Specifications

11-8
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-5260-01
Chapter 11 Configuring WDS, Fast Secure Roaming, and Radio Management
Configuring WDS and Fast Secure Roaming
Figure 11-4 shows the required configuration for each device that participates in fast, secure roaming.
Figure 11-4 Configurations on Devices Participating in WDS and CCKM
Configuring Access Points as Potential WDS Access Points
Note For the main WDS candidate, configure an access point that does not serve a large number of client
devices. If client devices associate to the WDS access point when it starts up, the clients might wait up
to 10 minutes to be authenticated.
Note Repeater access points do not support WDS. Do not configure a repeater access point as a WDS
candidate, and do not configure a WDS access point to fall back to repeater mode in case of Ethernet
failure.
Note When WDS is enabled, the WDS access point performs and tracks all LEAP authentications. Therefore,
you must configure EAP security settings on the WDS access point. See Chapter 10, “Configuring
Authentication Types,” for instructions on configuring EAP on the access point.
Note You cannot configure a 350 series access point as a WDS access point. However, you can configure 350
series access points to participate in WDS through the WDS device on your network.
Roaming client device: Authentication serverAccess point: WDS device:
Access points that use
the WDS entered on the
server as client devices
with usernames and
passwords that match
those configured on the
access points
103568
WDS access point
entered as an infra-
structure device
Wired LAN
Security settings to match
access point SSID
Wireless Services
enabled
Username and password
for authentication to the
server
At least one SSID
enabled for CCKM
Configured as a WDS
candidate
If an access point serving
client devices, username
and password for
authentication to the server
WDS