beautypg.com

H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 375

background image

354

Item Description

PMF

Management frame protection status:

Mandatory—Clients supporting PMF can associate with the AP.

The AP protects management frames from these clients. Clients not

supporting PMF cannot associate with the AP.

Optional—All clients can associate with the AP. The AP protects

management frames from clients supporting PMF.

Disable—All clients can associate with the AP. The AP does not

protect management frames.

By default, PMF is disabled.

NOTE:

You can only configure management frame protection on a service

template whose:

Authentication type is PSK or 802.1X.

Cipher suite is AES.

Security IE is WPA2.

Association Comeback

The AP does not respond to any association or reassociation requests
from the client within the association comeback time.

SA Query Timeout

If the AP receives no SA Query response within the timeout time, it
resends the request.

SA Query Retry

The retransmission time for an AP to retransmit SA Query requests.

Bind Hotspot2.0 Policy

Select a Hotspot 2.0 policy.

Remote AP Keep Client

Enabling status of the remote AP feature.
By default, the remote AP feature is enabled.

Gsm Uplink Hide Ssid

Whether SSIDs can be advertised in beacon frames when the uplink
is a GSM network.

Enable.

Disable.

By default, SSIDs cannot be advertised in beacon frames when the
uplink is a GSM network.

Configuring management frame protection for a crypto-type wireless service

Perform this task to enable an AP to protect management frames, including deauthentication frames,

deassociation frames, and some robust action frames.
Management frame protection uses the PTK encrypt method to ensure privacy, integrity, and replay

protection of unicast management frames.
For multicast and broadcast management frames, this feature uses Broadcast Integrity Protocol (BIP) to

ensure integrity and replay protection. BIP adds the Management MIC IE (MME) field to the end of the
management frames to protect their privacy.
If management frame protection is enabled, the AC/AP uses SA Query to secure connections with

clients.
SA Query includes active SA Query and passive SA Query.

Active SA Query.