I have recently deployed a 4400 WLC, together with 5-6 Aironet 1000 Lightweight AP in our office premises.
I have configured these AP as air monitor, and plant a test "rouge AP" with no WEP (broadcast SSID) and open authentication wihin the vicinity of the lightweight APs. The test "rouge AP" was physcially connected to the same wired network as the WLC & air-monitor.
Result: The Lightweight APs was able to pick up the the planted test "rouge AP" but unable to determine if these rouge devices is physically connected to our wired network.
The Cisco 1000 series lightweight access points and Cisco Wireless LAN Controllers can perform rogue access point detection and containment while providing regular service. The rogue access point detection is performed across all 801.11 channels, regardless of the Country Code selected. I guess there is some issue with the configuration. Can you recheck the configuration.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...
I have created a Powershell script to automatically add a Wireless Guest
User on Cisco WLCs. (tested on 2500 Series) The script should be
completely self explanatory. Prerequisites: Powershell SNMP Module
(Install-Module -Name SNMP) SNMP Write Access to y...