Extreme Networks Summit WM User Manual page 200

WM Access Domain Services configuration
Opportunistic Keying
Opportunistic Keying or opportunistic key caching (OKC) enables the client devices to roam fast and
securely from one Altitude AP to another in 802.1X authentication setup.
The client devices that run applications such as video streaming and VoIP require rapid reassociation
during roaming. OKC helps such client devices by enabling them to rapidly reassociate with the
Altitude APs. This avoids delays and gaps in transmission and thus helps in secure fast roaming (SFR).
NOTE
The client devices should support OKC to use the OKC feature in the Summit WLAN.
Pre-authentication
Pre-authentication enables a client device to authenticate simultaneously with multiple Altitude APs in
802.1X authentication setup. When the client device roams from one Altitude AP to another, it does not
have to perform the complete 802.1X authentication to reassociate with the new Altitude AP as it is
already pre-authenticated with it. This reduces the reassociation time and thus helps in seamless
roaming.
NOTE
The client devices should support pre-authentication to use the pre-authentication feature in Summit WLAN.
Opportunistic Keying & Pre-auth
Opportunistic Keying and Pre-auth options is meant for the device clients that support both the
authentication processes. For example, the Microsoft-operated device clients support opportunistic
keying by default, but they can be configured to support pre-authentication too.
To set up Wi-Fi Protected Access privacy (WPA) for an AAA WM-AD:
1 From the main menu, click WM Access Domain Configuration. The WM Access Domain
Configuration page is displayed.
2 In the left pane WM Access Domains list, click the AAA WM-AD you want to configure privacy by
WPA-PSK for a Captive Portal. The Topology tab is displayed.
3 Click the Privacy tab.
4 Select WPA.
200
Summit WM User Guide, Software Version 5.3