topic Re: What is PMF in cisco WLC in Wireless

What is PMF in cisco WLC

CCC3 — Mon, 27 May 2024 02:18:06 GMT

What is the PMF setting for WLAN on WLC 3504/5520?

I think default is disabled
How will the change to optional/required affect it?

Please let me know the practical impact of the cisco document because it is difficult to understand.

Is pmf related to hotspot connection and wlan?

CCC3 — Mon, 27 May 2024 02:27:20 GMT

The hotspot connection was not possible in a specific area, so when I looked at the wlan, the pmf was set to optional.

I didn't set the wips function on any wips equipment or wlc.

I don't think it's affected, but does anyone know?

Re: What is PMF in cisco WLC

Leo Laohoo — Mon, 27 May 2024 02:33:30 GMT

Management Frame Protection on WLC

Re: What is PMF in cisco WLC

CCC3 — Mon, 27 May 2024 02:36:04 GMT

I've already seen the document.

But it wasn't easy to understand.

I wonder what kind of situation this setting is mainly used in the actual field or what kind of failure it is set when dealing with.

Re: What is PMF in cisco WLC

Leo Laohoo — Mon, 27 May 2024 02:42:23 GMT

PMF (802.11w) is mandatory in 6Ghz.

Otherwise, set it to "optional".

WLAN/SSID Security Migration into 6GHz Networks

Re: What is PMF in cisco WLC

CCC3 — Mon, 27 May 2024 02:44:53 GMT

I'm not using 6Ghz,

I think default is disabled
Is there a reason to go with optional?

And is this setting also related to the inability to connect to hotspots?

Re: What is PMF in cisco WLC

Leo Laohoo — Mon, 27 May 2024 03:25:32 GMT

@CCC3 wrote:
And is this setting also related to the inability to connect to hotspots?

No, PMF is dependent on the wireless client itself.

If the wireless client does not support 802.11w, set PMF to optional or disable it altogether.

Re: What is PMF in cisco WLC

JPavonM — Mon, 27 May 2024 07:22:20 GMT

@CCC3 there are well-known issues in some clients devices (let's say Windows 10 for example) related to connectivity issues when using PMF, either Optional or Mandatory, and they are due to defects on the operating system or wNIC drivers.

As using PMF is a great feature to prevent spoofing and denial-of-service attacks, it is recommended to use it, but check that your devices have the latest drivers and OS patches implemented.