VAP Forwarding Mode Support for 802.11r
Tunnel Mode Yes
Decrypt-Tunnel Mode Yes
Split-Tunnel Mode No
Bridge Mode Beta quality
Table 102: Supported VAP Forwarding Modes
Important Points to Remember
n Fast BSS Transition is operational only if the wireless client has support for 802.11r standard. If the client
does not have support for 802.11r standard, it falls back to normal WPA2 authentication method.
Configuring Fast BSS Transition
You can enable and configure Fast BSS Transition on a per Virtual AP basis. You must create an 802.11r profile
and associate that with the Virtual AP profile through an SSID profile. You can create and configure an 802.11r
profile using the WebUI or CLI.
Fast BSS transition is operational only with WPA2-Enterprise or WPA2-Personal.
In the WebUI
1. Navigate to the Configuration > Wireless > AP Configuration window. Select either the AP Group or AP
Specific tab.
a. If you selected the AP Group tab, click the AP group name for which you want to configure the 802.11r
profile.
b. If you selected the AP Specific tab, click the AP for which you want to configure the 802.11r profile.
2. In the Profiles list, expand the Wireless LAN menu, then expand the Virtual AP menu.
3. Select the Virtual AP profile for which you want to configure the 802.11r settings and expand SSID Profile.
4. Select the SSID profile on which you want to configure the 802.11r settings and select 802.11R Profile.
a. To edit an existing 802.11r profile, click the 802.11R Profile drop-down list in the Profile Details
window pane and select the 802.11r profile you want to edit.
or
b. To create a new 802.11r Profile, click the 802.11R Profile drop-down list and select New. Enter a new
802.11r profile name in the field to the right of the drop-down list.
You cannot use spaces in profile names.
5. Configure the following 802.11r radio settings.
a. Select the Advertise 802.11r Capability option to allow Virtual APs using this profile to advertise
802.11r capability.
b. Enter the mobility domain ID value (1-65535) in the 802.11r Mobility Domain ID field. The default
value is 1.
c. Enter the R1 Key timeout value in seconds (60-86400) for decrypt-tunnel or bridge mode in the 802.11r
R1 Key Duration field. The default value is 3600.
AOS-W 6.5.3.x | User Guide Virtual APs | 429