Controller-less WLANs

Management frame protection support for Instant Access Points
Q:

Management frame protection support for Instant Access Points



A:
  • Instant 4.3 supports the IEEE 802.11w standard, also known as Management Frame Protection (MFP).
  • MFP makes it difficult for an attacker to deny service by spoofing Deauth and Disassoc management frames.
  • MFP uses 802.11i (Robust Security Network) framework that establishes encryption keys between the client and AP.

 

Note: It's a per-SSID based configuration and can be enabled only through CLI: 

 

(config) # wlan ssid-profile Test
(SSID Profile "Test") # mfp-capable 
(SSID Profile "Test") # mfp-required

 

  • If the mfp-required parameter is enabled, the SSID supports only the clients that exhibt the MFP functionality.
  • If the mfp-capable parameter enabled, the SSID supports management frame protection (MFP) capable clients and non-MFP clients.

 

Version History
Revision #:
2 of 2
Last update:
‎03-24-2017 07:19 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.