H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 375)

354
Item Description
PMF
Management frame protection status:
• Mandatory—Clients supporting PMF can associate with the AP.
The AP protects management frames from these clients. Clients not
supporting PMF cannot associate with the AP.
• Optional—All clients can associate with the AP. The AP protects
management frames from clients supporting PMF.
• Disable—All clients can associate with the AP. The AP does not
protect management frames.
By default, PMF is disabled.
NOTE:
You can only configure management frame protection on a service
template whose:
• Authentication type is PSK or 802.1X.
• Cipher suite is AES.
• Security IE is WPA2.
Association Comeback
The AP does not respond to any association or reassociation requests
from the client within the association comeback time.
SA Query Timeout
If the AP receives no SA Query response within the timeout time, it
resends the request.
SA Query Retry The retransmission time for an AP to retransmit SA Query requests.
Bind Hotspot2.0 Policy Select a Hotspot 2.0 policy.
Remote AP Keep Client
Enabling status of the remote AP feature.
By default, the remote AP feature is enabled.
Gsm Uplink Hide Ssid
Whether SSIDs can be advertised in beacon frames when the uplink
is a GSM network.
• Enable.
• Disable.
By default, SSIDs cannot be advertised in beacon frames when the
uplink is a GSM network.
Configuring management frame protection for a crypto-type wireless service
Perform this task to enable an AP to protect management frames, including deauthentication frames,
deassociation frames, and some robust action frames.
Management frame protection uses the PTK encrypt method to ensure privacy, integrity, and replay
protection of unicast management frames.
For multicast and broadcast management frames, this feature uses Broadcast Integrity Protocol (BIP) to
ensure integrity and replay protection. BIP adds the Management MIC IE (MME) field to the end of the
management frames to protect their privacy.
If management frame protection is enabled, the AC/AP uses SA Query to secure connections with
clients.
SA Query includes active SA Query and passive SA Query.
• Active SA Query.