Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Locating the physical location of a Rogue AP

I have a situation where there appears to either be a rogue AP in one of our buildings or it is an AP that was missed when we were coverting them over to lightweight mode because it has the same SSID that we are using and is Cisco but my AP's are not finding it friendly.

I would like to try and find this AP, while WCS has given me a good idea on the location, I am looking for software for my laptop that could help me narrow it down even more.

Is there some software that will show all of the access points that my laptop sees as well as their mac address and strenght? I think a wireless site survey tool might work. But, I dont think I can use Cisco's since I will be using a lenovo laptop with its built in wireless card. Does anyone have some recommendations on some software for this task?

Thanks

7 REPLIES
Hall of Fame Super Silver

Re: Locating the physical location of a Rogue AP

Why don't you download netstumbler and use that to track the AP down. It's free and shows the signal strength.

-Scott
*** Please rate helpful posts ***
New Member

Re: Locating the physical location of a Rogue AP

Netstumbler helped me find the AP. Although it looks like the wireless card on my lenovo with a Intel 4965AGN doesnt work very good with Netstumbler. However my co-workers laptop worked perfect for it.

New Member

Re: Locating the physical location of a Rogue AP

If you want a Cisco's tool take a look for Cisco Spectrum Expert tool. It's a good toolkit but you need to buy with a PCMCIA CARD by Cognio (Cisco bought Cognio).

http://www.cisco.com/en/US/products/ps9393/index.html

Re: Locating the physical location of a Rogue AP

I have cognio -- great tool. $4K.

Wont find devices like that.

If you have to do this a lot Berkeley Varitronics make some great devices - http://www.bvsystems.com/Products/WLAN/WLAN.htm I have a yellow jacket and it works like a sonar device in locating things .. along with other functionality.

Cognio, BV and Cace Technology`s USB adaptors ( wireshark folks ) are the 3 tools I find best. Shown in reverse order of cost.

But anyway ... you should get rogue report info that shows what other APs are hearing it.

Do some triangulation ....

New Member

Re: Locating the physical location of a Rogue AP

If you have

Cisco network switches you can use the Network Assistant to do a ping and trace to its IP address and it will tell you what switch to what switch it travels through. You can then identify which port on the switch and track it from there.

Gay

New Member

Re: Locating the physical location of a Rogue AP

Depending on financial constraints etc either buy a good survey software, either Ekahau or AirMagnet or use the WCS. With floor plans etc it will capture all mac addresses etc and will allow you to record the ongoing condition of your WLAN on a regular basis

Gold

Re: Locating the physical location of a Rogue AP

AFIK you can do this in three ways basically.

1) buy a directional antenna and start sweeping

2) make a directional antenna and start sweeping.

3) if you have severals base stations in the surroundings you can get the general idea of what area to look in by checking the signal streangth of the rouge AP in the different APs. just map it out in a building/surrounding area type of map.

I would look at a directional antenna and cover the ground quickly to find the rouge ap. netstumbler helps out alot.

is the keys and encryptions correct on the rouge AP ? then its probably one you have missed or a serious try to break in to your company.

then just look in your installment plans and check wich one is in that location that you do not have control over.

just some thoughts.

Good luck.

267
Views
5
Helpful
7
Replies
CreatePlease login to create content