Wireless Access

Reply
New Contributor
Posts: 3
Registered: ‎02-17-2016

ClearPass Support of PMF 802.1X on Cisco WLC

Hi, I am looking for information if ClearPass supports PMF 802.1X coming from a Cisco WLC, ClearPass is running version 6.5. When Cisco WLC WPA+WPA2 AES, with PMF 802.1X enabled, the ClearPass server is not receving the request. Once normal 802.1X is selected, client authenticates without issue. authentication method is EAP-TLS not that this should make a difference.

 

Thanks & Regards,

 

Marc

Guru Elite
Posts: 8,643
Registered: ‎09-08-2010

Re: ClearPass Support of PMF 802.1X on Cisco WLC

[ Edited ]

Management Frame Protection is between the client and the AP/controller. There is no involvement of the AAA server.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 518
Registered: ‎11-04-2011

Re: ClearPass Support of PMF 802.1X on Cisco WLC

As a side-note, enabling 802.11w (management frame protection) has been reported to cause connectivity issues with some clients that show to not like the 11w extension in the wireless frames, which makes it hard to deploy in networks where you can't control all of your clients.

 

Before you decide to enable 11w, do extensive testing with all types of clients that should be supported on your network.

--
If you have urgent issues, please contact your Aruba partner or Aruba TAC (click for contact details).
Search Airheads
Showing results for 
Search instead for 
Did you mean: