Hello,
As you know lightweight APs can be configured in several special-purpose modes, one of them is the Monitor Mode which provide us rogue AP detection, but on the other hand we have Rogue Mode which seems to have the same ability ... so why would we use Rogue Mode if we have the same ability with Monitor Mode?
I don't know if there is something deeper that I'm missing but I have this doubt after studying both concepts in CCNA 200-301 (definitions in the pictures below)
Reference:
CCNA 200-301 OGC, Page 647
Monitor: The AP does not transmit at all, but its receiver is enabled to act as a dedicated
sensor. The AP checks for IDS events, detects rogue access points, and determines the
position of stations through location-based services.
Rogue detector: An AP dedicates itself to detecting rogue devices by correlating MAC
addresses heard on the wired network with those heard over the air. Rogue devices are
those that appear on both networks.
I would appreciate your help!