Configuring Remote Key Holder List Profiles - Cisco WAP125 Administrator's Manual

Fast Roaming

Configuring Remote Key Holder List Profiles

To configure Remote R0 Key Holder List profiles:
Step 1 Select Fast Roaming> Remote Key Holder List Profile.
Step 2 Click ✚ to add a new profile or edit to modify an existing profile. The Remote Key Holder List Profiles page is
displayed.
Step 3
Specify a name for the Remote Key Holder List Profile.
Step 4 Configure the following parameters. A maximum of 10 entries of R0 Key holders are allowed to be configured per VAP.
• MAC Address — Enter the destination's VAP MAC address which is the R0 key holder. The RRB PULL message
is sent to this AP MAC address to fetch the PMKR1 key. This MAC address must be unique across all the VAPs.
• NAS ID — NAS ID configured on the destination FBT enabled VAP.
• RRB Key — Key used to encrypt RRM protocol messages.
Step 5 Repeat steps 1 through 4 and then configure the R1 key holder in the Remote R1 Key Holder Data List. A maximum of
10 entries of R1 key holders are allowed to be configured per VAP. The key holder data is configured per VAP.
• MAC Address — Destination's VAP MAC address which is the R1 Key holder. The PMKR1 is sent in RRB
PUSH message to this AP MAC address. This MAC Address must be unique across all the VAPs.
• R1 Key Holder — The R1 key Holder ID that names the holder of PMK-R1 in the authenticator.
• RRB Key — Key used to encrypt RRM protocol messages.
After you configure the Remote Key Holder Data List settings, you can click Restore to restore the old settings,
Note
or click Save to save the settings. Click Cancel to go back before Fast Roaming page.
Click Save after copying or deleting a profile.
Clicking Export for selected profile/s will export only those profiles. Clicking Export with no profiles
Caution
selected will Export all the profiles.
Cisco WAP125 Wireless-AC/N Dual Band Desktop Access Point with PoE
Configuring Remote Key Holder List Profiles
63