Meru Technical Note - What does the 'Countermeasure' in the ESS profile do?

[nsamuel]

Description

What does the “Countermeasure” in the ESS profile do?

Scope

KB Article Type: Configuration

Related Products: Controller

Related Software Versions: Any

Keywords: Countermeasure

Solution

Countermeasures are helpful if an AP encounters two consecutive MIC errors from the same client within a 60 second period. The AP will disassociate all clients from the ESSID where the errors originated and not allow any clients to connect for 60 seconds. This prevents an MIC attack.

By default, this setting is on in the ESS profile. Countermeasures should only be turned off temporarily while a network administrator identifies and then resolves the source of a MIC error.