Configuring Tkip Countermeasure Holdoff Time; Vlans And Autonomous Access Points - Cisco 9971 Deployment Manual

Unified ip phone wireless lan deployment guide

Hide thumbs Also See for 9971:

Table of Contents

Configuring TKIP Countermeasure Holdoff Time

TKIP countermeasure mode can occur if the Access Point receives two message integrity check (MIC) errors within a 60

second period. When this occurs, the Access Point will de-authenticate all TKIP clients associated to that 802.11 radio and

holdoff any clients for the countermeasure holdoff time (default = 60 seconds).

To change the TKIP countermeasure holdoff time on the Cisco Unified Wireless LAN Controller, telnet or SSH to the

controller and enter the following command:

(Cisco Controller) >config wlan security tkip hold-down <nseconds> <wlan-id>

For the autonomous Access Point, enter the time in seconds to holdoff clients if a TKIP countermeasure event occurs.

Interface dot11radio X

countermeasure tkip hold-time <nseconds>

For more information about these topics, refer to the Enterprise Mobility Design Guide at this URL:

http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/eMob4.1.pdf

Segment wireless voice and data into separate VLANs.

When using autonomous access points, use a dedicated native VLAN. Autonomous access points use Inter-Access Point

Protocol (IAPP), which is a multicast protocol.

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide

Table of Contents