Looking to tell what access point a client was attached to at a given time

Unanswered Question
Jun 30th, 2008
User Badges:

Is there any way to findout what AP a given IP address was attached to at a given time? For instance, we got a hit from our firewall log at 1:30am Sunday. We want to know which MAC had that IP at the time (need to know from WCS who t had given that IP to) and which AP it was associated with at the time.

Currently it's on one AP, but how do I know what it was on 24 hours ago? I've looked at the association history for the client, and the graph appears to be incorrect, since it's currently on AP "A" but it shows for the recorded history, including right now, it's associated with "B". One or the other of the datapoints is incorrect.

The WLC 4402 syslogs everything that I can get it to syslog, but the access points do not, since they consuend too many logging licenses. To get this information, will I need to get these APs logging as well, again?

Thanks for any advice,


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Scott Fella Mon, 06/30/2008 - 19:53
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 Wireless

I believe you can get that information if you had location services. The applicance can stor information up to 30 days. I don't know if you can get that information form WCS, unless you generate reports every 30 minutes or every hour.... But I might be wrong.


This Discussion



Trending Topics: Other Wireless Mobility

client could not be authenticated
Network Analysis Module (NAM) Products
Cisco 6500 nam
reason 440 driver failure
Cisco password cracker
Cisco Wireless mode