Using The Cli To View Mfp Settings - Cisco SD2008T-NA Configuration Manual

Configuring Management Frame Protection

Using the CLI to View MFP Settings

Use these commands to view MFP settings using the controller CLI.
1.
2.
Cisco Wireless LAN Controller Configuration Guide
5-18
To see a summary of the controller's current wireless protection policies (including MFP), enter this
command:
show wps summary
Information similar to the following appears:
Client Exclusion Policy
Excessive 802.11-association failures.......... Enabled
Excessive 802.11-authentication failures....... Enabled
Excessive 802.1x-authentication................ Enabled
Network access control failure................. Enabled
IP-theft....................................... Enabled
Excessive Web authentication failure........... Enabled
Trusted AP Policy
Management Frame Protection.................... Enabled
Mis-configured AP Action....................... Alarm Only
Enforced encryption policy................... none
Enforced preamble policy..................... none
Enforced radio type policy................... none
Validate SSID................................ Disabled
Alert if Trusted AP is missing................. Disabled
Trusted AP timeout............................. 120
Untrusted AP Policy
Rogue Location Discovery Protocol.............. Disabled
RLDP Action.................................. Alarm Only
Automatically contain rogues advertising .... Alarm Only
Detect Ad-Hoc Networks....................... Alarm Only
Rogue Clients
Validate rogue clients against AAA........... Disabled
Detect trusted clients on rogue APs.......... Alarm Only
Rogue AP timeout............................... 1200
Signature Policy
Signature Processing........................... Enabled
To see the controller's current global MFP settings, enter this command:
show wps mfp summary
Information similar to the following appears:
Management Frame Protection state................ enabled
Controller Time Source Valid..................... true
WLAN ID WLAN Name
------- ----------------------
1 tester-2006
MFP
AP Name Validation
-------------------- ----------
tester-1000 Enabled
tester-1000b Enabled
Chapter 5
Status MFP Protection
--------- --------------
Enabled Enabled
Operational
Slot Radio State
---- ----- --------------
0 a Up
1 b/g Up
0 a Up
1 b/g Up
Configuring Security Solutions
MFP Capability
Protection Validation
---------- ----------
Full Full
Full Full
Full Full
Full Full
OL-9141-03