Do we need to enable "validate PMKID" in IAP?

Aruba Employee
Aruba Employee


We have a option to enable / disable validate PMKID in dot1x profile in AOS:

(Master) (config) #aaa authentication dot1x default
(Master) (802.1X Authentication Profile "default") #validate-pmkid
(Master) (802.1X Authentication Profile "default") #


It is disabled by default. This is useful for IOS devices which do not support OKC.


Can we configure this in IAP? If yes, what is the default value?



Validate PMKID is always enabled in IAP. Option to change this is NOT available in IAP.


Version history
Revision #:
2 of 2
Last update:
‎03-07-2016 12:32 PM
Updated by:
Labels (1)
Search Airheads
Showing results for 
Search instead for 
Did you mean: