Trap logs in WLC

[mahesh18]

                   Hi everyone,

I see Trap logs in WLC

Rogue AP : 00:12:17:1a:33:3c removed from Base Radio MAC : 08:1f:f3:22:3c:70 Interface no:0(802.11b/g)
Rogue AP : 00:12:17:1a:33:3c detected on Base Radio MAC : 08:1f:f3:22:3c:70 Interface no:0(802.11b/g) on Channel 6 with RSSI: -85 and SNR: 8 and Classification: unclassified
Rogue AP : 00:12:17:1a:33:3c removed from Base Radio MAC : 08:1f:f3:22:3c:70 Interface no:0(802.11b/g)

Need to understand what does this log means?

Does it mean that there is someanother AP in the network and it has mac address of 0012:171a:333c?

I see these logs on  and off in WLC.

Regards

Mahesh

[Scott Fella · Accepted solution]

Anything that shows up as a rogue ap can be any 802.11 rf source and most likely is an access point.  If you look at the Monitor > Rogue> Unclassified AP's that will give you a list of aps that are not part of your wireless and is considered rogues.  This doesn't mean that its in your network, but it can be a neighboring access point from a business that is close to you, a home wireless or even a cellular hotspot.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[mahesh18]

Hi Scott,

I will try to trace this mac tomorrow.

So this is considered as Rogue because it is not registered to the WLC  Right?

Also this AP  can be of any vendor like non cisco?

Regards

Mahesh

[Scott Fella · Accepted solution]

That Mac is a radio Mac so you will not be able to see that on the wired side. Rogue AP's can also be Cisco AP's that are not part of your wireless network. Vendor wise, you would have to look that piece up if its unknown.

Sent from Cisco Technical Support iPhone App

[mahesh18]

Many thanks Scott

Regards

MAhesh