capwap message-integrity check disable

Function

The capwap message-integrity check disable command disables integrity check of CAPWAP packets.

The undo capwap message-integrity check disable command enables integrity check of CAPWAP packets.

By default, integrity check of CAPWAP packets is enabled.

Format

capwap message-integrity check disable

undo capwap message-integrity check disable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

CAPWAP packets are transmitted between the AC and APs. To prevent the packets from being forged or tampered with and prevent malformed packet attacks, you can configure integrity check of CAPWAP packets.

Configuration Impact

After this configuration is modified, all online APs on the AC go offline.

Example

# Enable integrity check of CAPWAP packets.

<HUAWEI> system-view
[HUAWEI] capwap message-integrity check disable
Warning: In a backup scenario, the PSK and status of CAPWAP message integrity check must be the same between the master and backup e
nds. This operation may cause devices using CAPWAP connections to reset or go offline. Continue? [Y/N]:y