For information on configuring a native VLAN on a wired profile, see
Configuring VLAN for a Wired Profile on
.
Configuring Fast Roaming for Wireless Clients
Instant supports the following features that enable fast roaming of clients:
l
l
Fast BSS Transition (802.11r Roaming)
l
Radio Resource Management (802.11k)
l
BSS Transition Management (802.11v)
Opportunistic Key Caching
Instant now supports opportunistic key caching (OKC)-based roaming. In OKC-based roaming, the IAP stores
one pairwise master key (PMK) per client, which is derived from the last 802.1X authentication completed by
the client in the network. The cached PMK is used when a client roams to a new IAP. This allows faster roaming
of clients between the IAPs in a cluster, without requiring a complete 802.1X authentication.
OKC roaming (when configured in the 802.1X Authentication profile) is supported on WPA-2 clients. If the
wireless client (the 802.1X supplicant) does not support this feature, a complete 802.1X authentication is
required whenever a client roams to a new IAP.
Configuring an IAP for OKC Roaming
You can enable OKC roaming for WLAN SSID by using the Instant UI or the CLI.
In the Instant UI
1. Navigate to the WLAN wizard (Go to
Network > New
OR Go to
Network > WLAN SSID
and click
edit
).
2. Click the
Security
tab.
3. Move the slider to the
Enterprise
security level. On selecting the Enterprise security level, the
authentication options applicable to the Enterprise network are displayed.
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Wireless Network Profiles |
101