Using The Cli To View Mfp Settings - Cisco 2100 Series Configuration Manual

Chapter 5 Configuring Security Solutions
4.

Using the CLI to View MFP Settings

Use these commands to view MFP settings using the controller CLI.
1.
2.
OL-17037-01
To enable or disable client MFP on a specific WLAN, enter this command:
config wlan mfp client {enable | disable} wlan_id [required]
If you enable client MFP and use the optional required parameter, clients are allowed to associate
only if MFP is negotiated.
To see the controller's current MFP settings, enter this command:
show wps mfp summary
Information similar to the following appears:
Global Infrastructure MFP state.... Enabled
Controller Time Source Valid....... False
WLAN
WLAN ID WLAN Name Status
------- ---------- -------- ----------
1 test1 Enabled
2 open Enabled
3 testpsk Enabled
Infra.
AP Name Validation Radio
-------- ----------- -----
mapAP Disabled a
b/g
rootAP2 Enabled a
b/g
HReap *Enabled b/g
a
To see the current MFP configuration for a particular WLAN, enter this command:
show wlan wlan_id
Information similar to the following appears:
WLAN Identifier........................... 1
Profile Name.............................. test1
Network Name (SSID)....................... test1
Status.................................... Enabled
MAC Filtering............................. Disabled
Broadcast SSID............................ Enabled
...
Local EAP Authentication.................. Enabled (Profile 'test')
Diagnostics Channel....................... Disabled
Security
802.11 Authentication:................. Open System
Static WEP Keys........................ Disabled
802.1X................................. Enabled
Encryption:.............................. 104-bit WEP
Wi-Fi Protected Access (WPA/WPA2)...... Disabled
CKIP .................................. Disabled
IP Security............................ Disabled
IP Security Passthru................... Disabled
Web Based Authentication............... Disabled
Web-Passthrough........................ Disabled
Infra. Client
Protection Protection
-----------
Disabled Disabled
Enabled Required
*Enabled Optional but inactive (WPA2 not configured)
Operational --Infra. Capability--
State Protection
----------- ----------- -----------
Up Full
Up Full
Up Full
Up Full
Up Full
Down Full
Cisco Wireless LAN Controller Configuration Guide
Configuring Management Frame Protection
Validation
Full
Full
Full
Full
Full
Full
5-71