Cisco C3201FESMIC-TP= - 3201 Fast EN Switch Mobile Interface Card Expansion Module Software Configuration Manual page 281

WDS, Fast Secure Roaming, and Radio Management
Figure 1
Client
device
1. Authentication request
2. Identity request
3. Username
(relay to client)
5. Authentication response
(relay to client)
7. Authentication challenge
(relay to client)
9. Successful authentication
When you configure your wireless LAN for fast, secure roaming, however, LEAP-enabled client devices
roam from one access point to another without involving the main server. Using Cisco Centralized Key
Management (CCKM), an access point configured to provide WDS takes the place of the RADIUS
server and authenticates the client so quickly that there is no perceptible delay in voice or other
time-sensitive applications.
Figure 2
Roaming client
Reassociation request
Reassociation response
Client Authentication Using a RADIUS Server
Figure 2
Client Reassociation Using CCKM and a WDS Access Point
Access point
device
Pre-registration request
Pre-registration reply
Wired LAN
Access point
or bridge
(relay to server)
4. Authentication challenge
(relay to server)
6. Authentication success
(relay to server)
8. Authentication response
(relay to server)
shows client reassociation using CCKM.
WDS Device - Router/
Switch/AP
Cisco 3200 Series Wireless MIC Software Configuration Guide
Understanding Fast Secure Roaming
RADIUS Server
Wired LAN
Authentication server
3