I have two access points (APs) setup with the same SSID name and using the same freeRADIUS server for station authentication. I have read Cisco documentation about fast roaming. So I have this doubt in my mind. Is PMKID same for a specific client when it is roaming from AP1 to AP2 using WPA2-Enterprise?


The answer is no.

PMKID is an unique value as a result of hash function combines the PMK with Access Point's MAC address and Client's MAC address.

  • Isn't it the combination of authenticator's address (aa) and supplicant's address (spa) as per hostapd documentation? And here authenticator is RADIUS server. In this case, PMKID supposed to be the same right? – Nayab Basha Sayed Sep 24 '17 at 6:37
  • @NayabBashaSayed These terms mean: Authenticator = AP, Supplicant = Client and Authentication Server = Radius. You can check again the docs from hostapd (w1.fi/hostapd) and from CWNP (cwnp.com/uploads/802-11i_key_management.pdf) – Hung Tran Sep 24 '17 at 8:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.