Using The Cli To Configure Mfp - Cisco 2100 Series Configuration Manual

Configuring Management Frame Protection
Figure 5-39
On this page, you can see the following MFP settings:
•
•
•
•
•

Using the CLI to Configure MFP

Use these commands to configure MFP using the controller CLI.
1.
2.
3.
Cisco Wireless LAN Controller Configuration Guide
5-70
Management Frame Protection Settings Page
The Management Frame Protection field shows if infrastructure MFP is enabled globally for the
controller.
The Controller Time Source Valid field indicates whether the controller time is set locally (by
manually entering the time) or through an external source (such as NTP server). If the time is set by
an external source, the value of this field is "True." If the time is set locally, the value is "False." The
time source is used for validating the timestamp on management frames between access points of
different controllers within a mobility group.
The Infrastructure Protection field shows if infrastructure MFP is enabled for individual WLANs.
The Client Protection field shows if client MFP is enabled for individual WLANs and whether it is
optional or required.
The Infrastructure Validation field shows if infrastructure MFP is enabled for individual access
points.
To enable or disable infrastructure MFP globally for the controller, enter this command:
config wps mfp infrastructure {enable | disable}
To enable or disable infrastructure MFP signature generation on a WLAN, enter this command:
config wlan mfp infrastructure protection {enable | disable} wlan_id
Signature generation is activated only if infrastructure MFP is globally enabled.
Note
To enable or disable infrastructure MFP validation on an access point, enter this command:
config ap mfp infrastructure validation {enable | disable} Cisco_AP
MFP validation is activated only if infrastructure MFP is globally enabled.
Note
Chapter 5 Configuring Security Solutions
OL-17037-01