08-19-2014 02:17 AM
Is there any way to acertain why a controller has decided to classify an AP as a Rogue?
A whole bunch of a neighbouring organisation's APs get picked up on our WLAN and most of them get identified as "Suspected Neighbour" , however some are identified as "Rogues" with 100 % confidence. (And occasnally 20%). Our info-security team have asked me to investigate why that is - I'm pretty confident it's a false alarm, but am not sure there is any way I can find out.
08-19-2014 03:25 AM
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
08-19-2014 03:51 AM
08-19-2014 04:06 AM - edited 08-19-2014 04:07 AM
Controller classifications, apologies.
Airwave has classified them all as Rogues as they are broadcasting a shared SSID of ours. It's the ones the controllers have classified as rogues I am looking to clarify.
08-19-2014 05:04 AM
Copying and pasting an answer from before..
Try show wms rogue-ap <bssid>
Aruba Customer Engineering
Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base
08-19-2014 07:23 AM
eljay, be sure to read this doc: http://community.arubanetworks.com/aruba/attachments/aruba/ControllerBasedWLANs/47/2/PDFRogueAPGuide.pdf
This explains quit a bit to get a proper understanding.
-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.