Rockwell Automation 1783-WAPxxx Stratix 5100 Wireless Access Point User Manual - Manual (Page 399)

Rockwell Automation Publication 1783-UM006A-EN-P - May 2014 399
Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services Chapter 13
This ssid configuration command enables Client MFP as optional on a particular
SSID. The Dot11Radio interface is reset when the command is executed if the
SSID is bound to the Dot11Radio interface. Client MFP is enabled for this
particular SSID if the SSID is WPAv2 capable, otherwise Client MFP is disabled.
show dot11 ids mfp client statistics
Use this command to display Client MFP statistics on the access point console
for a Dot11Radio interface.
clear dot11 ids mfp client statistics
Use this command to clear the Client MFP statistics.
authentication key management wpa version {1|2}
Use this command to explicitly specify the WPA version to use for WPA key
management for a particular SSID.
1. Enter global configuration mode.
configure terminal
2. Configures the access point as an MFP generator.
When enabled, the access point protects the management frames it
transmits by adding a message integrity check information element (MIC
IE) to each frame. Any attempt to copy, alter, or replay the frame
invalidates the MIC, causing any receiving access point that is configured
to detect (validate) MFP frames to report the discrepancy. The access
point must be a member of a WDS.
dot11 ids mfp generator
3. Configures the access point as an MFP detector.
When enabled, the access point validates management frames it receives
from other access points. If it receives any frame that does not contain a
valid, and expected, MIC IE, it reports the discrepancy to the WDS. The
access point must be a member of a WDS.
dot11 ids mfp detector
4. Enter the name or ip address of the SNTP server.
sntp server server IP address
5. Return to the privileged EXEC mode.
end
6. (Optional) Save your entries in the configuration file.
copy running-config startup-config