Wcs Interaction; Configuring Rldp; Using The Gui To Configure Rldp - Cisco 2100 Series Configuration Manual

Managing Rogue Devices

WCS Interaction

WCS software release 5.0 or later also supports rule-based classification. WCS uses the classification
rules configured on the controller. The controller sends traps to WCS after the following events:
•
•

Configuring RLDP

You can configure RLDP to detect and automatically contain rogue devices using the controller GUI or
CLI.

Using the GUI to Configure RLDP

Using the controller GUI, follow these steps to configure RLDP.
Click Security > Wireless Protection Policies > Rogue Policies > General to open the Rogue Policies
Step 1
page (see
Figure 5-41 Rogue Policies Page
Choose one of the following options from the Rogue Location Discovery Protocol drop-down box:
Step 2
•
•
•
Cisco Wireless LAN Controller Configuration Guide
5-84
If an unknown access point moves to Friendly for the first time, the controller sends a trap to WCS
only if the rogue state is Alert. It does not send a trap if the rogue state is Internal or External.
If a rogue entry is removed after the timeout expires, the controller sends a trap to WCS for rogue
access points categorized as Malicious (Alert, Threat) or Unclassified (Alert). The controller does
not remove rogue entries with the following rogue states: Contained, Contained Pending, Internal,
and External.
Figure 5-41).
Disable—Disables RLDP on all access points. This is the default value.
All APs—Enables RLDP on all access points.
Monitor Mode APs—Enables RLDP only on access points in monitor mode.
Chapter 5 Configuring Security Solutions
OL-17037-01