topic Re: Rogue Classifications in Wireless

Rogue Classifications

jeetkulkarni — Mon, 05 Jul 2021 15:16:24 GMT

Kindly let me know what are the implications to the Cisco WLC detecting rogue client and putting a "Threat" label against it? Does it block the client from accessing the networks or simply puts a label and let the client access if it can. This is related to the bug identified here - https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf31881

We currently have valid Lenovo X1 laptops showing in Rogue clients in threat list. Most of the clients have network drops and intermittent wireless connection issues.

Re: Rogue Classifications

Flavio Miranda — Tue, 20 Feb 2018 01:34:25 GMT

I had a similar experience and in my case the client was unable to connect. I had to add client mac address on the Mac filter as work around.

I think you could debug this client and see if the drop cause is related to the rogue classification or not.

-If I helped you somehow, please, rate it as useful.-

Re: Rogue Classifications

jeetkulkarni — Tue, 20 Feb 2018 02:33:28 GMT

When you added the client to mac filter did the drops stop/decrease?

Re: Rogue Classifications

Flavio Miranda — Tue, 20 Feb 2018 02:42:41 GMT

In my situation it was not drop but client did not join the network.

-If I helped you somehow, please, rate it as useful.-

Re: Rogue Classifications

jeetkulkarni — Tue, 20 Feb 2018 02:49:35 GMT

Sure, we have similar issues wherein the client does not join the network. In some instances it just looses network connectivity in the middle of no where. Does it sound familiar?

Re: Rogue Classifications

Flavio Miranda — Tue, 20 Feb 2018 03:07:04 GMT

Yes it does.

Try to add classify those clients as friendly on rogue policy.

If possible, run a debug for those dropping ones.

Most important, upgrade the wlc just to make sure you are not under a bug.

-If I helped you somehow, please, rate it as useful.-

Re: Rogue Classifications

jeetkulkarni — Tue, 20 Feb 2018 21:32:36 GMT

I've updated WLC to version 8.3.151.0 for now, clients seem to be connecting OK but still too early to confirm.

Re: Rogue Classifications

Flavio Miranda — Wed, 21 Feb 2018 02:49:11 GMT

Should be enough. Inexplicable behavior usually is bug and upgrade is the way to go.

-If I helped you somehow, please, rate it as useful.-

Re: Rogue Classifications

jeetkulkarni — Sun, 25 Feb 2018 22:47:20 GMT

The behavior is still seen, we now have a TAC case open!