I have two access points (APs) setup with the same SSID name and using the same freeRADIUS server for station authentication. I have read Cisco documentation about fast roaming. So I have this doubt in my mind. Is PMKID same for a specific client when it is roaming from AP1 to AP2 using WPA2-Enterprise?

1 Answer 1


The answer is no.

PMKID is an unique value as a result of hash function combines the PMK with Access Point's MAC address and Client's MAC address.

  • Isn't it the combination of authenticator's address (aa) and supplicant's address (spa) as per hostapd documentation? And here authenticator is RADIUS server. In this case, PMKID supposed to be the same right?
    – NayabSD
    Commented Sep 24, 2017 at 6:37
  • @NayabBashaSayed These terms mean: Authenticator = AP, Supplicant = Client and Authentication Server = Radius. You can check again the docs from hostapd (w1.fi/hostapd) and from CWNP (cwnp.com/uploads/802-11i_key_management.pdf)
    – Hung Tran
    Commented Sep 24, 2017 at 8:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.