Fast 802.11r roaming on WGB

Similar Questions

• Wireless 802.11r and Laurette on WLC

  Hi all

  I saw in version 7.4 and later on the WLC5508 you can configure 802.11r and 11 k fast aid Transaction so that iOS7 don't suffer a loss connection for roaming... my question is on the same WIFI network, I can configure 802. 1 X and FT - 802.1 X authentication so that I'll be able to have the same SSID non802.11r and 802.11r compatible client? Or this configuration creates association problem?

  BR

  OG

  Maybe this can help also to explain it:

  http://www.Cisco.com/en/us/docs/wireless/controller/7.3/configuration/gu...

  Legacy clients can not associate with a WLAN which has enabled 802.11r, unless the driver of the supplicant who is responsible for the analysis of exchange of information (IE ARS) robust security network is old and not aware of the suites more in EI AKM. Because of this limitation, customers cannot send connection requests to the local wireless networks. These customers, however, can still be associated with non - 802.11r WLAN. Customers who are capable of 802.11r can associate as 802.11i clients on LANs wireless with 802.11i and 802.11r Authentication Key Management Suites active time. The solution is to activate or upgrade the driver of the legacy clients to work with the 802.11r new AKMs, after which legacy clients can associate with success of 802.11r compatible WLAN. Another solution is to have two SSID with the same name but with security different parameters (IP and non-pi).

  Sent by Cisco Support technique iPhone App

• 802.11n aggregation mode WGB

  Hello!

  I noticed this message during startup when upgrading from JB AP 1262 to 15.2 (2) in the bridge of the workgroup mode:

  "Disable 802.11n aggregation Repeater/GTC/NRB mode."

  I hope someone can clarify why aggregation is disabled and whether or not it is specific to the IOS again. Thank you!

  Well what I know is that Cisco would not support 802.11n for these types of connections and only really help customers. Now you can get the PTP bridges to connect to 802.11n, but this does not mean that Cisco supports. They may also removed the ability for these functions to support 802.11n. A few years back I have two 1252 close link and connect with N rates. Don't know if that still exists or not well.

  Sent by Cisco Support technique iPhone App

• 802.1R and fast roaming

  Hello world.

  I couldn't find anything in this regard. I want my customers to be able to experience a better roaming. based on my study the client goes through the process of 802. 1 x if they re - associate with different AP (even on the same WLC) and 802.1r or FT 802. 1 x option seems to be the answer, if I don't want to use CCKM server.

  first is that OK? on my debug I get this line which is saying no transfer of data at this stage when its in the process of EAPol.

  so to allow 802.1r, I chose the transition quick and on DS and also checked the FT 802.1 x.

  is that all?

  Thanks for your response

  Hello

  Thanks for debugging.

  By the way I am at the other end of AU (IE MEL) - it was 22:38 when I replied to you yesterday :)

  So here's what I found the debug, looks like not fast roaming (802.11r) happen & each time customer is going through the full process Auth & then 4 - Way handshake. I can see 6 times customer roaming to different AP, shows only first 3 here.

   *apfMsConnTask_3: Oct 03 08:17:46.471: 00:24:2b:6f:4e:98 Sending Assoc Response to station on BSSID 2c:3f:38:59:a1:90 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_3: Oct 03 08:17:46.471: 00:24:2b:6f:4e:98 apfProcessAssocReq (apf_80211.c:8294) Changing state for mobile 00:24:2b:6f:4e:98 on AP 2c:3f:38:59:a1:90 from Associated to Associated *spamApTask0: Oct 03 08:17:46.474: 00:24:2b:6f:4e:98 Sent 1x initiate message to multi thread task for mobile 00:24:2b:6f:4e:98 *Dot1x_NW_MsgTask_0: Oct 03 08:17:46.474: 00:24:2b:6f:4e:98 EAP-PARAM Debug - eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_0: Oct 03 08:17:46.474: 00:24:2b:6f:4e:98 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_0: Oct 03 08:17:46.474: 00:24:2b:6f:4e:98 dot1x - moving mobile 00:24:2b:6f:4e:98 into Connecting state *Dot1x_NW_MsgTask_0: Oct 03 08:17:46.474: 00:24:2b:6f:4e:98 Sending EAP-Request/Identity to mobile 00:24:2b:6f:4e:98 (EAP Id 1)

   *apfMsConnTask_7: Oct 03 08:22:03.689: 00:24:2b:6f:4e:98 Sending Assoc Response to station on BSSID 2c:3f:38:2a:a6:b0 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_7: Oct 03 08:22:03.689: 00:24:2b:6f:4e:98 apfProcessAssocReq (apf_80211.c:8294) Changing state for mobile 00:24:2b:6f:4e:98 on AP 2c:3f:38:2a:a6:b0 from Associated to Associated *pemReceiveTask: Oct 03 08:22:03.690: 00:24:2b:6f:4e:98 10.66.54.50 Removed NPU entry. *spamApTask3: Oct 03 08:22:03.692: 00:24:2b:6f:4e:98 Sent 1x initiate message to multi thread task for mobile 00:24:2b:6f:4e:98 *Dot1x_NW_MsgTask_0: Oct 03 08:22:03.692: 00:24:2b:6f:4e:98 EAP-PARAM Debug - eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_0: Oct 03 08:22:03.692: 00:24:2b:6f:4e:98 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_0: Oct 03 08:22:03.692: 00:24:2b:6f:4e:98 dot1x - moving mobile 00:24:2b:6f:4e:98 into Connecting state *Dot1x_NW_MsgTask_0: Oct 03 08:22:03.693: 00:24:2b:6f:4e:98 Sending EAP-Request/Identity to mobile 00:24:2b:6f:4e:98 (EAP Id 1)

   *apfMsConnTask_4: Oct 03 08:23:06.663: 00:24:2b:6f:4e:98 Sending Assoc Response to station on BSSID 2c:3f:38:30:17:10 (status 0) ApVapId 1 Slot 0 *apfMsConnTask_4: Oct 03 08:23:06.663: 00:24:2b:6f:4e:98 apfProcessAssocReq (apf_80211.c:8294) Changing state for mobile 00:24:2b:6f:4e:98 on AP 2c:3f:38:30:17:10 from Associated to Associated *spamApTask0: Oct 03 08:23:06.665: 00:24:2b:6f:4e:98 Sent 1x initiate message to multi thread task for mobile 00:24:2b:6f:4e:98 *Dot1x_NW_MsgTask_0: Oct 03 08:23:06.666: 00:24:2b:6f:4e:98 EAP-PARAM Debug - eap-params for Wlan-Id :1 is disabled - applying Global eap timers and retries *Dot1x_NW_MsgTask_0: Oct 03 08:23:06.666: 00:24:2b:6f:4e:98 Disable re-auth, use PMK lifetime. *Dot1x_NW_MsgTask_0: Oct 03 08:23:06.666: 00:24:2b:6f:4e:98 dot1x - moving mobile 00:24:2b:6f:4e:98 into Connecting state *Dot1x_NW_MsgTask_0: Oct 03 08:23:06.666: 00:24:2b:6f:4e:98 Sending EAP-Request/Identity to mobile 00:24:2b:6f:4e:98 (EAP Id 1)

  Regarding your version of code & 802.11r client supported, I found this during today to WLC 8.0 Delta Webinar.

  1 802.11r mixed mode support to 7.6 and 8.0 (both codes)
  2. yet few applicants (Mac OSX, Netgear, ect) don't like mixed mode WLAN, so that they can have trouble if you enable FT

  Here is the list for 802.11r joint customer supported in OS & view according to webex of today.

  802.11r_support.PNG

  

  802.11r_support - 2.png

  

  I suspect that your Dell customer may not support 802.11r & therefore do the full auth everytime.

  If possible get an output of client debugging for an iPhone or an iPad (running iOS6 or higher). We can therefore compare & see the difference.

  Hope this answer help me set up my side. :)

  He sank 4-> 3-> 2 to 3 last replies :)

  HTH

  Rasika

• This allows a rapid Transition with assisted on Legacy SSID roaming

  Hello

  I'm under code WLC 8.0.121 (soon to be 8.0.132) and I'm looking for a quick transition with roaming assisted on my corporate network. The goal is not to have to create a SSID for customers of rapid transition.  I read that the version of code that I'm running allows for me to activate this on an existing network.  My SSID has set following parameters:

  WPA2-AES

  802. 1 x

  CCKM

  WMM enabled

  Aironet IE

  DTIM period 802. 11A - 2

  Tolerance of CCKM TSF... 5000

  Timeout of reassociation FT... 20

  I intend to follow the guide of best practices for Apple devices and implement the following technologies:

  802.11 k and 802.11r and 802.11v.

  I have a few new features that support the two CCKM and 802.11r fast transition. This device will try to use 802.11r CCKM?  How is that usually determine?   My TAC engineer said:

  "There may be older customers who may suffer disconnections if we allow both or either of these itinerant methods, given that some former clients who are not able to manage this additional information.

  My existing customers will potentially be questions if they do not support CCKM or FT?

  Any input would be apprecated.

  Thank you

  Will my existing clients potentially have issues if they don't support CCKM or FT?

  Yes, unless your customers supported FT there can be problems of connectivity with certain types of clients. You must ensure that your client devices support 802.11r before enabling this on your SSID. If you have the authority, you can enable first and see what devices affecting, but it's disruptive and undesirable. See this thread, I have listed some types of clients that support mixed mode 802.11r when version 8.0 software. This list may have increased from now https://supportforums.cisco.com/discussion/12314591/8021r-and-fast-roaming HTH Rasika * Pls note all useful responses *.

• EA7500 and three RE7000s - seamless roaming

  Hello

  My current setup is 4 different old (all with ethernet wiring) wireless routers to get coverage in all of my house. There are a lot of walls in concrete and insulation where 4 routers. The problem I have is that I have quite often disconnects and reconnects as my move of one router to the other devices.

  I want to do is get an EA7500 and three RE7000s. Each of the RE7000 will have a wired connection to the router that will also have a swich next to additional ports.

  My question is the transparent roaming will (802.11r / k) knit between access points and router in this situation? Happy to make the investment if it will work, but I want to confirm this first. I saw messages with a RE7000 and a router and some with a RE7000 as an Extender and the other as an access point. All mine would be connected acccess points.

  I posted this in the channel of wireless routers, but if it is better placed under access points please let me know.

  Thanks in advance

  Thank you guys!

• Seamless roaming with EA7500 + RE7000 the two AP work?

  I have a wired router provided by my ISP at home and a few wireless (wired connection to the router, DHCP off) covering the rooms. The experience of homelessness is terrible, and I am considering buying an EA7500 and a RE7000 to replace my existing APs.

  But after this post EA7500 is not compatible 802.11r. It is a surprise for me. I would like to know which of the following configurations provides the best mobile experience, or are they the same?

  (a) 1 EA7500 + 1 RE7000, both working as AP, wired to the router;

  (b) 2 RE7000 works like AP, wired to the router.

  With option one) I also use EA7500 for storage network etc., but homelessness experience matters more for me.

  @Carolina

  If the two Linksys RE7000 are both connected to the router, they will act as an Access Point, however, adding another extensions (RE7000) wireless to remote locations is possible depending on the coverage of your network. BTW, check out this link how to configure 2 Linksys RE7000 for seamless roaming. You can also check out this other link to set up your RE7000 with a Linksys Max-Stream router.

  Jay-15354

  Linksys technical support

• Signal strength and range of the latest wifi routers

  I have a big house, with my router (BT home hub) in a wiring closet in a laundry room. The House is wired for ethernet and my current Wi - Fi, a Netgear WPN802, is placed at the best discreet place in the House. It is quite visible from everywhere in the House, the signal is quite low in some places.

  If I replace it with a common Netgear router, switched to AP mode, I see a significant improvement in the strength of signal and the beach? Smartphones, tablets and streaming music boxes (Sonos) are the usual wifi customers.

  In general, with one exception, hand-off is controlled by the device. On devices where the roaming aggressiveness can be adjusted, usually of the laptops and PC with Wi - Fi cards, it is sometimes possible to do hand-off low impact, but it is often neither transparent nor without interruption. I walk often so, personally, that this is not a matter of my house with my laptop streaming.

  However, smartphones often do not have adjustable settings of roaming aggressiveness, but it is precisely the devices with which we want to transfer transparent. My old iPhone 5 was terrible to homelessness at home and at work.

  If you install a second WAP in your House, don't expect transparent transfers. But, as I said, it's usually to the device.

  I talked to an exception almost, and perhaps two. One is that there is a connection Wi - Fi standard 802.11r called which rudder hand fast shipment. I don't think that any consumer connection Wi - Fi gear to implement. Two is that Ubiquiti Networks offers an exclusive feature called discount zero where several Ubiquiti APs can work together in the hand-off a device between them. I don't know which of their products offer this feature, but my guess is that they are not cheap. The disadvantage of this feature is that all points of access must use the same channel Wi - Fi (they do all access points appear as an access point). It is not so good, if you have many Wi - Fi devices and need a lot of bandwidth. It is a compromise between speed and reliability.

  I would recommend that you try one of the higher end Netgears with external antennas. If you are happy with your current router and only need an AP, consider the EX7000. It is marketed as a wireless extension, but it is also usable as a wired access point. It'll be cheaper than the R7000. But if you want to improve your router, then the R7000 is an excellent choice. I have one and it covers almost my entire House, 2 storeys.

• Methods of security for users of Wi-wired and wireless

  Hi all

  We will implement node stand-alone cisco ISE 2.0 in our network due to budget constraints, we do not have to implement all the redundant nodes of ISE.

  We have to be authenticated through ISE 2.0 wireless and cable work.

  My concern is that if my Ise goes down

  1. my users disconnects from the network?
  2. What happens if a new user wired / wireless tries to access the network?

  How to set up my network of accessibility transparently if ise falls down.

  Please suggest me how to do the things above

  It's too risky & you create a single point of failure.

  If ISE does not work, then there are no new authentications. Existing session can work up to the re-authentication required. do not forget in the wireless world, every time that customer move from 1 AP to another client must make a full authentication (unless you implement a fast roaming method as 802.11r, ect)

  Based on my experience with this product, we highly recommend to have redundancy in place for ISE.

  HTH

  Rasika

  Pls note all useful responses *.

• Two extensions of the range RE7000 with EA9500 router works not so well...

  Everything works very well with a RE7000, but when I add a second RE7000 (needed for another part of my house with weak signal), the 5 GHz band is confusing. By "confusing", I mean that you can however connect WiFi, but for some reason Internet access are not available.

  If I remove the second RE7000, everything works fine. The 2 GHz band works very well with one or two RE7000 in use. It is only the 5 GHz band that merges with the two RE7000 in use.

  I found this article on activation of the 802 - 11r option, hoping he can solve the problem, but this option does not appear on my page of RE7000 configuration settings:

  http://www.Linksys.com/us/support-article?articleNum=200527

  Any ideas?

  Well, after a few days, it is all working well, from the RE7000 seems to have done the job. Thanks again!

• Cisco E1000 to the netopia DSL modem connection failed

  Hello all: I have AT & T DSL service and purchased the Cisco router because my AT & T Home Portal only supports 802..11b/g. I set up my old Netopia DSL modem to bridge mode, then connected to the router Cisco it and inserted the easy installation disc. He failed every time. I was told aby a tech AT & T as the software of the router should automatically pick the information of DSL service, but I guess he was wrong. do I have to manually configure this router? If someone knows a link to simple instructions to establish this connection, I would be very happy... I think I can have the answer to my problem, but need to check it out - when you use the Setup disk, the Cisco router should be disconnected in any environment and comes directly connected to the computer with the Setup disk. Could be the problem? Thanks in advance, SD

  It worked!  Thank you.  Everything is reset and work like a charm.  Can't believe how fast 802.11n is compared to g.

  SD

• Satellite L650-11R - broadcom WLan 802.11n does not

  Hello!

  I had some problems with my internet and everything trying to solve this problem, somehow I uninstalled my network card and its drivers.

  After that (I reinstalled several times), unit is here, but it says in Device Manager that is activated, but when I go to the device in network settings, it says that it is diseblaed and its painted in grey (I clicked, window opens saying "enabaling"... but nothing happens after that). Also, I know that of not work beacause it does not find my home WIFI network and other devices in the House are connected to the home network. In the right corner of the screen there is red ' x'.

  Also, when I run windows repair to see what is the problem of network it says that my network card is probably bad drivers and I should change that.

  I tried a lot of drivers for broadcom 802.11n on the internet, but nothing seems to work.

  My laptop is Toshiba satellite L650-11R
  network card: broadcom 802.11n
  am on Windows 7 64 bit home edition

  Help me to find drivers or tell me how to install correctly with corect NIC drivers.

  Please help, thanks in advance!

  I solved my problem. All the drivers that I tried to install worked

  The real problem was antivirus, I uninstalled Zone Alarm security and now I have internet!

• Support for EAP-FAST on Ironet 802.11A/B/G adapter

  Cisco Aironet 802.11A/B/G Wireless Cardbus Adapter such as the lack of AIR-CB21AG-E-K9 supports EAP-FAST. This support happens?

  Hello

  EAP-FAST of WPA and 802. 1 x EAP-FAST is already working before the release of ADU v2.1.0.2

• Roaming with two Cisco WAP551

  Hello

  I am faced with the installation of an office with two Access Points Cisco WAP551 wireless.

  The two access points will be connected via PoE to a Cisco SG200 - 26, which is also related to wired devices and the internet router.

  The end customer is also willing to reach for customers roaming wireless with one THAT SSID broadcast in the Office; This means that only one SSID is visible by wireless devices, and which move around the Office connectivity is managed automatically by the second WAP if first becomes too far, without loss of connectivity.

  This behavior is possible with these devices and if anyone can give some suggestions key on the WAP configuration?

  Thank you

  Lucio

  EDIT *.
  I moved the post in the section of the small business that I didn't notice this before section.

  Depends really. Since it is a soho device, they are not very strong on the technical department. I guess your also with a PSK? I also assume that you generally do web surfing and no voice. If your WLAN is identical and the customer will get the same subnet I would give it a try. I think I'm going to work. Make sure your RF cell recovery is good. If this is not the case, your roaming and performance may not look pretty. For what is good, I mean in the middle where the two aps meet they should be low 70 or more. With regard to the terms fast roaming. Which is usually mentioned when you make 802. 1 X security and roaming from ap to ap. Yet once again, I assume you are psk.

• L2 roaming with 2 autonomous access points?

  Hello

  Is it possible for 2 1130AG in stand-alone mode to quick support layer 2 roaming?

  My clients are a mix of clients of compatible and not cisco cisco ccx.

  (Authentication could be open or WPA etc.)

  If so, do 1 AP do acts as a WDS?

  I fell on the docs that say I need a WLSM and that an acting as a WDS AP don't work...

  If I do not use WDS and simply have 2 AP with the same SSID: -.

  If I only use open authentication, then the roam would be a little faster?

  The AP would update switches upstream MAC tables when a customer changes AP?

  Thank you

  Oh, I see now. You get absolutely L2 roaming out of the box. It's all part of the 802.11 Protocol - the customer will inform current accreditation which he left, which AP it will and then he will wander. With open authentication or PSK, it will be almost transparent to the client.

  Cisco Secure fast roaming is an entirely different topic. In the above case, if the customer is using the PEAP Protocol, it will need to authenticate to the RADIUS server whenever he roams to a new AP. Cisco FSR puts cached credentials in the WDS AP for fast authentication, which takes the RADIUS server outside the process. This significantly speeds up a course for users of the EAP, and it is especially noticeable (and necessary) for wireless IP phone users.

  Again, I hope it helps!