Local EAP - Using PEAP

NC16390371 · ‎12-01-2008

I have a question with regards to Local EAP. After you have created your Local EAP profile and applied it to an SSID a client with the appropriate certificate and local net user ID is authenticated. Once the user is authenticated does the client re-authenticate as he roams ? Are his credentials cached on the controller ?

dziminski · ‎12-01-2008

If the client roams across access points on the same controller, I don't think the client will have to re-authenticate as long as your client supports CCXv2 which supports CCKM (Cisco Centralized Key Management) for LEAP authentication.

http://www.cisco.com/web/partners/pr46/pr147/program_additional_information_new_release_features.html

You can use this command on the controller to see the pairwise-master key cache.

show pmk-cache all