Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

repeatative alert in WCS related to AP Impersonation

Hi Experts,

we have repeatative alerts related to AP impersonation

AP Impersonation of MACxx.xx.xx.xx.xx.xx' using source MAC yy.yy.yy.yy.yy.yy  is detected by authenticated AP '<AP name > ' on '802.11a' radio and Slot ID  '1'. - Controller Name: <controller name>

I am not able to understand this and it would be great help for me ,if anyone clarifies the recommanded action by cisco for this kind of alerts

whether to ?

1) delete

2) assign to me

3) clear

4) unassign

5) acknowledge

6) unacknowledge

Please put light on this ..................


Re: repeatative alert in WCS related to AP Impersonation

that error is telling you that the WLC is detecting a spoof of one of the 5GHz radios that is joined to it.

As to what you want to do with the alarm, you could delete it, and it will come back when the WLC detects the spoof again. If you assign it to you, then it should the alerting.

Either way, you should track down the AP that is spoofing your AP and remove it from your network.



Sent from Cisco Technical Support iPad App

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
CreatePlease login to create content