How to use radio resource management to defend DOS attack and use management frame protection to defend flooding attack?

[Maivoko]

How to use radio resource management to defend DOS attack and use management frame protection to defend flooding attack?

where should apply management frame protection in WLAN? AP , Guest?

when applied to Guest, the password of Wifi return incorrect password even if type correct password.

only choose optional of management frame protection, password is correct.

How to configure management frame protection correctly?

How to use radio resource management to defend DOS attack?

how to verify that it is safe after configuration? will there still are logs that show "attacker is detected" in splunk from WLC log after applied above configuration?

[Flavio Miranda]

Hi

 First of all, MFP (Management Frame Protection) implies that the device must support this feature. If you enable it on the WLC but the devices does not support it, you´ll turn your network down. 

 PS:  Most devices this days does not support MFP.

"where should apply management frame protection in WLAN? AP , Guest?"

Per WLAN. Look at Advanced tab.

"when applied to Guest, the password of Wifi return incorrect password even if type correct password.

only choose optional of management frame protection, password is correct."

Device does not support MFP, probably.

How to use radio resource management to defend DOS attack?

RRM does not apply to DOS attack. What can be done it use TLS, PSK with very strong password or web portal with captcha.

"how to verify that it is safe after configuration? will there still are logs that show "attacker is detected" in splunk from WLC log after applied above configuration?"

You should have wIPS with signature to detect attacks.

-If I helped you somehow, please, rate it as useful.-

[Maivoko]

 PS:  Most devices this days does not support MFP.

which devices do not support? AP ?or wireless client such as iphone or ipad ?

if AP do not support,

which version or model do AP support ? 

which version or model do AP not support ?

[patoberli]

Many clients don't support it. Problem is, if you enable it, it's required and only clients supporting MFP correctly can use the Wi-Fi. All other clients can't use it anymore.