To change the TKIP countermeasure holdoff time on the Cisco Wireless LAN Controller, telnet or SSH to the controller and
enter the following command specifying the number of seconds and WLAN ID.
(Cisco Controller) >config wlan security tkip hold-down <nseconds> <wlan-id>
To confirm the change, enter show wlan <WLAN id>, where the following will be displayed.
Tkip MIC Countermeasure Hold-down Timer....... 60
Rogue Policies
It is recommended to use the default value (Disable) for Rogue Location Discovery Protocol.
Cisco Meraki Access Points
When configuring Cisco Meraki access points, use the following guidelines:
•
Enable 802.11r for WPA2-Enterprise or Pre-shared key
•
Set Splash page to None
•
Enable Bridge mode
•
Enable VLAN tagging
Cisco IP Phone 8861 and 8865 Wireless LAN Deployment Guide
73