Wireless Access

New Contributor

ClearPass Support of PMF 802.1X on Cisco WLC

Hi, I am looking for information if ClearPass supports PMF 802.1X coming from a Cisco WLC, ClearPass is running version 6.5. When Cisco WLC WPA+WPA2 AES, with PMF 802.1X enabled, the ClearPass server is not receving the request. Once normal 802.1X is selected, client authenticates without issue. authentication method is EAP-TLS not that this should make a difference.


Thanks & Regards,



Guru Elite

Re: ClearPass Support of PMF 802.1X on Cisco WLC

Management Frame Protection is between the client and the AP/controller. There is no involvement of the AAA server.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.

Re: ClearPass Support of PMF 802.1X on Cisco WLC

As a side-note, enabling 802.11w (management frame protection) has been reported to cause connectivity issues with some clients that show to not like the 11w extension in the wireless frames, which makes it hard to deploy in networks where you can't control all of your clients.


Before you decide to enable 11w, do extensive testing with all types of clients that should be supported on your network.

If you have urgent issues, please contact your Aruba partner or Aruba TAC (click for contact details).
Search Airheads
Showing results for 
Search instead for 
Did you mean: