300-370 · Question #56
A network engineer has identified clients who are experiencing delays white roaming. The network is configured with WPA2-Enterpnse. AES encryption, 802 1X authentication, and Cisco Centralized Key…
The correct answer is A. Utilize a supplicant that supports Cisco Centralized Key Management.". Roaming delays in a WPA2-Enterprise network using Cisco Centralized Key Management (CCKM) are resolved by ensuring client supplicants support CCKM for fast re-authentication.
Question
A network engineer has identified clients who are experiencing delays white roaming. The network is configured with WPA2-Enterpnse. AES encryption, 802 1X authentication, and Cisco Centralized Key Management. Which change resolves the roaming delays?
Options
- AUtilize a supplicant that supports Cisco Centralized Key Management."
- BEnable AES and TKIP encryption
- CDisable client session timeout
- DInstall wireless device drivers from Cisco
How the community answered
(18 responses)- A72% (13)
- B17% (3)
- C6% (1)
- D6% (1)
Why each option
Roaming delays in a WPA2-Enterprise network using Cisco Centralized Key Management (CCKM) are resolved by ensuring client supplicants support CCKM for fast re-authentication.
Cisco Centralized Key Management (CCKM) is a Cisco proprietary fast roaming technology designed to reduce roaming delays by allowing clients to quickly re-authenticate with new access points without a full 802.1X exchange, provided the client supplicant supports this feature.
Enabling both AES and TKIP encryption (mixed mode) is generally discouraged due to security vulnerabilities and performance issues with TKIP, and it does not directly address roaming delays caused by re-authentication.
Disabling client session timeout is not a security best practice and does not resolve roaming delays caused by the re-authentication process itself, only extending the period of association.
While up-to-date wireless device drivers are important for general client performance, installing Cisco-specific drivers does not directly address roaming delays caused by 802.1X re-authentication when CCKM is already configured on the infrastructure side.
Concept tested: Cisco Centralized Key Management (CCKM) for fast roaming
Source: https://www.cisco.com/c/en/us/td/docs/wireless/wcs/3-2/configuration/guide/c32roam.html
Topics
Community Discussion
No community discussion yet for this question.