Enterprise roaming captures at city hall show reassociation with PMKID/PMK caching evidence and no full EAP on most AP moves, while a second SSID still runs full 802.1X every roam. What does the first pattern demonstrate?
Select an answer to reveal the explanation.
Short Explanation
Full EAP every hop is like redoing airport security between every gate. PMK caching is the TSA PreCheck stamp—reassociate, skip the long line, keep moving. Seeing that in the capture means roam optimization is actually working.
Full Explanation
With PMK caching/OKC-style mechanisms, clients can reassociate using cached PMK material and complete a 4-way handshake without repeating the full EAP conversation at each AP. Capture evidence of reassociation plus abbreviated security exchange—versus full EAP every roam—confirms roam optimization is active. CWNE analysts validate that pattern when enterprise mobility SLAs matter and contrast it with SSIDs still forcing full authentication.