[rancid] WLC - ignore 'rogue-ap'

Alex DEKKER rancid at ale.cx
Fri Dec 12 22:47:55 UTC 2014


On 11/12/14 15:59, heasley wrote:
> Thu, Dec 11, 2014 at 01:27:28PM +1100, Annie Lee:
>> *rogue adhoc alert 01:04:00:14:43:61*
>>
>> Anyway to ignore that ??
> shouldn't you fix that, not ignore it?  isnt that a legitimate problem?
>

IME these rogue alerts from WLCs are pointless - they're invariably 
someone walking down the street with a hotspot enabled on their phone, 
or an AP at the company next door, etc. The only time they would be of 
any use is if you can guarantee none of your APs would ever be able to 
hear such things outwith your premises.

Malicious rogue [something with your SSID but not part of your network] 
alerts, on the other hand, are much more interesting.

alexd


More information about the Rancid-discuss mailing list