Cisco 2100 Series Configuration Manual page 260

Configuring Management Frame Protection
...
To see the current MFP configuration for a particular access point, enter this command:
3.
show ap config general AP_name
Information similar to the following appears:
Cisco AP Identifier.............................. 0
Cisco AP Name.................................... ap:52:c5:c0
AP Regulatory Domain............................. 80211bg: -N 80211a: -N
Switch Port Number .............................. 1
MAC Address...................................... 00:0b:85:52:c5:c0
IP Address Configuration......................... Static IP assigned
IP Address....................................... 10.67.73.33
IP NetMask....................................... 255.255.255.192
...
AP Mode ......................................... Local
Remote AP Debug ................................. Disabled
S/W
Boot
Mini IOS Version ................................
Stats Reporting Period .......................... 180
LED State........................................ Enabled
ILP Pre Standard Switch.......................... Disabled
ILP Power Injector............................... Disabled
Number Of Slots.................................. 2
AP Model......................................... AP1020
AP Serial Number................................. WCN09260057
AP Certificate Type.............................. Manufacture Installed
Management Frame Protection Validation .......... Enabled
To see whether client MFP is enabled for a specific client, enter this command:
4.
show client detail client_mac
Client MAC Address............................... 00:14:1c:ed:34:72
...
Policy Type...................................... WPA2
Authentication Key Management.................... PSK
Encryption Cipher................................ CCMP (AES)
Management Frame Protection...................... Yes
...
To see MFP statistics for the controller, enter this command:
5.
show wps mfp statistics
Information similar to the following appears:
Note
Cisco Wireless LAN Controller Configuration Guide
5-72
Conditional Web Redirect............... Disabled
Auto Anchor............................ Enabled
H-REAP Local Switching................. Disabled
Infrastructure MFP protection.......... Enabled
Client MFP............................. Required
Version .................................... 4.0.2.0
Version ................................... 2.1.78.0
This report contains no data unless an active attack is in progress. Examples of various error
types are shown for illustration only. This table is cleared every 5 minutes when the data is
forwarded to any network management stations.
Chapter 5 Configuring Security Solutions
--
OL-17037-01