Cisco 2100 Series Configuration Manual page 290

Managing Rogue Devices
To classify a rogue access point as friendly, enter this command:
13.
config rogue ap classify friendly state {internal | external} ap_mac_address
where
Note
To mark a rogue access point as malicious, enter this command:
14.
config rogue ap classify malicious state {alert | contain} ap_mac_address
where
Note
To mark a rogue access point as unclassified, enter this command:
15.
config rogue ap classify unclassified state {alert | contain} ap_mac_address
Note
To specify how the controller should respond to a rogue client, enter one of these commands:
16.
To specify how the controller should respond to an adhoc rogue, enter one these commands:
17.
To save your changes, enter this command:
18.
save config
Cisco Wireless LAN Controller Configuration Guide
5-102
internal means that the controller trusts this rogue access point.
•
external means that the controller acknowledges the presence of this rogue access point.
•
A rogue access point cannot be moved to the Friendly class if its current state is Contain.
contain means that the controller contains the offending device so that its signals no longer
•
interfere with authorized clients.
alert means that the controller forwards an immediate alert to the system administrator for
•
further action.
A rogue access point cannot be moved to the Malicious class if its current state is Contain.
A rogue access point cannot be moved to the Unclassified class if its current state is Contain.
• config rogue client alert client_mac_address—The controller forwards an immediate alert to
the system administrator for further action.
config rogue client contain client_mac_address—The controller contains the offending device
•
so that its signals no longer interfere with authorized clients.
config rogue adhoc alert rogue_mac_address—The controller forwards an immediate alert to
•
the system administrator for further action.
config rogue adhoc contain rogue_mac_address—The controller contains the offending device
•
so that its signals no longer interfere with authorized clients.
config rogue adhoc external rogue_mac_address—The controller acknowledges the presence
•
of this ad-hoc rogue.
Chapter 5 Configuring Security Solutions
OL-17037-01