Cisco Unified Wireless IP Phone 7925G Series Deployment Guide 65
Client Exclusion Policy
Excessive 802.11-association failures.......... Enabled
Excessive 802.11-authentication failures....... Enabled
Excessive 802.1x-authentication................ Enabled
IP-theft....................................... Enabled
Excessive Web authentication failure........... Enabled
Signature Policy
Signature Processing........................... Enabled
To disable the Auto-Immune feature on the Cisco Unified Wireless LAN Controller, telnet or SSH to the controller and enter
the following command.
(Cisco Controller) >config wps auto-immune disable
Configuring the WLAN Controller EAP-Request and EAPOL-Key Timeouts
If using EAP, the EAP-Request Timeout on the Cisco Unified Wireless LAN Controller should be set to at least 20 seconds.
In later versions of Cisco Unified Wireless LAN Controller software, the default EAP-Request Timeout was changed from 2 to
30 seconds.
The default timeout on the Cisco ACS server is 20 seconds.
To view the EAP configuration on the Cisco Unified Wireless LAN Controller, telnet or SSH to the controller and enter the
following command.
(Cisco Controller) >show advanced eap
EAP-Identity-Request Timeout (seconds)........... 30
EAP-Identity-Request Max Retries................. 2
EAP Key-Index for Dynamic WEP.................... 0
EAP Max-Login Ignore Identity Response........... enable
EAP-Request Timeout (seconds).................... 30
EAP-Request Max Retries.......................... 2
EAPOL-Key Timeout (milliseconds)...................... 1000
EAPOL-Key Max Retries............................ 2
To change the EAP-Request Timeout on the Cisco Unified Wireless LAN Controller, telnet or SSH to the controller and enter
the following command.
(Cisco Controller) >config advanced eap request-timeout 30
As of 6.0.182.0 release, the EAPOL-Key Timeout is configurable in milliseconds, where in previous releases it was only
allowed to be configured in seconds.
It is recommended to set the EAPOL_Key timeout to 200 milliseconds.
To Next Page
Loading...
Need help?
General
