IOS TKIP Countermeasure Logging

Unanswered Question
Jul 25th, 2007

When IOS TKIP countermeasures are enforced is any message generated in the AP log? Firmware rev is 12.3(8)JEB.

Typical command to configure this would be:

interface dot11Radio 0

countermeasure tkip hold-time 60

Also, does any know of a tool to generate 2 MIC errors within 60 seconds?

Thanks in advance.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
irisrios Tue, 07/31/2007 - 12:55

Use the countermeasure tkip hold-time configuration interface command to configure a TKIP MIC failure holdtime. If the access point detects two MIC failures within 60 seconds, it blocks all the TKIP clients on that interface for the holdtime period.

countermeasure tkip hold-time seconds

http://cisco.com/en/US/products/hw/routers/ps272/products_technical_reference_chapter09186a008022e0e3.html#wp2637640

Actions

This Discussion

 

 

Trending Topics - Security & Network