Examkin

Question

Difficulty: HardWireless LAN Client Connectivity Configuration via WLC GUI

A network engineer is configuring a high-security WLAN on a Cisco Wireless LAN Controller (WLC) via the web GUI to support modern client devices using WPA3-Personal (SAE) key management. Under the WLANs > Edit > Security > Layer 2 tab, the engineer selects WPA3 Policy but leaves the Protected Management Frames (PMF) setting at 'Disabled'. When attempting to save and enable the WLAN, the WLC displays a configuration error and refuses to save the profile. Which setting change in the WLC GUI is mandatory to resolve this error?

  1. Set Protected Management Frames (PMF) to Required under the Security > Layer 2 tabAnswer
  2. B
    Map an external RADIUS server entry under the Security > AAA Servers tab
  3. C
    Change the Access Point mode to FlexConnect Local Switching under the Advanced tab
  4. D
    Enable Web Authentication security under the Security > Layer 3 tab

Answer

Set Protected Management Frames (PMF) to Required under the Security > Layer 2 tab
Under the Wi-Fi Alliance WPA3 specification, Protected Management Frames (PMF / IEEE 802.11w) are strictly mandatory. When configuring a WLAN on a Cisco Wireless LAN Controller via the web GUI (WLANs > Edit > Security > Layer 2), selecting WPA3 Policy forces the administrator to set Protected Management Frames to 'Required'. Leaving PMF set to 'Disabled' results in an immediate GUI validation failure because the controller enforces WPA3 security standard compliance.

Step-by-Step Solution

1
Identify the mandatory prerequisite for WPA3 operation on Cisco WLCs
Recognize that the Wi-Fi Alliance WPA3 specification mandates IEEE 802.11w Protected Management Frames (PMF).
PMF prevents management frame spoofing attacks such as deauthentication and disassociation attacks.
2
Locate the PMF configuration field in the WLC GUI
Navigate to WLANs > Edit > Security > Layer 2 tab where WPA+WPA2/WPA3 parameters reside.
PMF is a Layer 2 security mechanism configured on the same sub-tab as WPA3 Policy.
3
Adjust the PMF parameter to satisfy WPA3 policy validation
Change Protected Management Frames dropdown from Disabled to Required.
Selecting WPA3 Policy without enabling PMF as Required generates a WLC GUI validation error when applying changes.

Key Concept

WLC GUI Layer 2 Security and WPA3 PMF Prerequisite Configuration
Estimated Time:2m 0s
Rate this question

Topics

Wireless LAN Client Connectivity Configuration via WLC GUI

More questions from this topic