Fast Secure Roaming (Fsr); Eap And User Database Compatibility - Cisco 9971 Deployment Manual
Unified ip phone wireless lan deployment guide
Hide thumbs
Also See for 9971:
- Administration manual (352 pages) ,
- Deployment manual (74 pages) ,
- User manual (42 pages)
Table of Contents
Advertisement
Fast Secure Roaming (FSR)
CCKM is the recommended deployment model for all environment types where frequent roaming occurs.
CCKM enables fast secure roaming and limits the off-network time to keep audio gaps at a minimum when on call.
802.1x authentication is required in order to utilize CCKM.
802.1x without CCKM can introduce delay during roaming due to its requirement for full re-authentication. WPA and WPA2
introduce additional transient keys and can lengthen roaming time.
CCKM centralizes the key management and reduces the number of key exchanges.
When CCKM is utilized, roaming times can be reduced from 400-500 ms to less than 100 ms, where that transition time from
one access point to another will not be audible to the user.
As of the 9.1(1) release, the Cisco Unified IP Phone 9971 supports CCKM with WPA2 (AES or TKIP), WPA (TKIP or AES)
and 802.1x (WEP) authentication, where WPA2 (AES) with CCKM is recommended.
Authentication
EAP-FAST
LEAP
AKM
CCKM was not supported with WPA2 in releases prior to 9.1(1).
WPA Version
WPA
WPA2
EAP and User Database Compatibility
The following chart displays the EAP and database configurations supported by the Cisco Unified IP Phone 9971.
Database Type
Cisco ACS
Windows SAM
Windows AD
LDAP
Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide
Key Management
802.1x, WPA, WPA2
802.1x, WPA, WPA2
802.1x, WPA, WPA2
Cipher
Prior to 9.1(1)
TKIP
Supported
AES
Not Supported
TKIP
Not Supported
AES
Not supported
LEAP
Yes
Yes
Yes
No
Encryption
AES, TKIP, WEP (40/64 or 104/128 bit)
AES, TKIP, WEP (40/64 or 104/128 bit)
AES, TKIP, WEP (40/64 or 104/128 bit)
9.1(1)
Supported
Supported
Supported
Supported
EAP-FAST
(Phase Zero)
Yes
Yes
Yes
No
19
Advertisement
Table of Contents
