Hello everyone.
We've got huge issues with rogue AP's in our campus and I'm trying to find a way to automatically advise the users.
There's any way to automatically send an email to rogue clients?
I guess if I can parse the following show rogue client summary mac-address output, and then use Cisco Prime 3, to translate the MAC Adresses to the authenticated email it will work?
(wlc1) >show rogue client summary
Validate rogue clients against AAA............... Enabled
Validate rogue clients against MSE............... Disabled
Total Rogue Clients supported.................... 2500
Total Rogue Clients present...................... 7
MAC Address State # APs Last Heard
----------------- ------------------ ----- -----------------------
00:03:7f:00:00:00 Alert 1 Tue Nov 22 13:05:38 2016
00:16:44:11:89:02 Alert 1 Tue Nov 22 13:08:06 2016
08:37:3d:e9:92:87 Alert 1 Tue Nov 22 12:59:24 2016
64:5a:04:c1:cd:36 Threat 3 Tue Nov 22 13:08:11 2016
c0:11:73:05:52:45 Alert 3 Tue Nov 22 13:07:41 2016
d8:fc:93:a3:e1:43 Alert 1 Tue Nov 22 13:06:15 2016
dc:85:de:fc:98:31 Threat 4 Tue Nov 22 12:51:39 2016
I'm not sure if we can translate the MAC Adress to a txt file only with the authenticated username like
john@domain.com
bruno@domain.com
user@domain.com
(...)
Any other idea?
