Rogue AP

[hs08]

I have 2 WLC, one using 2500 series and another one using 9800 series and both WLC have same SSID.

Should i classified SSID under 2500 WLC as friendly into 9800 WLC and vice versa?

Is there any negative impach if i let as unclassified?

[M02@rt37]

Hello @hs08 

Mark the SSID from the other WLC as friendly on both sides...
If you leave it unclassified, you might see rogue AP reports ; but no direct trafic disruption.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_010110.pdf&ved=2ahUKEwi7hJTXotWQAxX7K_sDHRY2AYgQFnoECBwQAQ&usg=AOvVaw0KKZbm7qM0YFKdQ88pnyeS

[hs08]

hi M02@rt37 

But i get this error when adding the SSID on my 9800 WLC.

[M02@rt37]

OK @hs08 

Both WLC are in the same mobility domain ?

[hs08]

Not because C9800 is not compatible with 2504 series.

[M02@rt37 · Accepted solution]

So, 9800 already has that SSID locally ? If yes, you can’t mark it as friendly — it’s automatically trusted...

There is no negative impact to leave the 2504’s SSID as unclassified on the 9800 ; it causes no harm at all.

Devices will see 2 separate AP network broadcasting the same SSID and will connect to whichever has stronger signal, but not “roam” seamlessly between them...

[HaiCa]

Seen like you have configured rogue AP containment, ain't you?

You can't do it with your own SSID. To do it you may need to go to Monitoring > Wireless > Unclassified > Find the SSID make sure the MAC Address match the other Wireless system, click on it and classify it.

There no impact if you let it unclassified unless it become Malicious somehow based on your rouge/protection policy