Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

AP being contained by own access points

Hi,

We've recently installed 802.11ac Wave 1 modules in our 3600 series APs. On 3 (of12) we're seeing containment messages indicating that the ap is being contained (see below) this appears to resolve itself after a couple of minutes, it's always the 3 below but not always at the same time, ap35 and ap36 are near each other.

1. Message: AP 'ap36' is being contained. This is due to rogue device spoofing or targeting AP 'ap36' BSSID on '802.11a' radio.

2. Message: AP 'ap48' is being contained. This is due to rogue device spoofing or targeting AP 'ap48' BSSID on '802.11a' radio.

1. Message: AP 'ap35' is being contained. This is due to rogue device spoofing or targeting AP 'ap35' BSSID on '802.11a' radio.

 

We're running 7.6.120.0 on the controllers, not sure how to resolve this, it show's the APs MAC address as being spoofed.

Any ideas?

Thanks

Ben

1 ACCEPTED SOLUTION

Accepted Solutions

You're almost certainly

You're almost certainly hitting:

https://tools.cisco.com/bugsearch/bug/CSCuo60383

Symptom:
The 3602 may try to contain its own radio interface if it has an RM3000AC module is install. You will see messages on Prime infrastructure about this containment. It does not appear to cause any connectivity issues other than the message.

Conditions:
Ap3602 with an RM3000AC module installed

Workaround:
None

Known Affected Releases:
(2)
7.6(121.0)
7.6(100.22)
Known Fixed Releases:
(3)
8.0(72.235)
8.0(72.236)
7.6(122.16)

 

Hopefully 7.6MR3 isn't too far away...

 

6 REPLIES
VIP Purple

Hi,Looks like that Some other

Hi,

Looks like that Some other AP is using the BSSID of your AP and sending deauth.

1. If you have multiple Controllers , Make sure all are configured with the same RF group.

2. Find out the system containing this access point. might need to use a wireless sniffer/trace.

 

Regards

New Member

Hi.We have 3 controllers all

Hi.

We have 3 controllers all in the same group, it only seems to have happened since installing the AC wave 1 modules. We'll do some further troubleshooting, I doubt we have an another ap trying to contain ours.

Ben

You're almost certainly

You're almost certainly hitting:

https://tools.cisco.com/bugsearch/bug/CSCuo60383

Symptom:
The 3602 may try to contain its own radio interface if it has an RM3000AC module is install. You will see messages on Prime infrastructure about this containment. It does not appear to cause any connectivity issues other than the message.

Conditions:
Ap3602 with an RM3000AC module installed

Workaround:
None

Known Affected Releases:
(2)
7.6(121.0)
7.6(100.22)
Known Fixed Releases:
(3)
8.0(72.235)
8.0(72.236)
7.6(122.16)

 

Hopefully 7.6MR3 isn't too far away...

 

New Member

Hi,This was supposed to be

Hi,

This was supposed to be fixed but is still occurring, new bug CSCur22714, how do we get a hold of 7.6.130.19? The alerts are quite annoying...

Thanks
Ben

New Member

Hi,I suspect this to be some

Hi,

I suspect this to be some kind of bug, the AP is detecting the other radio but it shouldn't. With a Wave 1 module installed it uses the same MAC address for both a/n/ac radios and I suspect this is the issue, this shows up in Prime and on the controller. Will have to get a TAC case opened.

Ben

Gold

http://www.google.co.in/url

http://www.google.co.in/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&cad=rja&uact=8&ved=0CCwQFjAC&url=http%3A%2F%2Fwww.cisco.com%2Fc%2Fdam%2Fen%2Fus%2Ftd%2Fdocs%2Fwireless%2Fprime_infrastructure%2F1-3%2Fconfiguration%2Fguide%2FCPI_Alarms_Events.xls&ei=9g...

 

AP_CONTAINED_AS_ROGUEbsnAPContainedAsARogueAP contained as rogueAP_CONTAINED_AS_ROGUE_YES: AP ''{bsnAPIdentifier}'' is being contained. This is due to rogue device spoofing or targeting AP ''{ bsnAPIdentifier }'' BSSID on ''{ radioType }'' radio.

AP_CONTAINED_AS_ROGUE_NO: AP ''{ bsnAPIdentifier }'' with protocol ''{radioType}'' on Controller ''{senderIP}'' is no longer being contained. Service is restored.
An access point is reporting that it is being contained as a rogueCriticalRogue APAnother system is containing this access point. Identify the system containing this access point. You might need to use a wireless sniffer.WCS 2.0
760
Views
0
Helpful
6
Replies