I'm wondering how people's experiences have been with MFP, after enabling it on the wireless controllers. How well does/did it work, has it caused any problems? (And what controller version were you running at the time?) I have Intel 2200BG and 3945ABG clients (running WPA + TKIP), and I'm wondering if MFP could cause more problems than it's worth.
We had some significant issues with MFP with Intel clients. We did not track down the root cause, but disabling it seemed to remove many issues. I decided I would hold off re-enabling it for the time being.
If I remember correctly, the Intel was receiving a de-auth frame that it considered invalid because of MFP. This frame caused some versions of the Intel driver to wedge, and we had to disable/enable the nic to re-gain wireless access.
There is also limited benefits to MFP until more clients actually support it fully, so I think it will be more practical in a year or two. However, I would be curious as well to hear other feedback.
Yeah we found a deauth issue with Intel 3945/4965 when running MFP (very noticable with session timeout configured, which triggers a deauth). We raised this with Intel and they saw the same and managed to fix it. Last I saw, it will be integrated in their WW10 2009 release.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...