Cisco Centralized Key Management (CCKM) authenticated client devices can roam from one access point to another without any perceptible delay during reassociation. An access point on your network acts as a wireless domain service (WDS) and creates a cache of security credentials for CCKM-enabled client devices on the subnet. The WDS cache of credentials dramatically reduces the time required for reassociation when a CCKM-enabled client device roams to a new access point. When a client device roams, the WDS forwards the client's security credentials to the new access point, and the reassociation process is reduced to a two-packet exchange between the roaming client and the new access point.

AP

WDS MAC Address

Contains the MAC address of the wireless domain service that this access point (the one you browsed to) is configured to use.

WDS IP Address

Contains the IP address of the wireless domain service that this access point (the one you browsed to) is configured to use.

IN Authenticator

The server list (for example, wlan 1-list) used to authenticate infrastructure devices such as access points on your wireless LAN.

MN Authenticator

The server list (for example, lep1-list) used to authenticate client devices on your wireless LAN.

State

The WDS interface state (administratively standalone, active, backup, or candidate).

• standalone - configured as the WDS, but with no other devices participating
• active - the WDS is actively performing as the WDS on the subnet
• backup - the WDS is acting as a backup to the main WDS
• candidate - the device is configured as a WDS candidate

Wireless Domain Services

If this access point will reply on the WDS for fast secured roaming of CCKM-capable clients, or if you want this access point to forward statistics to the WDS for collection by your WLSE, you should enable the access point to use the WDS.

If you want the access point to serve as the WDS or as an WDS candidate, you should use the WDS settings page to configure the access point as a WDS. For your WDS, you should choose an access point that:

• can be physically secured to prevent theft.
• serves few client devices, because the access point's WDS duties can degrade performance for associated client devices.

MAC Address

The Media Access Control (MAC) address is a unique identifier assigned to the network interface by the manufacturer.

IP Address

IP address of this access point as it is configured to serve as a WDS or as a WDS candidate.

Priority

If you configure access points as backup WDSs, assign the highest priority to the access point that you want to act as the main WDS and lower priorities to backup WDSs. If your main WDS fails, the backup with the highest priority becomes the active WDS.

State

The WDS state (administratively standalone, active, backup, or candidate).

• admin standalone - configured as the WDS but with no other devices participating
• active - the WDS is actively performing as the WDS on the subnet
• backup - the WDS is acting as a backup to the main WDS
• candidate - the device is configured as a WDS candidate