Using The Gui To View Mfp Settings - Cisco 2100 Series Configuration Manual

Chapter 5 Configuring Security Solutions
Figure 5-38
d.
e.
f.
Follow these steps if you want to disable or re-enable infrastructure MFP validation for a particular
Step 5
access point after infrastructure MFP has been enabled globally for the controller:
a.
b.
c.
d.
e.
Click Save Configuration to save your settings.
Step 6

Using the GUI to View MFP Settings

To see the controller's current global MFP settings, click Security > Wireless Protection Policies >
Management Frame Protection. The Management Frame Protection Settings page appears (see
Figure
OL-17037-01
WLANs > Edit (Advanced) Page
Uncheck the Infrastructure MFP Protection check box to disable MFP for this WLAN or check
this check box to enable infrastructure MFP for this WLAN. The default value is enabled. If global
MFP is disabled, a note appears in parentheses to the right of the check box.
Choose Disabled, Optional, or Required from the MFP Client Protection drop-down box. The
default value is Optional. If you choose Required, clients are allowed to associate only if MFP is
negotiated (that is, if WPA2 is configured on the controller and the client supports CCXv5 MFP and
is also configured for WPA2).
Click Apply to commit your changes.
Click Wireless > Access Points > All APs to open the All APs page.
Click the name of the desired access point.
Click the Advanced tab. The All APs > Details for (Advanced) page appears.
Uncheck the MFP Frame Validation check box to disable MFP for this access point or check this
check box to enable MFP for this access point. The default value is enabled. If global MFP is
disabled, a note appears in parentheses to the right of the check box.
Click Apply to commit your changes.
5-39).
Configuring Management Frame Protection
Cisco Wireless LAN Controller Configuration Guide
5-69