I have two access points (APs) setup with the same SSID name and using the same freeRADIUS server for station authentication. I have read Cisco documentation about fast roaming. So I have this doubt in my mind. Is PMKID same for a specific client when it is roaming from AP1 to AP2 using WPA2-Enterprise?
The answer is no.
PMKID is an unique value as a result of hash function combines the PMK with Access Point's MAC address and Client's MAC address.
-
Isn't it the combination of
authenticator's address (aa)andsupplicant's address (spa)as per hostapd documentation? And here authenticator is RADIUS server. In this case, PMKID supposed to be the same right? – Nayab Basha Sayed Sep 24 '17 at 6:37 -
@NayabBashaSayed These terms mean: Authenticator = AP, Supplicant = Client and Authentication Server = Radius. You can check again the docs from hostapd (w1.fi/hostapd) and from CWNP (cwnp.com/uploads/802-11i_key_management.pdf) – Hung Tran Sep 24 '17 at 8:10
