WLC - 'Active Rogue Clients' and 'Adhoc Rogues'

Unanswered Question
Apr 20th, 2009

Under the 'Rogue Summary' on our WLCs we sometimes see some 'Active Rogue Clients' and 'Adhoc Rogues'.

I'm just wondering if this is 'FYI Only', or am I meant to do something with this information?

I've tried MAC Filtering and/or adding the offending MAC address to the 'Disabled Clients' list, but it doesn't seem to reduce/stop these 'Active Rogue Clients' or 'Adhoc Rogues'.

Any help/suggestions/clarifications welcome...

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)
Leo Laohoo Mon, 04/20/2009 - 21:56

Now this is a thorny issue.

AdHoc Rogues are hosts (like laptops, PDA's, printers) with their wireless turned on and attempting to connect to each other (without the use of an AP).

This is a thorny issue because it's hard to regulate users using a "free" spectrum.

In my network, I'd "contain" Rogues when I have verified that they are found WITHIN our building or premises. This is also the main reason why I'd recommend to disable auto-containment of Rogues (default) as you can detect Rogues from your WLC's even if the users are found OUTSIDE your building/premises.

If you plan to contain Rogues, make sure you have an approved written policy regarding the Rogues otherwise you might get yourself into trouble.

Hope this helps.

Actions

Login or Register to take actions

This Discussion

Posted April 20, 2009 at 9:12 PM
Stats:
Replies:1 Avg. Rating:
Views:3212 Votes:0
Shares:0
Tags: No tags.

Discussions Leaderboard