Snmp Traps For Rogue Ap Events; Rogue Ap Syslog Messages - Symbol WS5000 Series System Reference Manual

7.1.0.6 SNMP Traps for Rogue AP Events

The WS5000 Series Switch supports two SNMP traps for capturing rogue AP data.
CcRapNewApprovedAp
The CcRapNewApprovedAp generates a trap whenever the switch finds and authorizes a new
AP. It generates a trap at the first instance when the AP is approved. It provides the ESSID and MAC
address of the approved AP.
• CcRapResultsApprovedPortalPtr
located.
• CcRapResultsApprovedHowFound: Traps information on how the rogue was detected
(over the air, AP scanning, wire scanning or MU scanning).
• CcRapResultsApprovedHowAuth: Traps information on how the was approved
• CcRapNewRogueAp
The CcRapNewRogueAp generates a trap when the switch determines that an AP is a rogue AP.
The trap provides ESSID and MAC address of the rogue AP.
• CcRapResultsRoguePortalPtr: Provides information on where the reporting AP is
located.
• CcRapResultsRogueHowFound: Traps information on how the rogue AP was detected
(over the air, AP scanning, wire scanning or MU scanning).

7.1.0.7 Rogue AP Syslog Messages

The WS5000 Series Switch logs a number of syslog events as rogue devices are encountered within the switch
managed network. The messages and event scenarios include:
Scenario
Rogue AP detection feature
is enabled/disabled
MU scan detection is
enabled/disabled
AP scan detection is
enabled/disabled
Detector AP scan is
enabled/disabled
AP is newly approved
AP is newly determined as
Rogue
Age out occurs for rogue AP
list
Age out occurs for Approved
list
A bit maps data, which hints where this AP is
:
Syslog Message
Rogue AP detection is enabled/disabled.
MU scan rogue AP detection is enabled/disabled.
AP scan detection is enabled/disabled.
Detector AP scan is enabled/disabled.
AP=<mac>, EssId=<essid> is detected and added to
"approved list."
AP=<mac>, EssId=<essid> detected and added to "rogue list."
Rogue AP list entries aged out and deleted from the rogue list.
Approved AP list entries aged out and deleted from the
approved list.
Configuring Rogue AP Detection
7-7