Configuring Infrastructure Mfp - Cisco C3201FESMIC-TP= - 3201 Fast EN Switch Mobile Interface Card Expansion Module Software Configuration Manual

Management Frame Protection
•
•

Configuring Infrastructure MFP

To configure infrastructure MFP, follow these step, beginning in privileged EXEC mode:
Command
Step 1
configure terminal
Step 2
dot11 ids mfp generator
Step 3 dot11 ids mfp detector
Step 4 sntp server server IP address
Step 5
end
Step 6
copy running-config
startup-config
To configure the WDS, follow these steps, beginning in privileged EXEC mode WDS:
Command
Step 1 configure terminal
Step 2 dot11 ids mfp distributor
Step 3 end
Step 4 copy running-config
startup-config
clear dot11 ids mfp client statistics
Use this command to clear the Client MFP statistics.
authentication key management wpa version {1 | 2}
Use this command to explicitly specify which WPA version to use for WPA key management for a
particular SSID.
Description
Enters global configuration mode.
Configures the AP as an MFP generator. When enabled, the AP
protects the management frames it transmits by adding a Message
Integrity Check Information Element (MIC IE) to each frame.
Any attempt to copy, alter, or replay the frame will invalidate the
MIC, causing any receiving AP that is configured to detect
(validate) MFP frames to report the discrepancy. The AP must be
a member of a WDS.
Configures the AP as an MFP detector. When enabled, the AP
validates management frames it receives from other APs. If the
AP receives any frame that does not contain a valid, and expected,
MIC IE, it will report the discrepancy to the WDS. The AP must
be a member of a WDS.
Enters the name or IP address of the SNTP server.
Returns to the privileged EXEC mode.
(Optional) Saves your entries in the configuration file.
Description
Enters global configuration mode.
Configures the WDS as an MFP distributor. When enabled, the
WDS manages signature keys that are used to create the MIC IEs,
and the WDS securely transfers them between generators and
detectors.
Returns to the privileged EXEC mode.
(Optional) Saves your entries in the configuration file.
Cisco 3200 Series Wireless MIC Software Configuration Guide
Understanding Management Frame Protection
3