r_mon_gen_rogues

Available Languages

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Monitoring Rogues

Monitoring Rogues

Choose Monitoring > Wireless > Rogues to view details on friendly rogues, malicious rogues, unclassified rogues, custom rogues, rogues in the Ignore List, rogue clients, and adhoc rogues:

ClosedFriendly

To view details of a friendly rogue, click the MAC Address parameter.

Parameter Description
MAC Address The MAC address of the rogue access point.
#Detecting Radios The number of Cisco radios that detect the rogue access point radio.
Number of Clients The number of clients associated with the rogue access point.
Status

The status of the automatic and configurable state of the radio relative to the network or device. Values are as follows:

  • Internal—The unknown access point is inside the network and poses no threat to WLAN security. For example, the access points in your lab network is an internal rogue access point.
  • External—The unknown access point is outside the network and poses no threat to WLAN security. For example, the access points that belong to a neighboring coffee shop are external rogue access points.
  • Alert—The unknown access point is not in the neighbor list or in the user-configured friendly MAC list.
  • Pending
  • Contained—The unknown access point is contained by the device so that its signals no longer interfere with authorized clients.
Last Heard The time duration when the radio was last heard.
SSID (Max RSSI) The maximum RSSI value that rogues should have for APs to detect.
Last Channel The last channel of the rogue access point radio.
ClosedMalicious

To view details of a malicious rogue, click the MAC Address parameter.

Parameter Description
MAC Address The MAC address of the rogue access point.
#Detecting Radios The number of Cisco radios that detect the rogue access point radio.
Number of Clients The number of clients associated with the rogue access point.
Status

The status of the automatic and configurable state of the radio relative to the network or device. Values are as follows:

  • Internal—The unknown access point is inside the network and poses no threat to WLAN security. For example, the access points in your lab network is an internal rogue access point.
  • External—The unknown access point is outside the network and poses no threat to WLAN security. For example, the access points that belong to a neighboring coffee shop are external rogue access points.
  • Alert—The unknown access point is not in the neighbor list or in the user-configured friendly MAC list.
  • Pending
  • Contained—The unknown access point is contained by the device so that its signals no longer interfere with authorized clients.
Last Heard

The time duration when the radio was last heard.
SSID (Max RSSI) The maximum RSSI value that rogues should have for APs to detect.
Last Channel The last channel of the rogue access point radio.
ClosedUnclassified

To view details of an unclassified rogue, click the MAC Address parameter.

Parameter Description
MAC Address The MAC address of the rogue access point.
#Detecting Radios The number of Cisco radios that detect the rogue access point radio.
Number of Clients The number of clients associated with the rogue access point.
Status

The status of the automatic and configurable state of the radio relative to the network or device. Values are as follows:

  • Internal—The unknown access point is inside the network and poses no threat to WLAN security. For example, the access points in your lab network is an internal rogue access point.
  • External—The unknown access point is outside the network and poses no threat to WLAN security. For example, the access points that belong to a neighboring coffee shop are external rogue access points.
  • Alert—The unknown access point is not in the neighbor list or in the user-configured friendly MAC list.
  • Pending
  • Contained—The unknown access point is contained by the device so that its signals no longer interfere with authorized clients.
Last Heard

The time duration when the radio was last heard.
SSID (Max RSSI) The maximum RSSI value that rogues should have for APs to detect.
Last Channel The last channel of the rogue access point radio.
ClosedCustom

To view details of a custom rogue, click the MAC Address parameter.

Parameter Description
MAC Address The MAC address of the rogue access point.
#Detecting Radios The number of Cisco radios that detect the rogue access point radio.
Number of Clients The number of clients associated with the rogue access point.
Status

The status of the automatic and configurable state of the radio relative to the network or device. Values are as follows:

  • Internal—The unknown access point is inside the network and poses no threat to WLAN security. For example, the access points in your lab network is an internal rogue access point.
  • External—The unknown access point is outside the network and poses no threat to WLAN security. For example, the access points that belong to a neighboring coffee shop are external rogue access points.
  • Alert—The unknown access point is not in the neighbor list or in the user-configured friendly MAC list.
  • Pending
  • Contained—The unknown access point is contained by the device so that its signals no longer interfere with authorized clients.
Last Heard

The time duration when the radio was last heard.
SSID (Max RSSI) The maximum RSSI value that rogues should have for APs to detect.
Last Channel The last channel of the rogue access point radio.
ClosedIgnore List

Displays the list of rogue clients that are ignored.

ClosedRogue Clients

To view details of a rogue client, click the MAC Address parameter.

Parameter Description
MAC Address The MAC address of the rogue access point.
#Detecting Radios The number of Cisco radios that detect the rogue access point radio.
Last Seen On The last time that the Cisco access point detected the rogue access point client.
Status

The status of the automatic and configurable state of the radio relative to the network or device. Values are as follows:

  • Internal
  • External
  • Alert
  • Pending
  • Contained
ClosedAdhoc Rogues

To view details of an adhoc rogue, click the MAC Address parameter.

Parameter Description
MAC Address The MAC address of the rogue access point.
BSSID The MAC address of the Cisco access point.
Number of APs The number of ad-hoc rogue access points in the network.
Classification The classification that needs to be applied to the rogue access points.
Last Heard The time duration when the radio was last heard.
Status

The status of the automatic and configurable state of the radio relative to the network or device. Values are as follows:

  • Internal—The unknown access point is inside the network and poses no threat to WLAN security. For example, the access points in your lab network is an internal rogue access point.
  • External—The unknown access point is outside the network and poses no threat to WLAN security. For example, the access points that belong to a neighboring coffee shop are external rogue access points.
  • Alert—The unknown access point is not in the neighbor list or in the user-configured friendly MAC list.
  • Pending
  • Contained—The unknown access point is contained by the device so that its signals no longer interfere with authorized clients.
SSID (Max RSSI) The maximum RSSI value that rogues should have for APs to detect.
Last Channel The last channel of the rogue access point radio.

 

© 2018 Cisco Systems, Inc. All rights reserved.

 

Was this Document Helpful?

FeedbackFeedback

Contact Cisco