Configuring Auto-Immune; Configuring The Wlan Controller Eap-Request And Eapol-Key Timeouts - Cisco 9971 Deployment Manual

Below are the commands to change the QBSS max threshold for each platform type.
Cisco Unified Wireless LAN Controller = "config advanced 802.11b 7920VSIEConfig call-admission-limit <value>"
Cisco Autonomous Access Point = "dot11 phone cac-thresh <value>"

Configuring Auto-Immune

It is recommended to disable the Auto-Immune feature on the Cisco Unified Wireless LAN Controller.
The Auto-Immune feature was introduced in the 4.2.176.0 release, which was enabled by default and non-configurable.
As of the 4.2.207.0, 5.2.193.0 and 6.0.182.0 releases this feature is disabled by default but can be enabled optionally.
To view the Auto-Immune configuration on the Cisco Unified Wireless LAN Controller, telnet or SSH to the controller and
enter the following command.
(Cisco Controller) >show wps summary
Auto-Immune
Auto-Immune....................................
Client Exclusion Policy
Excessive 802.11-association failures.......... Enabled
Excessive 802.11-authentication failures....... Enabled
Excessive 802.1x-authentication................ Enabled
IP-theft....................................... Enabled
Excessive Web authentication failure........... Enabled
Signature Policy
Signature Processing........................... Enabled
To disable the Auto-Immune feature on the Cisco Unified Wireless LAN Controller, telnet or SSH to the controller and enter
the following command.
(Cisco Controller) >config wps auto-immune disable

Configuring the WLAN Controller EAP-Request and EAPOL-Key Timeouts

If using EAP, the EAP-Request Timeout on the Cisco Unified Wireless LAN Controller should be set to at least 20 seconds.
In later versions of Cisco Unified Wireless LAN Controller software, the default EAP-Request Timeout was changed from 2 to
30 seconds.
The default timeout on the Cisco ACS server is 20 seconds.
Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide
Disabled
57