Dell W-Series 304 Instant 6.5.1.0-4.3.1.0 CLI Reference Guide - Page 291

Parameter cpsec-enable Description Issue this command to enable control plane security. To disable this feature, use the command no cpsec-enable. Control plane security is enabled by default. Usage Guidelines Controllers enabled with control plane security will only send certificates to APs that you have identified as valid APs on the network. If you are confident that all campus APs currently on your network are valid APs, you can configure automatic certificate provisioning to send certificates from the controller to each campus AP, or to all campus APs within a specific range of IP addresses. If you want closer control over each AP that gets certified, you can manually add individual campus APs to the secure network by adding each AP's information to a campus AP whitelist. Example The following command defines a range of IP addresses that should receive certificates from the controller, and enables the control plane security feature: (host)(config) # control-plane-security auto-cert-allowed-addrs 10.21.18.10 10.21.10.90 cpsec-enable Related Commands Command show control-plane-security Description Mode Show the current configuration of the control plane security profile. Config mode Command History This command was introduced in ArubaOS 5.0. Command Information Platforms All platforms Licensing Base operating system. Command Mode Config mode on master or local controllers 291| control-plane-security Dell Networking W-Series ArubaOS 6.5.x | Reference Guide