AP Impersonation on DNA Center Wireless Assurance

[leanhquy10]

I have WLC and more AP running. 

Clip below

https://www.youtube.com/watch?v=NsMqUsVUTeo&t=303s

When assign WLC to site, I see AP impersonation: Enable. I wonder if assign WLC to site have effect to AP running.

[Flavio Miranda]

Hi

 It does not. I did it many times and no change is applied to the AP when adding the WLC to a site.

AP Impersonation is a kind of Rogue AP.  Like some rogue AP would be pretending to be  one of your APs.

The available classification types for Rogue AP are:

• Beacon Wrong Channel

• Beacon DS Attack

• AP Impersonation

• Allowed List

• Rogue on wire

• Honeypot

• Interferer

• Allowed Vendor

• Friendly

• Neighbor

• Custom Rule Name

[leanhquy10]

Thank you. Are you sure? I hope you are right

[Flavio Miranda]

Yes I am sure because I did and I do it frequently.  I´ve been working in a company where DNAC had been deployed recently and they are migrating all WLC to DNAC. So, this is pretty much straitforward.

[leanhquy10]

Thank for help. Have a good day

[leanhquy10]

But, Purpose I assign WLC, AP  to the site to POC Assurance Wireless. Then maybe I will remove WLC, AP from DNA Center. In this case, no effect to WLC and AP running

[Flavio Miranda]

Assurance is meant to capture KPIs for dashboard monitoring only. You can add and or remove with no risk.

In order for the DNAC be able to actually change config on the WLC, you need to discovery the WLC on the DNAC using credentials and create templates and apply templates.

Assurance will use basically SNMP to reading information from WLC. On this scenario, DNAC will act mostly like the Cisco Prime.

[leanhquy10]

In this case, I just discovery WLC and AP assign to the site ( not provision AP, WLC to the site)

Discovery WLC must credential (SSH), SNMP, netconf port 830 then discovered success I will assign WLC to the site.

[Flavio Miranda]

No change will be performed on the WLC by adding it to the DNAC and assigning to a site for assurance. I can assure you.

You can follow this guide for reference.

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-assurance/2-2-3/b_cisco_dna_assurance_2_2_3_ug/b_cisco_dna_assurance_2_2_3_ug_chapter_011.html#task_B51E4C14F4F44FBCAD942306C195019D

[leanhquy10]

Hi Flavio,

I want to get information as image attached.

I just assign WLC to a site or must assign both WLC and AP to DNA Center get more information of client.

Now, I just assign WLC to a site no more information of client.