Airwave RAPIDs shows few rogue APs name as locally-ad instead of proper vendor mac name?
A:
Airwave have list of OUIs of different vendors, we could get the list of available vendor in oui_data.csv file.
Path to oui_data.csv file is /root/svn/mercury/lib/perl/Mercury/OUI/updates/ directory.
If discovered rogue device mac OUI is not listed in the oui_data.csv file it marks the device name as Locally Ad
Example 1,
In below screen shot, we could see Rogue MAC OUI 02:18:1A is not listed in oui_data.csv file. It marked the device name as Locally Ad -D3:C3:10
Example 2
In below screen shot, we could see Rogue MAC OUI 00:18:0A is listed in oui_data.csv file and it shows proper vendor name Meraki, ln-D3:C3:10
The oui_data.csv is updated with Airwave upgrade. Hence running latest Airwave version is recommended for getting the right vendor name for discovered rogues.
