802.11r...

Can be enabled SKC with OCK (together) ?

[ali aqrabawi]

yes you are right , some of apple devices will only work with SKC , but no you can't enable both .

but instead of effecting all clients with legacy SKC in order to support some of apple clients  , i recommend you to enable OKC, 

[mohanak]

WPA2 Pairwise Master Key ID (PMKID) caching, or Sticky Key Caching (SKC), is the first fast-secure roaming method suggested by the IEEE 802.11 standard within the 802.11i security amendment, where the main purpose is to standardize a high level of security for WLANs. The fast-secure roaming technique was added as an optional method for WPA2 devices in order to improve roaming when this security was implemented.

Proactive Key Caching (PKC) or Opportunistic Key Caching (OKC) is basically an enhancement of the WPA2 PMKID caching method described previously, which is why it is also named Proactive/Opportunistic PMKID Caching. Hence, it is important to note that this is not a fast-secure roaming method defined by the 802.11 standard and is not supported by many devices.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/116493-technote-technology-00.html

[gohussai]

No both can't be enabled at the same time.

I think you create different SSID with different security and for Apple devices just use SKC. Hope this will achieve Fast roaming what you are expecting.

Please also share you experience after testing the mention methods.

Good luck 🙂