Enabling 802.11r

802.11r on Cisco access points improves roaming for Cisco access points in the Vocera Wireless environment.

To enable 802.11r for Cisco CAPWAP access points, perform the following steps:

Select WLANs>Security>Layer 2 on the Cisco WLC Web User Interface.
The following screen is displayed.
Enter the following controls, for Layer 2 tab:
- Layer 2 Security
  - Select WPA+WPA2
- Fast Transition
  - Fast Transition —Enable
  - Reassociation Timeout—100 seconds.
- Protection Management Frame
  - PMF—Disabled.
    Note: If you are enabling 802.11w on B3000n, this value should be set to Optional or Required.
- Authentication Key Management
  - Enable FT 802.1x if you are using WPA-PEAP, EAP-FAST or EAP-TLS,
  - Select FT PSK if you using a pass-phrase key.
Select WLANs>Security>AAA Servers.
Select Enabled under Authentication Server and Enabled under Accounting Servers to be use with this WLAN profile.
Click Apply.

To enable CCKM for autonomous APs, refer to Cisco IOS Configuration Guide .