I have a 4404 LAN controller with 1131a/g light AP's. Clients are Cisco a/b/g cards using WPA2, PEAP MSCHAPv2 and the Odyssey supplicant.
Sometimes my clients roam between access points without losing a single packet, but other times they lose connectivity for up to 15 seconds while the client reauthenticates. Obviously, I would like to improve roaming time.
On the WLAN controller I have WPA2 configured with AES and "auth key managment" set to 802.1x. I just upgraded to the latest (4.0) code on the controller and noticed there is a new "auth key management" setting called 802.1x + cckm.
After much research on cckm tonight, I seem to have more questions than answers.
Can/should cckm be used WITH WPA2?
If not, can both WPA2 and cckm be supported on the same WLAN?
Which auth key management setting should I be using, 802.1x or 802.1x + cckm?
Does cckm require support of both supplicant and NIC?
Is there anything else I can do to make roaming more seamless?
For CCKM to support AES, AP needs to run 12.3(8)JA. A CB21AG client configured for WPA/WPA2/CCKM/EAP is unable to associate on an SSID that is configured for AES+CCKM. Configure the SSID for WPA2/AES but not for CCKM.
We are moving! Please use WLCCA Forum for updates and discussions
[toc:faq] Wireless LAN Controller (WLC) Config Analyzer Download Click
here to Download To request access, send an e-mail to
email@example.com. Please include your Cisco.com userna...
[toc:faq] IntroductionHere is the step by step process that we have to
take care of while converting LWAPP to IOS and then vice versa..LWAPP to
IOSThe hardware used = 1141 AP (make sure we are using the right
[toc:faq] Introduction AnyConnect Secure Mobility Client 3.0: Network
Access Manager & Profile Editor on Windows Summary Use the Cisco
AnyConnect Network Access Manager Profile Editor to build custom
profiles for the AnyConnect Secure Mobility Client. App...