MAC address spoof/takeover

[sigquitxx]

Is there any way to figure out if a MAC address takeover has happened on one of your access points? Something similar to checking on a switch if the same IP/MAC pair is broadcasted on two separate ports.

Thanks,

Octavian

[dennischolmes]

If you are using a WLC controller you will get an IDS signature alert stating a duplicate mac address from one of your APs.