Controller-less WLANs

Management frame protection support for Instant Access Points

Aruba Employee

Management frame protection support for Instant Access Points

  • Instant 4.3 supports the IEEE 802.11w standard, also known as Management Frame Protection (MFP).
  • MFP makes it difficult for an attacker to deny service by spoofing Deauth and Disassoc management frames.
  • MFP uses 802.11i (Robust Security Network) framework that establishes encryption keys between the client and AP.


Note: It's a per-SSID based configuration and can be enabled only through CLI: 


(config) # wlan ssid-profile Test
(SSID Profile "Test") # mfp-capable 
(SSID Profile "Test") # mfp-required


  • If the mfp-required parameter is enabled, the SSID supports only the clients that exhibt the MFP functionality.
  • If the mfp-capable parameter enabled, the SSID supports management frame protection (MFP) capable clients and non-MFP clients.


Version history
Revision #:
2 of 2
Last update:
‎03-24-2017 07:19 PM
Updated by:
Labels (1)
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.