topic Re: Rogue AP in Wireless

Rogue AP

hs08 — Mon, 03 Nov 2025 04:15:52 GMT

I have 2 WLC, one using 2500 series and another one using 9800 series and both WLC have same SSID.

Should i classified SSID under 2500 WLC as friendly into 9800 WLC and vice versa?

Is there any negative impach if i let as unclassified?

Re: Rogue AP

M02@rt37 — Mon, 03 Nov 2025 05:42:53 GMT

Mark the SSID from the other WLC as friendly on both sides...
If you leave it unclassified, you might see rogue AP reports ; but no direct trafic disruption.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_010110.pdf&ved=2ahUKEwi7hJTXotWQAxX7K_sDHRY2AYgQFnoECBwQAQ&usg=AOvVaw0KKZbm7qM0YFKdQ88pnyeS

Re: Rogue AP

hs08 — Mon, 03 Nov 2025 06:05:03 GMT

hi M02@rt37

But i get this error when adding the SSID on my 9800 WLC.

Re: Rogue AP

M02@rt37 — Mon, 03 Nov 2025 06:45:40 GMT

OK @hs08

Both WLC are in the same mobility domain ?

Re: Rogue AP

hs08 — Mon, 03 Nov 2025 06:51:50 GMT

Not because C9800 is not compatible with 2504 series.

Re: Rogue AP

M02@rt37 — Mon, 03 Nov 2025 06:56:29 GMT

So, 9800 already has that SSID locally ? If yes, you can’t mark it as friendly — it’s automatically trusted...

There is no negative impact to leave the 2504’s SSID as unclassified on the 9800 ; it causes no harm at all.

Devices will see 2 separate AP network broadcasting the same SSID and will connect to whichever has stronger signal, but not “roam” seamlessly between them...

Re: Rogue AP

HaiCa — Mon, 03 Nov 2025 07:28:19 GMT

Seen like you have configured rogue AP containment, ain't you?

You can't do it with your own SSID. To do it you may need to go to Monitoring > Wireless > Unclassified > Find the SSID make sure the MAC Address match the other Wireless system, click on it and classify it.

There no impact if you let it unclassified unless it become Malicious somehow based on your rouge/protection policy