cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1919
Views
5
Helpful
2
Replies

How to get syslog message on rogue detection?

Hi there,

is there any way to get a syslog message from a WLC 55XX when a rogue is detected?

I don't want to contain them but I want to use this information in a SIEM.

Thanks,

Markus

2 Replies 2

Milos Megis
Level 3
Level 3

Hi,
I am not sure if it is what you want, but try following:
Login via GUI to WLC
Go to MANAGEMENT tab
SNMP
Trap Controls
Security tab
And in section Rogues check "Rogue AP".

I expect that you have properly configured syslog server.

alois.heilmaier
Level 1
Level 1
Have you tried Milos advice ?
I have this problem too.
Unfortunately WLC uses snmp traps as something like a "message bus.
Any further suggestions to get syslog messages from the WLC ?
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: