[rancid] WLC - ignore 'rogue-ap'
Alex DEKKER
rancid at ale.cx
Fri Dec 12 22:47:55 UTC 2014
On 11/12/14 15:59, heasley wrote:
> Thu, Dec 11, 2014 at 01:27:28PM +1100, Annie Lee:
>> *rogue adhoc alert 01:04:00:14:43:61*
>>
>> Anyway to ignore that ??
> shouldn't you fix that, not ignore it? isnt that a legitimate problem?
>
IME these rogue alerts from WLCs are pointless - they're invariably
someone walking down the street with a hotspot enabled on their phone,
or an AP at the company next door, etc. The only time they would be of
any use is if you can guarantee none of your APs would ever be able to
hear such things outwith your premises.
Malicious rogue [something with your SSID but not part of your network]
alerts, on the other hand, are much more interesting.
alexd
More information about the Rancid-discuss
mailing list