cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
353
Views
0
Helpful
1
Replies

APs being Rogue Contained

tdorsey123
Level 1
Level 1

Not sure why it's so prolific now, but more than a few companies have reached out to me because their WAPs are being contained by nearby neighbors via MAC spoofing.  Anyone have a preferred way to hunt this kind of thing down?  I know Fluke has one of their scanners with directional antennas but is there another way to find the containment system?(Assume that the APs being contained don't provide clues to direction and customer is too lazy to go pamphlet their neighbors)

1 Accepted Solution

Accepted Solutions

ali aqrabawi
Level 3
Level 3

no way to avoid this without asking the neighbors to correct their settings ,

i believe the containment rule they have is RSSI threshold , which is not controllable and could varies from time to time ,  if the neighbors have this rule they should correct this , also they shuold 

know that containment is illegal on other network unless its attacker/milisous AP , i think this should be enough to convince them :-)

View solution in original post

1 Reply 1

ali aqrabawi
Level 3
Level 3

no way to avoid this without asking the neighbors to correct their settings ,

i believe the containment rule they have is RSSI threshold , which is not controllable and could varies from time to time ,  if the neighbors have this rule they should correct this , also they shuold 

know that containment is illegal on other network unless its attacker/milisous AP , i think this should be enough to convince them :-)

Review Cisco Networking products for a $25 gift card