User's Manual

hwc_vnsconfiguration.fm
Virtual Network configuration
Configuring privacy for a VNS
A31003-W1050-U100-2-7619,
March 2008
HiPath Wireless Controller, Access Points and Convergence Software V5 R1 , C20/C2400 User Guide 215
6.11.2.3 Key Management Options
Wi-Fi Protected Access (WPA v1 and WPA v2) Privacy offers you the following
key management options:
• None
• Opportunistic Keying
• Pre-authentication
• Opportunistic Keying & Pre-auth
The following sections explain the key management options.
None
The wireless client device performs a complete 802.1X authentication each time
it associates or tries to connect to a Wireless AP.
Opportunistic Keying
Opportunistic Keying or opportunistic key caching (OKC) enables the client
devices to roam fast and securely from one Wireless AP to another in 802.1X
authentication setup.
The client devices that run applications such as video streaming and VoIP require
rapid reassociation during roaming. OKC helps such client devices by enabling
them to rapidly reassociate with the Wireless APs. This avoids delays and gaps
in transmission and thus helps in secure fast roaming (SFR).
Note: The client devices should support OKC to use the OKC feature in the
HiPath WLAN.
Pre-authentication
Pre-authentication enables a client device to authenticate simultaneously with
multiple Wireless APs in 802.1X authentication setup. When the client device
roams from one Wireless AP to another, it does not have to perform the complete
802.1X authentication to reassociate with the new Wireless AP as it is already
pre-authenticated with it. This reduces the reassociation time and thus helps in
seamless roaming.
Note: The client devices should support pre-authentication to use the pre-
authentication feature in HiPath WLAN.