cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
261
Views
0
Helpful
1
Replies

Looking to tell what access point a client was attached to at a given time

RICH FRUEH
Level 1
Level 1

Is there any way to findout what AP a given IP address was attached to at a given time? For instance, we got a hit from our firewall log at 1:30am Sunday. We want to know which MAC had that IP at the time (need to know from WCS who t had given that IP to) and which AP it was associated with at the time.

Currently it's on one AP, but how do I know what it was on 24 hours ago? I've looked at the association history for the client, and the graph appears to be incorrect, since it's currently on AP "A" but it shows for the recorded history, including right now, it's associated with "B". One or the other of the datapoints is incorrect.

The WLC 4402 syslogs everything that I can get it to syslog, but the access points do not, since they consuend too many logging licenses. To get this information, will I need to get these APs logging as well, again?

Thanks for any advice,

Rich

1 Reply 1

Scott Fella
Hall of Fame
Hall of Fame

I believe you can get that information if you had location services. The applicance can stor information up to 30 days. I don't know if you can get that information form WCS, unless you generate reports every 30 minutes or every hour.... But I might be wrong.

-Scott
*** Please rate helpful posts ***
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: