Configuring Management Frames Protection

HPE Aruba Networking Central supports the Management Frame Protection (MFP) feature in networks that include Aruba InstantOS 8.5.0.0 firmware version and later. This feature protects networks against forged management frames spoofed from other devices that might otherwise disrupt a valid user session.

The MFP increases the security by providing data confidentiality of management frames. MFP uses 802.11i 802.11i provides improved encryption for networks that use 802.11a, 802.11b, and 802.11g standards. It requires new encryption key protocols, known as Temporal Key Integrity Protocol (TKIP) and Advanced Encryption Standard (AES). framework that establishes encryption keys between the client and Instant Access Point (IAP).

Enabling Management Frames Protection for Wireless Networks in HPE Aruba Networking Central

To enable the MFP feature, complete the following steps:

1. In the WebUI, set the filter to a group containing at least one AP.

   The dashboard context for the group is displayed.

2. Under Manage, click Devices > Access Points.

   A list of APs is displayed in the List view.

3. Click the Config icon.

   The tabs to configure the APs are displayed.

4. Click the WLANs tab.

   The WLANs Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. details page is displayed.

5. In the WLANspage, click + Add SSID. To modify an existing SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network., select a wireless SSID from the Wireless SSIDs table and then click the edit icon.
6. In the General tab, click Advanced Settings.
7. Expand Miscellaneous.
8. Turn on the Management Frames Protection toggle switch to enable the MFP feature.
9. Click Next.
10. Click Save Settings.