How does Cisco Centralized Key Management (CCKM) work in a Lightweight Access Point Protocol (LWAPP) environment?
A. During the initial client association, the AP or WLC negotiates a pair-wise master key (PMK) after the wireless client passes 802.1x authentication. The WLC or WDS AP caches the PMK for each client. When a wireless client reassociates or roams, it skips the 802.1x authentication and validates the PMK right away. The only special implementation of the WLC in CCKM is that WLCs exchange client PMK via mobility packets, such as UDP 16666.
