Wireless Access

 View Only
last person joined: 13 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Information Suspected Rogue

This thread has been viewed 5 times

  • 1.  Information Suspected Rogue

    Posted 2 hours ago
    I'm using Mobility Conductor, when I go to Security to see Suspected Rogues.
     
    I see another SSDI appear with information about Clients connecting to the AP and logs.
     
    I wonder why Aruba can get Clients and Events information of other APs.




  • 2.  RE: Information Suspected Rogue

    EMPLOYEE
    Posted 13 minutes ago

    That is part of the Wireless IDS features. The APs are scanning the environment and can see traffic 'in the air' between a client and a non-managed (rogue/interfering) access point.

    The message 'Valid Client Missassociateion to External AP' means that a client that has been connected to your network, now is connected to an SSID (Prolink_xxxx)/AP(90:61:0c:a5:xxxxx) that is not yours. So it's a security feature.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message