Cisco 7925G - Cisco Centralized Key Management (CCKM); EAP and User Database Compatibility

Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Deployment Guide
26
Cisco Centralized Key Management (CCKM)
CCKM is the recommended deployment model for all environment types where frequent roaming occurs.
CCKM enables fast secure roaming and limits the off-network time to keep audio gaps at a minimum when on call.
802.1x authentication is required in order to utilize CCKM.
802.1x without CCKM can introduce delay during roaming due to its requirement for full re-authentication. WPA and WPA2
introduce additional transient keys and can lengthen roaming time.
CCKM centralizes the key management and reduces the number of key exchanges.
When CCKM is utilized, roaming times can be reduced from 400-500 ms to less than 100 ms, where that transition time from
one access point to another will not be audible to the user.
As of the 1.3(4) release, the Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G support CCKM with WPA2 (AES
or TKIP), WPA (TKIP or AES) and 802.1x (WEP) authentication.
EAP Type
Key Management
Encryption
EAP-FAST
802.1x, WPA, WPA2
AES, TKIP, WEP (40/64 or 104/128 bit)
EAP-TLS
802.1x, WPA, WPA2
AES, TKIP, WEP (40/64 or 104/128 bit)
PEAP
802.1x, WPA, WPA2
AES, TKIP, WEP (40/64 or 104/128 bit)
LEAP
802.1x, WPA, WPA2
AES, TKIP, WEP (40/64 or 104/128 bit)
AKM
802.1x, WPA, WPA2
AES, TKIP, WEP (40/64 or 104/128 bit)
CCKM was not supported with WPA2 in release 1.3(3) or earlier.
WPA Version
Cipher
Supported
WPA
TKIP
Yes
AES
1.3(4) and later
WPA2
TKIP
1.3(4) and later
AES
1.3(4) and later
EAP and User Database Compatibility
The following chart displays the EAP and database configurations supported by the Cisco Unified Wireless IP Phone 7925G,
7925G-EX, and 7926G.
Database Type
LEAP
EAP-FAST
(Phase Zero)
EAP-TLS
PEAP
(MS-CHAPv2)
Cisco ACS
Yes
Yes
Yes
Yes