OKC - To Overcome the limitations of PMK see below.
- Full 802.1X authentication to any new AP the client roams
- Limit on how many PMKSAs client can cache
- Share the PMK key info across all the APs in the swarm
- OKC is applicable only when key management is
- WPA2-Enterprise
- Both (WPA-2 & WPA)
- OKC is enabled by default
- Default PMK cache time is 8 hours
- Currently supported only on single swarm
- Client also should support OKC
WEBUI Configuration:-
--------------------------------
CLI Configuration:-
-----------------------