Roaming between 1231A and 1142N

Gday Everyone,
Just would like to know your experience in roaming between LWAPP converted 1231A and 1142N APs?

Inter-Release Controller Mobility (IRCM)
Table 10 lists the inter-release Controller Mobility (IRCM) compatibility matrix.
Table 10 Inter-Release Controller Mobility Compatibility Matrix
CUWN Service
4.2.x.x
5.0.x.x
5.1.x.x
6.0.x.x
7.0.x.x
7.2.x.x
7.3.x.x
Layer 2 and Layer 3 Roaming
X
X
X
X
X
Guest Access/Termination
X
X
X
X
X
X
X
Rogue Detection
X
X
X
X
X
Fast Roaming (CCKM) in a mobility group
X
X
X
X
X
Location Services
X
X
X
X
X
Radio Resource Management (RRM)
X
X
X
-1
Management Frame Protection (MFP)
X
X
X
X
X
AP Failover
X
X
X
X
X
1 In the 7.2.x.x release, RF Groups and Profiles were introduced. RRM for 7.2.x.x and later releases is not compatible with RRM for any previous release.
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin

Similar Messages

Roaming between 4400 and 5500 controllers

Hi, we are planning to do an AP migration, but there is a doubt for this.
Actually we have a 4402 controller with 1120 APs both of which are marked as EoL products, we want to jump over the new 2600 APs and 5508 Controller for increase signal coverage but we have the following deals:
Last firmware for 4402 controller is 7.0
Firmware needed for 5508 to support 2600 APs is 7.3
Is it possible to configure mobility between 4402 and 5508 even with different firmware branch?

Inter-Release Controller Mobility (IRCM)
Table 10 lists the inter-release Controller Mobility (IRCM) compatibility matrix.
Table 10 Inter-Release Controller Mobility Compatibility Matrix
CUWN Service
4.2.x.x
5.0.x.x
5.1.x.x
6.0.x.x
7.0.x.x
7.2.x.x
7.3.x.x
Layer 2 and Layer 3 Roaming
X
X
X
X
X
Guest Access/Termination
X
X
X
X
X
X
X
Rogue Detection
X
X
X
X
X
Fast Roaming (CCKM) in a mobility group
X
X
X
X
X
Location Services
X
X
X
X
X
Radio Resource Management (RRM)
X
X
X
-1
Management Frame Protection (MFP)
X
X
X
X
X
AP Failover
X
X
X
X
X
1 In the 7.2.x.x release, RF Groups and Profiles were introduced. RRM for 7.2.x.x and later releases is not compatible with RRM for any previous release.
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin

Roaming between mesh and non mesh and mesh AP design

Hi There,
I need some verification on the following:
- Can client roam between Mesh AP 1550 series and Non-Mesh AP?
- I have 1550 series AP to be installed and all the mounting area are with data point ready, which connects back to switch. Would configuring mesh for this outdoor units recommended, and guide on this. Current guide i am looking from cisco site is basically the AP do not have wired ethernet connection, my design here a bit different, all the AP's have wired connection back to the switch.
Kindly assist.
Thank you
Rama

I have seen and done installs like this. The advantage is that you don't have to worry about the backhaul dropping. So it's like any LAP but big chunky outdoor AP. If the RAP looses Ethernet connectivity... Well it changes to a MAP. So you can look at
It as a benefit. It's always nice to be able to have Ethernet when you can.
Sent from Cisco Technical Support iPhone App

Roaming between WLC and vWLC on different code versions

Hi,
I have the following setup in our environment, a HA 5508 pair running 7.4.100 and a vWLC running 7.6.130. I have mobility setup between the two with the control and data path up and running. All the access points are setup for FlexConnect.
When I join an SSID using PSK on an AP associated with the vWLC and then roam to an AP on the 5508, I drop a few pings but stay connected no problem. However when I join an SSID using PEAP (both WLC's using Radius to Cisco ISE 1.2 for this) and repeat the test, my client actually drops my wireless connection and then rejoins.
Is this expected behaviour when running controllers on different versions? This is only temporary until I upgrade the 5508 pair.
Cheers
Brian

Oh... Forgot. With FlexConnect, you also want to create FlexConnect Groups. See this link:
http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010001111.html
-Scott

How to improve client handover and roaming between AP's

Improving client Handover and roaming between APs
There are a few standards and methodologies available to use to improve handover of clients between APs. Most are focused on VOIP technologies, but it must always be remembered that we cannot control the client Handover (especially with legacy clients) we can only encourage them. Some Standards and methods work well for some environments and some do not - test the recommendations extensively before implementing in a live Production environment. It must also be noted that all settings take effect immediately once applied, however from a client perspective it might need to re-associate for the changes to take effect client side.
As with everything else in IT, if a perfect method/solution existed there would only be one - try them all and keep the best.
The Standards and Definitions
802.11k
IEEE 802.11k allows a device to quickly identify nearby APs that are available for roaming. When the signal strength of the current AP weakens and the device needs to roam to a new AP, it will already know the best candidate AP with which to connect to.
802.11r
IEEE 802.11r specifies fast Basic Service Set (BSS) transitions between access points by redefining the security key negotiation protocol, allowing both the negotiation and requests for wireless resources to occur in parallel.
When a device roams from one AP to another on the same network, 802.11r streamlines the authentication process. BSS allows a devices to associate with APs more quickly. Coupled with 802.11k's ability to quickly identify the target AP, BSS's faster association method may enhance application performance.
Handoff Assist
The AP monitors the RSSI for every associated client. If the RSSI for a specific client falls below "low-rssi-threshold" and continues to fall for the "rssi-falloff-wait-time", then the AP will send a de-auth to the client.
The de-auth is meant to kick the client away from the current AP and get it to re-authenticate to a nearby AP. This will have the effect of helping a client handover between 2 APs.
BUT (Big But), if the client gets de-authed and takes a while to re-authenticate (if it even does re-authenticate automatically after a de-auth), then this will have the effect of destroying communication instead of helping it -- mostly found with legacy clients.
Remove Lower Transmit Rates
Removing lower transmit rates is a way to promote better roaming, BUT not all clients respond well, or even respond to it.
The practice is that the basic rates are a subset of the transmit rates. If you only want to allow speeds 9 and up, you would select only the transmit rates of 9 and up, and the basic rates of 9 and 11. If a legacy client expects the rates of 1 and 2 it will not connect.
Local Probe Threshold
Local probe Threshold prevents a client from connecting to an AP with a too low a signal - helps more with initial connection than roaming.
The local probe threshold parameter is not supposed to force clients to roam as soon as they pass near an access point with a good signal, but rather to NOT hold on to an access point with a weak signal (avoiding sticky clients).
PMK Caching
Defined by 802.11i and is a technique available for authentication between a single AP and a station. If a station has authenticated to an AP, roams away from that AP, and comes back, it does not need to perform a full authentication exchange. Only the 802.11i 4-way handshake is performed to establish transient encryption keys.
Opportunistic Key Caching (OKC)
Is a similar technique to PMK, but not defined by 802.11i, for authentication between multiple APs in a network where those APs are under common administrative control. An Aruba deployment with multiple APs under the control of a single controller is one such example. Using OKC, a station roaming to any AP in the network will not have to complete a full authentication exchange, but will instead just perform the 4-way handshake to establish transient encryption keys
Implementation and Configuration
802.11k
802.11k is configured in your VAP profile. Tick the option to “Advertise 802.11k”. There after set the Handover Trigger Feature Settings.
Tick the “Enable Handover Trigger feature” and then set RSSI threshold by specifying the -dBm level at what the hand over trigger should be sent to the client
802.11r
802.11r is configured under SSID of your VAP profile. Tick the option to “Advertise 802.11r”
HandofF Assist
Station Handoff Assist is enabled in RF Optimization under the RF Management section of AP configuration.
Tick the “Station Handoff Assist” option to enable it, next set the Low RSSI Threshold – the threshold determines above what level no deauth gets sent
Lower Transmit Rates
Transmit rates can be adjusted in the Advanced tab of SSID under your VAP profile.
Remember that the basic rates are a subset of the transmit rates. If you only want to allow speeds 9 and up, you would select only the transmit rates of 9 and up, and the basic rates of 9 and 11
Local Probe threshold
Local Probe threshold can be adjusted in the advanced tab of SSID under your VAP profile.
Depending on the density of your APs consider values between 20 and 40 -- 40 being aggressive in an AP dense area.
Deny Broadcast Probes
Denying Broadcast Probes can cause problems with Roaming especially if the SSID is hidden – leave option disabled.

Hi, thank you for the helpful guidance. I have a basic question, if the device roam from one AP to another AP with the same SSID. Is there a need of re-authentication given a) the network uses EAP based authentication; b) the network uses MAC address authentication. If there is no need of EAP re-authentication, how the 802.11 keys are moved to the new AP. Thank you very much if you could help me clarify my thought.

Roaming between RV220W wireless router and WAP121 Access Point

Hello, I have recently purchased a RV220W wireless router and a WAP121 access point and i would like to allow my users to "roam" between the two networks as needed (so when the user is closer to whichever one they connect to that one since it has a better signal). For the most part I only have experience in cisco IOS and in actual routers not the wireless stuff so my knowledge has not exactly transfered over well.

William,
WDS will not work between the RV220W and WAP121 due to incompatible chipsets. The RV220W can be repeated using WDS by another RV220W or RV180W only. You will need to plug the WAP121 into the RV220W or try WorkGroup Bridge mode to repeat the signal.
Regarding roaming, the router or AP are not aware of each other and do not have the capability to disconnect a client and help them connect to the AP with the stronger signal. The client will switch to the stronger AP only when the original signal is lost.
The Aironet (enterprise) devices have the ability to utilize a wireless LAN controller which can help keep devices connected to the stronger signal and allow truly seamless roaming between APs.
- Marty

Roaming between E3000 wireless router and WAP300N

Hi all
The Linksys router I’ve got in my office room at home is providing poor coverage in my living room. Thus I’ve purchased a WAP300N and connected it by wire to the build-in 4 port switch of my Router (E3000). The set-up is providing a significant improvement in the living room, but… it seems as if the two wireless access points are “competing” over the “clients”.
When I move from the office room into the living room, my wireless equipment seems to be stuck on the connection to the wireless router in the office room – even though the signal from the WAP300N in the living room is much stronger.
The situation is exactly the same, when I move from the living room to the office room – the wireless equipment is stock on the weak signal from the living room.
I have to turn off and on the radio on my wireless equipment to get them to connect to the strongest signal.
Is there a way to make the “roaming” between wireless access points more smooth?
Kind regards
vonRasmussen

vonRasmussen :
Change the channel on the WAP or your router are on.
Not the 802.11?, but the transmission channels, which are probably transmitting on the same channel. I find the best results are at lease 2 numbers apart. if on is transmitting on channel 1 the next closest will be on 3. With multiple WAPs in a large area you would have to play Sudoko to make sure every one is 2 channels apart.
to quote Lisa Phifer:
Multiple access point configuration: Distinguish transmission signals;
Why should you access points use different channels? In a typical micro-cell Wlan, adjacent APs should always use non-overlapping channels, ( e.g., 1 ,6 ,11), to avoid co-channel interference.
Good Luck.
Dave

Inter-Controller and Inter-Subnet Roaming between WLC 4402 and 5508?

Hi!
Will it support roaming between WLC 5508 ver. 7.0 and WLC 4402 ver. 4.2?

Here is the matrix for support of IRCM, but the answer is yes.
http://www.cisco.com/en/US/docs/wireless/controller/5500/tech_notes/Wireless_Software_Compatibility_Matrix.html#wp116668
Sent from Cisco Technical Support iPhone App

The difference between WLSE and WLSM

Dear All,
In my understandings
WLSM can support layer 3 roaming
1. For rogue AP detection, is WLSE or WLSM be the choice?
2. Between AP and WLSM, it is FSRT, is it encryped? by Cisco proprietary?
Thanks a lot in advance.
Regards,
mak

WLSE is a Management/Monitoring application that uses the radio information from WLSM to show Radio data including Rogue AP Detection. WLSE itself/alone cannot do Rogue AP Detection

IPad's Roaming Between Access Points

A company with 460 Cisco Access Points is using iPad Mini's to control lighting and other things, the iPad Mini's are roaming between access points VERY SLOW, they are dropping 45-50 packets between roams. iPad 2's and iPhone's are roaming just fine, if they drop any packets it's a max of 5.
Is there any differance in the NIC's that are in iPad 2's and iPad Mini's? Or is there a setting for fast roaming?

Hi,
It seems that these APs are not aware of each other, I would suggest you look into a controller based solution, that means you need some sort of controller base AP system to get this seamless roaming feature, I also suggest you check whether there's compatibility
issue for the device with product vender.
Yolanda Zhu
TechNet Community Support

EAP-FAST - WLC 7.4 Roaming between different FlexConnect (FC) Group

Dear all,
WLC 7.4 Release Notes states that with both Local/Central Switching:
- Mobility in the same Flex Group with CCKM is Fast Roaming if WLAN is mapped to same VLAN
- Mobility between different Flex Group with CCKM cause a Full Auth
Using CCK with EAP-Fast during a call with Cisco IP Phone 7921G and 7925G we notice a gap when roaming from an AP belonging to FC GroupA to an AP belonging to FC Group B...so the only solution to do Fast Romaing is to use PMK(OKC) since CCKM will do a complete authentication each time moving from FC Group.
Where do we enable OKC for a specific WLAN? In the FlexConnect Group Menu?
Thanks a lot for sharing answer and suggestion
BR
O.G.

Hello Scott,
thanks for the explanation...
So if in 7.4.121 OKC is enabled by default I don't understand why I'm having a full Authentication when roaming from AP of FC Group A to AP to FC Group B instead of Fast-Roaming...and this is happening in all FC Group configured (6x).
Should I disable CCKM flag in the WLAN definition?!?!
FC Groups and Mobility
http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/112042-technote-product-00.html#anc13
O.G

Roaming between 802.11a & g

Hi forum,
Can wireless clients roam seamlessly between 802.11a and 802.11g APs? they will be using the same SSID.
besides, if I select different channel for bluetooth clients, can it coexist with 802.11g?
Thank you,
paul

It is possible for a wireless client to roam between 802.11a and 802.11g.
Try this link:
http://www.cisco.com/warp/public/cc/pd/witc/ao1200ap/prodlit/index.shtml

Roaming between APs with Radius

Hi everyone,
Someone told me about this issue this week. I heard that roaming between APs was not possible without reauthenticating when RADIUS authentication is used. This means that you need to reauthenticate yourself to the RADIUS server each time you switch from an AP to another, so you have to re-enter your credentials many times.
Do someone have heard about the same thing? Is there some technical articles discussing about this issue?
Thx, Jim

With LEAP authentication, your credentials are cached (encrypted) from when you login to windows.
Wen you LEAP authenticate those cached credentials are used, and when you roam they are used to reauthenticate.
The user is not prompted for username-password when roaming with LEAP.
The best security white-paper is this one;
http://www.cisco.com/warp/customer/cc/pd/witc/ao1200ap/prodlit/wswpf_wp.htm

Roaming between radios

Hello to all!!
I`d like to know if roaming it's possible between radios. I mean: I've some ap with radio a and b/g/n and other only with b/g/n, client roaming between them is possible??
thanks in advance!!

to add to Leo, so long as you have overlap and the SSID are configured the same, you should roam just fine between AP.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Roaming between Flexconnect groups for scaling

I have a customer that needs flexconnect at each of his 10 locations to access local servers and printers. The customer has a pair of 5508 WLCs running 7.6.130.0.
While the customer currently has 25 and under AP count per site, they are considering an expansion to 50 - 60 per site.
We are considering the mobility agent on 3650/3850/4500 switches, but the multi-hop restriction will drive the cost too high.
What is the downside for defining multiple flexconnect groups per site?
The customer is also considering Unified Communications. For example, would the voice RTP stream on a wireless IP phone roaming between APs on different flexconnect groups appear to be seamless?

If you plan on utilizing any real-time applications such as voice, you would not want these devices to be roaming between FlexConnect Groups. There will be a full re-authentication of the client; with the exception of OKC capable machines, which "may" roam more cleanly. This means some standard data clients may perform a fast roam, or at least not notice much of a hiccup even with a full re-auth.
In either scenario, you would want to make sure this is NOT a L3 mobility roam (ie. FlexConnect WLAN/VLAN mapping to different networks). This will cause major problems for all your clients as they will most likely end up talking on the new VLAN with their old IP address.
Mobility / Roaming Scenarios
WLAN Configuration
Local Switching
Central Switching
CCKM
PMK (OKC)
Others
CCKM
PMK (OKC)
Others
Mobility Between Same Flex Group
Fast Roam(1)
Fast Roam(1)
Full Auth(1)
Fast Roam
Fast Roam
Full Auth
Mobility Between Different Flex Group
Full Auth(1)
Fast Roam(1)
Full Auth(1)
Full Auth
Fast Roam
Full Auth
Inter Controller Mobility
N/A
N/A
N/A
Full Auth
Fast Roam
Full Auth
(1) Provided WLAN is mapped to the same VLAN (same subnet).

Roaming between 1231A and 1142N

Similar Messages

Maybe you are looking for