Controllerless Networks

Reply

Oppurtunistic Key-caching on IAP 4.0

 OKC  -  To Overcome the limitations of PMK see below.

 

  • Full 802.1X authentication to any new AP the client roams
  • Limit on how many PMKSAs client can cache

iapokc1.png

 

  • Share the PMK key info across all the APs in the swarm
  • OKC is applicable only when key management is
    • WPA2-Enterprise
    • Both (WPA-2 & WPA)
  • OKC is enabled by default
  • Default PMK cache time is 8 hours
  • Currently supported only on single swarm
  • Client also should support OKC

with okc.png

without okc.png

WEBUI Configuration:-

 

 

--------------------------------

 

iapokc2.jpg

 

CLI Configuration:-

-----------------------

 

 

CONFIGURATION OF OKC FROM CLI.jpg

 

iapokc3.jpg

 

 

 

iapokc4.jpg

 

iapokc5.jpg

 

 

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: