Filter
Top Products
12-29
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-29225-01
Chapter 12 Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services
Configuring Management Frame Protection
This CLI command is used to enable 802.11w on the access point:
ap(config-ssid)# 11w-pmf client required/optional
This CLI command is used to configure the association time out and saquery retry time interval:
ap(config-ssid)# 11w-pmf association-comeback 1000-20000ms
ap(config-ssid)# 11w-pmf saquery-retry 100-500ms
These commands are optional. Default time intervals are configured if these commands are not used. To
configuring 802.11w on an access point, mfp client should be disable
Note WPAv2/AES is mandatory for 802.11w.
These commands are used to configure 802.11w on WGB devices:
–
ap(config-ssid)# 11w-pmf client required/optional
Note This command should be same as AP configuration.
–
ap(config-ssid)# no ids mfp client
Note CCKM, 11r fast roaming, DLS, Radio Measurement and Protected Dual of Public Action action
frames are not supported.
Use these commands to enable debugging:
–
ap(config-ssid)# debug dot11 mgmt 11w
–
ap(config-ssid)# debug dot11 mgmt interface
–
ap(config-ssid)# debug dot11 wpa-cckm-km-dot1x