Filter
Top Products
170 Configuring and managing Mobility Domain roaming
NN47250-500 (320657-F Version 02.01)
Displaying the Mobility Domain configuration
To view the configuration of the Mobility Domain, use the show mobility-domain config command on either the seed
or a nonseed member.
• To view Mobility Domain configuration on the seed:
WSS# show mobility-domain config
This WSS is the seed for domain Santa Clara.
192.168.12.7 is a member
192.168.15.5 is a member
• To view Mobility Domain configuration on a member:
WSS# show mobility-domain config
This WSS is a member, with seed 192.168.14.6
Clearing a Mobility Domain from a WSS
You can clear all Mobility Domain configuration from a WSS, regardless of whether the WSS is a seed or a member of
a Mobility Domain.
You might want to clear the Mobility Domain to change a WSS from one Mobility Domain to another, or to remove a
WSS from the Mobility Domain. To clear the Mobility Domain, type the following command:
WSS# clear mobility-domain
success: change accepted
This command has no effect if the WSS is not configured as part of a Mobility Domain.
Clearing a Mobility Domain member from a seed
You can remove individual members from the Mobility Domain on the seed WSS. To remove a specific member of the
Mobility Domain, type the following command:
clear mobility-domain member ip-addr
This command has no effect if the WSS member is not configured as part of a Mobility Domain or the current WSS is
not the seed.
Configuring secure WSS to WSS communications
You can enhance security on your network by enabling Secure WSS to WSS communications. Secure WSS to WSS
communications encrypts management traffic exchanged by WSSs in a Mobility Domain.
When Secure WSS to WSS communications is enabled, management traffic among WSSs in the Mobility Domain is
encrypted using AES. The keying material is dynamically generated for each session and passed among switches using
public keys that you configure. The public keys used on the seed and member switches for the Mobility Domain security
mode are generated by the crypto generate key domain 128 command.