

Using OKC, a station roaming to any AP in the network will not have to complete a full authentication exchange, but will instead just perform the 4-way handshake to establish transient encryption keys. OKC is a technique available for authentication between multiple APs in a network where those APs are under common administrative control. 802.1X provides an authentication framework that allows a user to be authenticated by a central authority. This allows faster roaming of clients between the Instant APs in a cluster, without requiring a complete 802.1X 802.1X is an IEEE standard for port-based network access control designed to enhance 802.11 WLAN security. is used when a client roams to a new Instant AP.

PMK is a shared secret key that is generated after PSK or 802.1X authentication. authentication completed by the client in the network. per client, which is derived from the last 802.1X 802.1X is an IEEE standard for port-based network access control designed to enhance 802.11 WLAN security. based roaming, the Instant AP stores one PMK Pairwise Master Key. Instant now supports OKC Opportunistic Key Caching. Instant supports the following features that enable fast roaming of clients: You are here: Home > Aruba Instant User Guide > Table of Contents > Configuring Support for 802.11r and OKC Fast Roaming for Wireless Clients
