Using The Cli To Enable Rogue Access Point Detection In Rf Groups; Configuring Ccx Radio Management Features - Cisco 2100 Series Configuration Manual

Configuring CCX Radio Management Features

Using the CLI to Enable Rogue Access Point Detection in RF Groups

Using the controller CLI, follow these steps to enable rogue access point detection in RF groups.
Make sure that each controller in the RF group has been configured with the same RF group name.
Step 1
Note
Enter config ap mode local Cisco_AP or config ap mode monitor Cisco_AP to configure this particular
Step 2
access point for local (normal) mode or monitor (listen-only) mode.
Enter save config to save your settings.
Step 3
Repeat
Step 4
Enter config wps ap-authentication to enable rogue access point detection.
Step 5
Enter config wps ap-authentication threshold to specify when a rogue access point alarm is generated.
Step 6
An alarm occurs when the threshold value (which specifies the number of access point frames with an
invalid authentication IE) is met or exceeded within the detection period.
Note
Enter save config to save your settings.
Step 7
Repeat
Step 8
Note
Configuring CCX Radio Management Features
You can configure two parameters that affect client location calculations:
•
•
These parameters are supported in Cisco Client Extensions (CCX) v2 and higher and are designed to
enhance location accuracy and timeliness for participating CCX clients. See the
Client Extensions" section on page 6-39
For the location features to operate properly, the access points must be configured for normal, monitor,
or hybrid-REAP mode. However, for hybrid-REAP mode, the access point must be connected to the
controller.
CCX is not supported on the AP1030.
Note
Cisco Wireless LAN Controller Configuration Guide
11-36
The name is used to verify the authentication IE in all beacon frames. If the controllers have
different names, false alarms will occur.
Step 2 and Step 3 for every access point connected to the controller.
The valid threshold range is from1 to 255, and the default threshold value is 1. To avoid false
alarms, you may want to set the threshold to a higher value.
Step 5 through Step 7 on every controller in the RF group.
If rogue access point detection is not enabled on every controller in the RF group, the access
points on the controllers with this feature disabled are reported as rogues.
Radio measurement requests
Location calibration
Chapter 11 Configuring Radio Resource ManagementWireless Device Access
for more information on CCX.
"Configuring Cisco
OL-17037-01