300-365 · Question #154
An engineer must ensure that clients on an 802.1x WLAN can roam as fast as possible at a remote site that was deployed with FlexConnect. Which configuration ensures that this roaming occurs?
The correct answer is A. FlexConnect group. A FlexConnect group enables fast 802.1x roaming at remote sites by allowing member APs to share PMK cache entries, so clients can skip full EAP re-authentication when roaming between APs.
Question
An engineer must ensure that clients on an 802.1x WLAN can roam as fast as possible at a remote site that was deployed with FlexConnect. Which configuration ensures that this roaming occurs?
Options
- AFlexConnect group
- BFlexConnect ACL
- Clearn client IP address
- DAAA override
How the community answered
(48 responses)- A83% (40)
- B2% (1)
- C4% (2)
- D10% (5)
Why each option
A FlexConnect group enables fast 802.1x roaming at remote sites by allowing member APs to share PMK cache entries, so clients can skip full EAP re-authentication when roaming between APs.
A FlexConnect group enables Opportunistic Key Caching (OKC) among all member APs at the same remote site, allowing them to share Pairwise Master Key (PMK) security associations. When a client roams to another AP in the same FlexConnect group, it re-uses the cached PMK instead of running a full 802.1x EAP exchange, dramatically reducing roaming latency even when the WLC link is unavailable.
FlexConnect ACLs filter locally switched traffic and have no effect on 802.1x re-authentication speed during a roaming event.
The 'learn client IP address' option allows the AP to detect a roaming client's existing IP for local switching continuity, but it does not reduce 802.1x re-authentication overhead.
AAA override enables RADIUS-returned attributes to supersede WLAN settings but does not accelerate the 802.1x key exchange process during roaming.
Concept tested: FlexConnect group OKC fast roaming for 802.1x WLANs
Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/flexconnect.html
Topics
Community Discussion
No community discussion yet for this question.