topic Rogue device spoofing or targeting AP 'xxx' BSSID on '802.11b/g' in Wireless

Rogue device spoofing or targeting AP 'xxx' BSSID on '802.11b/g' radio.

mdaigle — Sun, 04 Jul 2021 06:00:49 GMT

I am getting these alerts Message: AP 'xxx' is being contained. This is due to rogue device spoofing or targeting AP 'xxx' BSSID on '802.11b/g' radio. - Controller

The controllers are wism with 7.0.235.0 code and AP's are 1142.

Can anyone advise on it it's false alarm.

Rogue device spoofing or targeting AP 'xxx' BSSID on '802.11b/g'

Saravanan Lakshmanan — Fri, 09 Nov 2012 22:33:50 GMT

Do you see the Rogue MAC address, are they belong to your own infrastructure or not.

Wireless packet capture should tell what's going on. Mostly you may see cisco AP's MAC is spoofed by Rogue AP to do deauth attack, so check the RSSI of the source and see how many nearby APs are being attacked.

Rogue device spoofing or targeting AP 'xxx' BSSID on '802.11b/g'

Amjad Abdullah — Wed, 17 Jan 2018 06:37:20 GMT

What that means is: There are some nearby APs using same MAC Address as one of your WLAN mac addresses.

Why that happens? This is usually a kind of security measure Wireless Networks use to contain un-trusted neighbor WiFi networks.

So, if you can see there are rogue APs on your WLC then this is probably the case. Try to contact the administrators of the neighbor WLANs and tell them to consider your network as a friendly one so their network stops containing your APs.

HTH

Amjad