ArubaOS and Controllers

Reply
Occasional Contributor II
Posts: 10
Registered: ‎09-07-2011

Detect Rogue behind a L3

Why the Aruba controller detects the Rogue AP behind a L3 (firewall), as Suspected Rogue. How to detect the device, as Rogue AP?

We have next map:
Aruba Controller from one network (for exaple, 192.168.0.0/24) connected to a L3-router with second network (for exaple, 199.166.0.0/24).
Rogue AP not detected as Rogue, but detected as Suspected rogue
Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Detect Rogue behind a L3

Which network is your AP on?

Your AP needs to be on the 199.166.0.0 network in order for it to detect it as Rogue, because it needs to see it both on the wireless and on the network. This is why I try to avoid putting access points on their own network in buildings. They really should reside on the common LAN.

Zach
Thanks,

Zach Jennings
Guru Elite
Posts: 21,270
Registered: ‎03-29-2007

Re: Detect Rogue behind a L3

Zjennings is right. You need either the controller or another AP to be connected to the same layer2 network as the router to classify an AP a rogue to see the wired mac address of that device. To see what "routers" the controller sees either on the same layer 2 subnet or same subnet of an AP you would use:


show wms wired-mac wireless-routers

or

show wms routers


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 10
Registered: ‎09-07-2011

Re: Detect Rogue behind a L3

Our AP and Rogue AP are in one network (199.166.0.0). And command "show wms routers" knows about the router.



(Aruba651) #show wms wired-mac wireless-device

Potential Wireless Device MACs
------------------------------
MAC Seen by (AP name or Controller)
--- -------------------------------
d8:c7:c8:c4:1f:2a 00:0b:86:cf:fe:a4
00:0b:86:65:fd:d0 00:0b:86:64:7a:50
Total:2

(Aruba651) #show wms routers

Potential Router MACs
---------------------
MAC Seen by (AP name or Controller)
--- -------------------------------
d8:c7:c8:c4:1f:2a 00:0b:86:cf:fe:a4
00:0b:86:65:fd:d0 00:0b:86:64:7a:50
Total:2


Search Airheads
Showing results for 
Search instead for 
Did you mean: