Using The Cli To Enable Rogue Access Point Detection; Configuring Dynamic Rrm - Cisco OL-8335-02 Configuration Manual

Chapter 9 Configuring Radio Resource Management

Using the CLI to Enable Rogue Access Point Detection

Follow these steps to enable rogue access point detection using the CLI.
Make sure that each controller in the RF group has been configured with the same RF group name.
Step 1
Note
Enter config ap mode local Cisco_AP or config ap mode monitor Cisco_AP to configure this particular
Step 2
access point for local (normal) mode or monitor (listen-only) mode.
Repeat
Step 3
Enter config wps ap-authentication to enable rogue access point detection.
Step 4
Enter config wps ap-authentication threshold to specify when a rogue access point alarm is generated.
Step 5
An alarm occurs when the threshold value (which specifies the number of access point frames with an
invalid authentication IE) is met or exceeded within the detection period.
Note
Repeat
Step 6
Note

Configuring Dynamic RRM

The controller is preconfigured with factory default RRM settings designed to optimize radio
performance. However, you can modify the controller's dynamic RRM configuration parameters at any
time through either the GUI or the CLI.
You can configure these parameters on an individual controller that is not part of an RF group or on RF
Note
group members.
The RRM parameters should be set to the same values on every controller in an RF group. The RF group
Note
leader can change at any time. If the RRM parameters are not identical for all RF group members,
varying results can occur when the group leader changes.
OL-8335-02
The name is used to verify the authentication IE in all beacon frames. If the controllers have
different names, false alarms will occur.
Step 2 for every access point connected to the controller.
The valid threshold range is from1 to 255, and the default threshold value is 1. To avoid false
alarms, you may want to set the threshold to a higher value.
Step 4 and Step 5 on every controller in the RF group.
If rogue access point detection is not enabled on every controller in the RF group, the access
points on the controllers with this feature disabled are reported as rogues.
Cisco Wireless LAN Controller Configuration Guide
Configuring Dynamic RRM
9-15