Auto-Immune
The Auto-Immune feature can optionally be enabled for protection against denial of service (DoS) attacks.
Although when this feature is enabled there can be interruptions introduced with voice over wireless LAN, therefore it is
recommended to disable the Auto-Immune feature on the Cisco Unified Wireless LAN Controller.
To view the Auto-Immune configuration on the Cisco Unified Wireless LAN Controller, telnet or SSH to the controller and
enter the following command.
(Cisco Controller) >show wps summary
Auto-Immune
Auto-Immune.................................... Disabled
Client Exclusion Policy
Excessive 802.11-association failures.......... Enabled
Excessive 802.11-authentication failures....... Enabled
Excessive 802.1x-authentication................ Enabled
IP-theft....................................... Enabled
Excessive Web authentication failure........... Enabled
Signature Policy
Signature Processing........................... Enabled
To disable the Auto-Immune feature on the Cisco Unified Wireless LAN Controller, telnet or SSH to the controller and enter
the following command.
(Cisco Controller) >config wps auto-immune disable
WLAN Controller Advanced EAP Settings
Need to ensure that the advanced EAP settings in the Cisco Unified Wireless LAN Controller are configured per the
information below.
To view the EAP configuration on the Cisco Unified Wireless LAN Controller, telnet or SSH to the controller and enter the
following command.
(Cisco Controller) >show advanced eap
EAP-Identity-Request Timeout (seconds)........... 30
EAP-Identity-Request Max Retries................. 2
EAP Key-Index for Dynamic WEP.................... 0
EAP Max-Login Ignore Identity Response........... enable
EAP-Request Timeout (seconds).................... 30
To Next Page
Loading...
Need help?
General
