Cisco 4402 Configuration Guide - Page 26

Client Exclusion: Disabled, DHCP Server: No Override, DHCP Addr. Assignment: Required, Management

Page 26 highlights

Client Exclusion: Disabled - This is also a security feature. If, for example, a client fails to authenticate itself a certain number of times, there will be a compulsory ban before the client can try again. This can be more irritating than useful, so we recommend "Disabled". DHCP Server: No Override - Here it is possible to override the DHCP server which has been configured for the virtual interface. DHCP Addr. Assignment: Required - One can set a condition that clients must obtain an IP address from a DHCP server: that is, a client is not permitted to define its own IP address statically. Ideally this should be set to required, but experience has shown that this setting can cause problems for some clients. In case of a temporary loss of connectivity, the controller will require a renewal of DHCP address and some clients has problems with handling this situation. Management Frame Protection (MFP) - Attempts to protect against DoS, man-in-themiddle and dictionary attacks on the wireless network. To enable Client Protection, the clients must support CCX (Cisco Compatible eXtension program). After pressing "Apply", this WLAN will be activated. 26

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60

26
Client Exclusion: Disabled
– This is also a security feature. If, for example, a client fails to
authenticate itself a certain number of times, there will be a compulsory ban before the client
can try again. This can be more irritating than useful, so we recommend “Disabled”.
DHCP Server: No Override
– Here it is possible to override the DHCP server which has been
configured for the virtual interface.
DHCP Addr. Assignment: Required
– One can set a condition that clients
must
obtain an IP
address from a DHCP server: that is, a client is not permitted to define its own IP address
statically. Ideally this should be set to required, but experience has shown that this setting can
cause problems for some clients. In case of a temporary loss of connectivity, the controller will
require a renewal of DHCP address and some clients has problems with handling this situation.
Management Frame Protection (MFP) – Attempts to protect against DoS,
man-in-the-
middle and dictionary attacks on the wireless network. To enable Client Protection, the clients
must support CCX (Cisco Compatible eXtension program).
After pressing “Apply”, this WLAN will be activated.