What is PMF in cisco WLC

[CCC3]

What is the PMF setting for WLAN on WLC 3504/5520?

I think default is disabled
How will the change to optional/required affect it?

Please let me know the practical impact of the cisco document because it is difficult to understand.

[CCC3]

The hotspot connection was not possible in a specific area, so when I looked at the wlan, the pmf was set to optional.

I didn't set the wips function on any wips equipment or wlc.

I don't think it's affected, but does anyone know?

[Leo Laohoo]

Management Frame Protection on WLC

[CCC3]

I've already seen the document.

But it wasn't easy to understand.

I wonder what kind of situation this setting is mainly used in the actual field or what kind of failure it is set when dealing with.

[Leo Laohoo]

PMF (802.11w) is mandatory in 6Ghz.  

Otherwise, set it to "optional".  

WLAN/SSID Security Migration into 6GHz Networks

[CCC3]

I'm not using 6Ghz,

I think default is disabled
Is there a reason to go with optional?

And is this setting also related to the inability to connect to hotspots?

[Leo Laohoo · Accepted solution]

---

@CCC3 wrote:
And is this setting also related to the inability to connect to hotspots?

---

No, PMF is dependent on the wireless client itself.

If the wireless client does not support 802.11w, set PMF to optional or disable it altogether.

[JPavonM]

@CCC3 there are well-known issues in some clients devices (let's say Windows 10 for example) related to connectivity issues when using PMF, either Optional or Mandatory, and they are due to defects on the operating system or wNIC drivers.

As using PMF is a great feature to prevent spoofing and denial-of-service attacks, it is recommended to use it, but check that your devices have the latest drivers and OS patches implemented.