Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CCKM, WPA, fast roaming issues

I have a 4404 LAN controller with 1131a/g light AP's. Clients are Cisco a/b/g cards using WPA2, PEAP MSCHAPv2 and the Odyssey supplicant.

Sometimes my clients roam between access points without losing a single packet, but other times they lose connectivity for up to 15 seconds while the client reauthenticates. Obviously, I would like to improve roaming time.

On the WLAN controller I have WPA2 configured with AES and "auth key managment" set to 802.1x. I just upgraded to the latest (4.0) code on the controller and noticed there is a new "auth key management" setting called 802.1x + cckm.

After much research on cckm tonight, I seem to have more questions than answers.

Can/should cckm be used WITH WPA2?

If not, can both WPA2 and cckm be supported on the same WLAN?

Which auth key management setting should I be using, 802.1x or 802.1x + cckm?

Does cckm require support of both supplicant and NIC?

Is there anything else I can do to make roaming more seamless?

  • Security and Network Management

Re: CCKM, WPA, fast roaming issues

For CCKM to support AES, AP needs to run 12.3(8)JA. A CB21AG client configured for WPA/WPA2/CCKM/EAP is unable to associate on an SSID that is configured for AES+CCKM. Configure the SSID for WPA2/AES but not for CCKM.

Re: CCKM, WPA, fast roaming issues

Is it possible to use

WPA1 + TKIP + Auth Key Mgmt="CCKM"


WPA1 + TKIP + Auth Key Mgmt="802.1x + CCKM"

My WLC have Software Version

With this configuration I will need client card CCX v4 ??


This widget could not be displayed.