zbrWLanCcxManagementFrameProtection

Enable/disable the management frame protection feature. One of the challenges in 802.11 has been that management frames are sent in the clear with no
encryption or message integrity checking, and are therefore vulnerable to spoofing attacks. The spoofing of WLAN management frames can be used to attack
the WLAN network. To address this, Cisco created a digital signature mechanism to insert a message integrity check (MIC) to 802.11 management frames.
This allows the legitimate members of a WLAN deployment to be identified and therefore allows the identification of rogue infrastructure, and spoofed
frames, through their lack of valid MICs. The MIC that is used in management frame protection (MFP) is not a simple CRC hashing of the message, but also
includes a digital signature component. The MIC component of MFP ensures that a frame has not been tampered with and the digital signature component
ensures that the MIC could have only been produced by a valid member of the WLAN domain. The digital signature key used in MFP is shared among all
controllers in a mobility group; different mobility groups have different keys. This allows the validation of all WLAN management frames processed by the
WLCs in that mobility group.

MIB

ZEBRA-MIB

OID

.1.3.6.1.4.1.10642.20.6.20.5

Type

scalar

Access

readwrite

Status

current

Parent

zbrWLanCcx