Cisco Centralized Key Management (Cckm) - Cisco 7925G Series Deployment Manual

Table of Contents

PEAP (MS-CHAPv2) requires that a user account be created on the authentication server.

The authentication server can be validated via importing a certificate into the Cisco Unified Wireless IP Phone 7925G Series.

See the

"Installing

Certificates" section for more information.

Cisco Centralized Key Management (CCKM)

When using 802.1x type authentication, it is recommended to implement CCKM to enable fast roaming. 802.1x can introduce

delay during roaming due to its requirement for full re-authentication. CCKM centralizes the key management and reduces the

number of key exchanges. WPA and WPA2 introduce additional transient keys and can lengthen roaming time.

When CCKM is utilized, roaming times can be reduced from 400-500 ms to less than 100 ms, where that transition time from

one access point to another will not be audible to the user.

As of the 1.3(4) release, the Cisco Unified Wireless IP Phone 7925G Series supports CCKM with WPA2 (AES or TKIP), WPA

(TKIP or AES) and 802.1x (WEP) authentication.

Authentication

EAP-FAST

EAP-TLS

Cisco Unified Wireless IP Phone 7925G Series Deployment Guide

Key Management

802.1x, WPA, WPA2

Encryption

AES, TKIP, WEP (40 or 128 bit)

Table of Contents