topic Rogue containment in Wireless

Rogue containment

pnagpal — Sun, 04 Jul 2021 07:31:03 GMT

Hello All,

How do you manage rogue APs in your setup? I know we can do this easily for wired rogues, how do you manage un-wired rogues especially user's mobile and other items acting as hotspot.

I am sorry if this is asked already.

Thanks,

Pulkit

Re: Rogue containment

Scott Fella — Thu, 25 Jul 2013 10:49:29 GMT

All this is done manually. You shouldn't have rogue containment on and RLDP really should be disabled on client access APs. If you have the time to look for these and hunt them down, then that is what you need to do. To be honest, you can't prevent people from bringing in their own hotspot especially now when a phone can be a hotspot.

Sent from Cisco Technical Support iPhone App

Re: Rogue containment

Shaoqin Li — Thu, 25 Jul 2013 15:34:47 GMT

what you can do is first classify them. As Scott said RLDP is better running on monitor mode APs.

unless you see some hostile entries like broadcasting same ssid, you primarily need first know how many/ what is constructing the rogue environment.

Sent from Cisco Technical Support iPad App

Rogue containment

Mark Sullivan — Fri, 26 Jul 2013 19:04:57 GMT

Since you guys appear to be running RLDP on monitor mode AP's only, can I take it you are successfully running SPT from an access point to detect rogues. What type of Access switches are you using?

found a document

http://www.cisco.com/en/US/customer/docs/wireless/prime_infrastructure/1.3/configuration/guide/admin.html#wp1603927 stating only the following switches are supported: 3750, 3560, 3750E, 3560E, and 2960.

Reason I ask, we're having issues with detection of wired rogue AP's

Rogue containment

Ravi Singh — Mon, 29 Jul 2013 07:13:37 GMT

Please see the below link for managing and detecting rouge AP in your network

http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080b40901.shtml

Rogue containment

Mark Sullivan — Mon, 29 Jul 2013 18:34:47 GMT

Thanks, I'll review

Re: Rogue containment

katerina.dardoufa — Fri, 22 May 2020 09:36:38 GMT

Hello to all,

years after the initial thread begun, I am having trouble with the detection of wired rogue AP. The rogue AP is detected, as a friendly AP, by an AP in one of our buildings, but SPT running on Prime Infrastructure 3.5 shows it to be connected to a switch in another building.

Any ideas?

Re: Rogue containment

patoberli — Fri, 22 May 2020 14:39:33 GMT

You might be missing some switches in PI. If the intermediate switches are missing (or unreachable from PI), then it probably shows the "next best" switch.