Rogue containment

[pnagpal]

Hello All,

How do you manage rogue APs in your setup? I know we can do this easily for wired rogues, how do you manage un-wired rogues especially user's mobile and other items acting as hotspot.

I am sorry if this is asked already.

Thanks,

Pulkit

[Scott Fella]

All this is done manually. You shouldn't have rogue containment on and RLDP really should be disabled on client access APs. If you have the time to look for these and hunt them down, then that is what you need to do. To be honest, you can't prevent people from bringing in their own hotspot especially now when a phone can be a hotspot.

Sent from Cisco Technical Support iPhone App

[Shaoqin Li]

what you can do is first classify them. As Scott said RLDP is better running on monitor mode APs.

unless you see some hostile entries like broadcasting same ssid, you primarily need first know how many/ what is constructing the rogue environment.

Sent from Cisco Technical Support iPad App

[Mark Sullivan]

Since you guys appear to be running RLDP on monitor mode AP's only, can I take it you are successfully running SPT from an access point to detect rogues. What type of Access switches are you using?

found a document

http://www.cisco.com/en/US/customer/docs/wireless/prime_infrastructure/1.3/configuration/guide/admin.html#wp1603927 stating only the following switches are supported: 3750, 3560, 3750E, 3560E, and 2960.

Reason I ask, we're having issues with detection of wired rogue AP's

[katerina.dardoufa]

Hello to all,

years after the initial thread begun, I am having trouble with the detection of wired rogue AP. The rogue AP is detected, as a friendly AP, by an AP in one of our buildings, but SPT running on Prime Infrastructure 3.5 shows it to be connected to a switch in another building.

Any ideas?

[patoberli]

You might be missing some switches in PI. If the intermediate switches are missing (or unreachable from PI), then it probably shows the "next best" switch.

[Ravi Singh]

Please see the below link for managing and detecting rouge AP in your network

http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080b40901.shtml

[Mark Sullivan]

Thanks, I'll review