This message appears in the log controllers and clients for a certain time are unrelated
AP Impersonation of MAC '08:d0:9f:ec:dc:a3' using source MAC '08:d0:9f:ec:dc:a3' is detected by authenticated AP 'ADM_FINANCEIRO' on '802.11b/g' radio and Slot ID '0'.
Could anyone help me?
Its look like a cosmetic bug.
Can you connect client to this AP / does it effect the network connectivity ?
There was a bug in earlier version:https://tools.cisco.com/bugsearch/bug/CSCsb90622
If its affecting the network connectivity then you must conatct with TAC.
Dont forget to rate helpful posts
Did you contacted TAC about this issue? I'm running into the same issue with 7.6.130 code with 2600 AP's.
AP Impersonation of MAC '0c:27:24:12:34:56' using source MAC
'0c:27:24:12:34:56' is detected by authenticated AP 'XYX (same as the MAC address)' on
'802.11b/g' radio and Slot ID '0'.
It may be a bug -
AP impersonation alarm are seen in PI, which are found to be false positive
Infrastructure MFP enabled
MFP based AP impersonation detection enabled
Rogue detection enabled.
Disable any of the configurations mentioned in the conditions above.
If it is due to configuration mismatch in AP, try to disable and enable Infra MFP configuration in all the controllers.
Further Problem Description:
Problem is likely to be due to
- malformed beacons coming out occasionally from the AP radio or
- incorrect MFP configuration in one or more AP
The output of show wps mfp statistics might show ' Infra Missing MFP IE 47 Beacon'