Hi Dennis,
We have had this running since version software 4.2 I believe, the only
time we really had problems was when we went to the 5 code ( bugs
CSCsl59308, CSCsv00108). These generated a high number of false alarms,
but appear to have been successfully resolved in 6. Outside of that we
really haven't had anything to deal with.
Regards
Jason
On 29/05/2010 4:00 AM, Lee Weers wrote:
I forgot to mention that when an alert is generated I asked TAC how do you
resolve it. They said there is nothing you could do. It is a client driver
implementation problem.
Thank you,
Lee Weers
Central College
Assistant Director for Network Services
641-628-7675
Vcard https://www.mcpvirtualbusinesscard.com/VBCServer/LeeWeers/interactivecard
Vprofile https://www.mcpvirtualbusinesscard.com/VBCServer/LeeWeers/profile
-----Original Message-----
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee Weers
Sent: Friday, May 28, 2010 1:29 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Management Frame Protection
About 18 months ago we had a Cisco TAC enable it while troubleshooting another
problem. It caused thousands of alerts to be generated, and we had problems
with the WLC's quarantining AP's that were associated with another controller.
What was generating all of the alerts was a bug that is supposed to be fixed in
7.0. It has to do with 2 ap's being in an ap group but on different
controllers. The groups have a different id on the controllers and this will
generate an alert. How the groups get different id's and a different SSID
order when configs are pushed out using templates is very frustrating, and why
that makes a difference is beyond me.
Thank you,
Lee Weers
Central College
Assistant Director for Network Services
641-628-7675
Vcard https://www.mcpvirtualbusinesscard.com/VBCServer/LeeWeers/interactivecard
Vprofile https://www.mcpvirtualbusinesscard.com/VBCServer/LeeWeers/profile
-----Original Message-----
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Dennis Xu
Sent: Friday, May 28, 2010 9:45 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Management Frame Protection
Just wondering what are people's MFP experiences after enabling it on Cisco
WLCs. How well does it work? Any issues caused by enabling this? Do you get a
lots of MFP alerts? As I understand, the infrastructure MFP can only detect and
report intrusions but cannot stop them. So what are your action plans after
receiving the MFP alerts?
Thanks!
Dennis Xu
Network Analyst
Computing and Communication Services
University of Guelph
5198244120 x 56217
**********
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.
--
Jason Cook
Technology Services
The University of Adelaide, AUSTRALIA 5005
Ph : +61 8 8313 4800
e-mail: jason.c...@adelaide.edu.au
CRICOS Provider Number 00123M
-----------------------------------------------------------
This email message is intended only for the addressee(s)
and contains information which may be confidential and/or
copyright. If you are not the intended recipient please
do not read, save, forward, disclose, or copy the contents
of this email. If this email has been sent to you in error,
please notify the sender by reply email and delete this
email and any copies or links to this email completely and
immediately from your system. No representation is made
that this email is free of viruses. Virus scanning is
recommended and is the responsibility of the recipient.
**********
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.
