Detect Rogue AP connects to switch on wired 802.1x deployment

[sreng]

Hi Team,

I would like to seek guidance with best practices and recommendations on how we can detect rogue AP connect to a switch on a wired 802.1x deployment.

Regards,

Sreng

[Flavio Miranda]

Hi

  The best way to detect rogues APs is on the Air interface. The WLC alarms everytime it sees a rogue AP.  If you have Prime you can take reports on it and see realtime alarms on the dashboard.

But, if you mean rogue AP on the wired network, if you have 802.1x,  a rogue AP should not be able to connect to the wired network unless you ISE is wrongly configured.

[Leo Laohoo]

---

@sreng wrote:

how we can detect rogue AP connect to a switch

---

You don't. 
Disable (or hunt down) rogue APs when they show up in the controller.