Cisco Meraki Access Points - Cisco 8821 Manual

Excessive 802.11-association failures.......... Enabled
Excessive 802.11-authentication failures....... Enabled
Excessive 802.1x-authentication................ Enabled
IP-theft....................................... Enabled
Excessive Web authentication failure........... Enabled
Signature Policy
Signature Processing........................... Enabled
To disable the Auto-Immune feature on the Cisco Wireless LAN Controller, telnet or SSH to the controller and enter the
following command.
(Cisco Controller) >config wps auto-immune disable
CCKM Timestamp Tolerance
The default CCKM timestamp tolerance is set to 1000 ms.
It is recommended to adjust the CCKM timestamp tolerance to 5000 ms to optimize the Cisco Wireless IP Phone 8821 and
8821-EX roaming experience.
(Cisco Controller) >config wlan security wpa akm cckm timestamp-tolerance ?
<tolerance> Allow CCKM IE time-stamp tolerance <1000 to 5000> milliseconds; Default tolerance 1000 msecs
Use the following command to configure the CCKM timestamp tolerance per Cisco recommendations.
(Cisco Controller) >config wlan security wpa akm cckm timestamp-tolerance 5000 <WLAN id >
To confirm the change, enter show wlan <WLAN id>, where the following will be displayed.
CCKM tsf Tolerance...............................

Cisco Meraki Access Points

When configuring Cisco Meraki access points, use the following guidelines:
•
Enable 802.11r for WPA2-Enterprise or Pre-shared key
•
Set Splash page to None
•
Enable Bridge mode
•
Enable VLAN tagging
•
Set Band selection to 5 GHz band only
Cisco Wireless IP Phone 8821 and 8821-EX Wireless LAN Deployment Guide
5000
74