topic It may be a bug -630937505 - in Wireless

AP Impersonation of MAC

Ezequiel Carvalho — Mon, 05 Jul 2021 08:29:52 GMT

This message appears in the log controllers and clients for a certain time are unrelated

AP Impersonation of MAC '08:d0:9f:ec:dc:a3' using source MAC '08:d0:9f:ec:dc:a3' is detected by authenticated AP 'ADM_FINANCEIRO' on '802.11b/g' radio and Slot ID '0'.

Could anyone help me?

Could be a bug. What version

Sandeep Choudhary — Wed, 10 Sep 2014 06:13:08 GMT

Could be a bug.

What version you running on WLC ?

Regards

Hello, thanks for answering

Ezequiel Carvalho — Wed, 10 Sep 2014 12:16:30 GMT

Hello, thanks for answering

Version controllers 7.6.130.0

Model 2504

AP Model AIR-LAP1142N-T-K9

Its look like a cosmetic bug

Sandeep Choudhary — Wed, 10 Sep 2014 12:45:41 GMT

Its look like a cosmetic bug.

Can you connect client to this AP / does it effect the network connectivity ?

There was a bug in earlier version:https://tools.cisco.com/bugsearch/bug/CSCsb90622

If its affecting the network connectivity then you must conatct with TAC.

Regards

Dont forget to rate helpful posts

Hi,Did you contacted TAC

Freerk Terpstra — Fri, 21 Nov 2014 14:47:38 GMT

Hi,

Did you contacted TAC about this issue? I'm running into the same issue with 7.6.130 code with 2600 AP's.

AP Impersonation of MAC '0c:27:24:12:34:56' using source MAC
'0c:27:24:12:34:56' is detected by authenticated AP 'XYX (same as the MAC address)' on
'802.11b/g' radio and Slot ID '0'.

Have you guys come up with

Christopher Calhoun — Tue, 17 Mar 2015 15:28:02 GMT

Have you guys come up with any resolution on this issue?

Thanks,

Chris

Chris, please check if your

Freerk Terpstra — Tue, 17 Mar 2015 21:36:39 GMT

Chris, please check if your current deployment is being effected with bug CSCup88910.

It may be a bug -630937505 -

Abhishek Abhishek — Wed, 25 Mar 2015 09:55:08 GMT

It may be a bug -

630937505 - AP impersonation flood of events on WLC 8510-SR14-00512

CSCup88910

Description

Symptom:
AP impersonation alarm are seen in PI, which are found to be false positive

Conditions:
Infrastructure MFP enabled
MFP based AP impersonation detection enabled
Rogue detection enabled.

Workaround:
Disable any of the configurations mentioned in the conditions above.

If it is due to configuration mismatch in AP, try to disable and enable Infra MFP configuration in all the controllers.

Further Problem Description:
Problem is likely to be due to
- malformed beacons coming out occasionally from the AP radio or
- incorrect MFP configuration in one or more AP
The output of show wps mfp statistics might show ' Infra Missing MFP IE 47 Beacon'