detecting a rogue standalone AP

[abukuru95]

Hi Guys, on my network, i have standalone AP's 1100 series. the problem is when i use network stumbler, there is one AP broadcasting at 99%

this is no where to be found. i tried checking on the swithces but not trace of this. it is kind of weird.

all the clients try getting to this AP so i cannot do roaming.because this AP is not even configured. i only see it broadcasting the SSID.

would this be a rogue AP ? how can i find this. it is emiting a mac address that i cannot trace on the network.

i tried shutting down switch port where all AP's are located, but it keeps broadcating.on my client Pc, i get ip 169......

any help would be greateful

[Jeffrey Keown]

hi, so does it appear as though the rogue ap is broadcasting your ssid?

If so, you should be able to see the ap's bssid, then identify the vendor for starters.

if netstumbler doesn't show you this, try inssider:

http://www.metageek.net/products/inssider/

you should be able to identify is general location by monitoring the rssi of the rogue as you move around with a laptop running net sumbler or inssider

[Leo Laohoo]

I've already responded to your other thread with the same topic.