How does Cisco Centralized Key Management (CCKM) work in a LWAPP/CAPWAP environment?
A. During the initial client association, the AP or WLC negotiates a pair-wise master key (PMK) after the wireless client passes 802.1x authentication. The WLC or WDS AP caches the PMK for each client. When a wireless client reassociates or roams, it skips the 802.1x authentication and validates the PMK right away. The only special implementation of the WLC in CCKM is that WLCs exchange client PMK via mobility packets, such as UDP 16666.
Related Questions
- My 350 adapter uses Cisco Centralized Key Management (CCKM) to associate. Why does the adapter not use fast roaming?
- How does Cisco Centralized Key Management (CCKM) work in a Lightweight Access Point Protocol (LWAPP) environment?
- In a homogeneous environment, does a client really need a centralized server management platform?
