SSID 802.11w Protected Management Frames Configuration

Dashboard Location: Wireless > Configure > SSIDs

Wireless Management Frame Protection and Security

SSID 802.11w Protected Management Frames configuration in Meraki wireless networks provides administrators with comprehensive wireless security enhancement, enabling protection against management frame attacks, deauthentication attack prevention, improved wireless network security posture, and enhanced client connection stability. This functionality supports enterprise security requirements, wireless intrusion prevention, network attack mitigation, and regulatory compliance in secure environments. 802.11w Protected Management Frames is essential for defending against wireless attacks, maintaining connection integrity, protecting against denial-of-service attacks, and ensuring secure wireless communications in enterprise and government deployments.

Diagram

Classes

meraki

Name	Type	Constraint	Mandatory	Default Value
domains	List	domains	No

domains (meraki)

Name	Type	Constraint	Mandatory	Default Value
organizations	List	organizations	Yes

organizations (meraki.domains)

Name	Type	Constraint	Mandatory	Default Value
networks	List	networks	No

networks (meraki.domains.organizations)

Name	Type	Constraint	Mandatory	Default Value
wireless	Class	wireless	No

wireless (meraki.domains.organizations.networks)

Name	Type	Constraint	Mandatory	Default Value
ssids	List	ssids	No

ssids (meraki.domains.organizations.networks.wireless)

Name	Type	Constraint	Mandatory	Default Value
dot11w	Class	dot11w	No

dot11w (meraki.domains.organizations.networks.wireless.ssids)

Name	Type	Constraint	Mandatory	Default Value
enabled	Boolean	true, false	No
required	Boolean	true, false	No

Examples

Example-1: The example below demonstrates SSID 802.11w protected management frames configuration.

The CORP SSID (SSID 0) has 802.11w Protected Management Frames (PMF) disabled, meaning management frames are not cryptographically protected, and support is neither enabled nor required for connecting clients.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          networks:
            - name: !env network_name
              product_types:
                - appliance
                - switch
                - wireless
                - camera
                - sensor
                - cellularGateway
              wireless:
                ssids:
                  - name: CORP
                    ssid_number: "0"
                    dot11w:
                      enabled: false
                      required: false