Cisco Cisco Aironet 350 Wireless LAN Client Adapter

Some applications that run on a client device may require fast roaming between access points. Voice 
applications, for example, require seamless roaming to prevent delays and gaps in conversation. Support 
for fast secure roaming is now available for LEAP-enabled clients in client adapter firmware version 
5.20.17.

During normal operation, LEAP-enabled clients mutually authenticate with a new access point by 
performing a complete LEAP authentication, including communication with the main RADIUS server. 
However, when you configure your wireless LAN for fast secure roaming, LEAP-enabled clients 
securely roam from one access point to another without the need to reauthenticate with the RADIUS 
server. Using Cisco Centralized Key Management (CCKM), an access point that is configured for 
wireless domain services (WDS) uses a fast rekeying technique that enables client devices to roam from 
one access point to another in under 150 milliseconds (ms). Fast secure roaming ensures that there is no 
perceptible delay in time-sensitive applications such as wireless Voice over IP (VoIP), enterprise 
resource planning (ERP), or Citrix-based solutions.

This feature does not need to be enabled on the client adapter; it is supported automatically in client 
adapter firmware version 5.20.17. However, it must be enabled on the access point.

IOS release 12.2(11)JA or greater is required to enable fast roaming on the access point. Refer to the 
documentation for your access point for instructions on enabling this feature.

If the Microsoft 802.1X supplicant is installed on your computer, you must disable one or two Windows 
parameters in order for this feature to operate correctly. Refer to the 

 section of the 

Cisco Aironet Wireless LAN Client Adapters Installation and Configuration Guide for Windows (version 
OL-1394-06) for details.

A new EAP-SIM supplicant is available for download from the ftpeng FTP server. This new supplicant 
is an upgrade to the one included in the Install Wizard file. It provides new features, supports more recent 
versions of the EAP-SIM draft standard, and can be used with standard GSM-SIM cards as well as 
Gemplus SIM+ smartcards.

The new supplicant overwrites any previous EAP-SIM supplicant settings. If you plan to install the Cisco 
Aironet Install Wizard file after the new supplicant is installed, either perform an express installation or 
make sure the EAP-SIM option is not selected on the Custom Installation screen. Otherwise, the 
EAP-SIM supplicant included in the Install Wizard file overwrites the new supplicant’s settings.

You can access the new EAP-SIM supplicant at the following URL: