Unfortunately I don't recall the details of how Cisco's WCS (Unified Wireless System, or former Airespace) product performs the wireside rogue detection and not having implemented it myself, it was not imprinted in my memory. =)
The wireless portion of the rogue detection is a lot simpler: AP's scan the air for short intervals, listening for traffic that originates from an AP not part of the system and not set to be ignored. Then using their triangulation/fingerprinting techniques, Cisco reports the location in the GUI. Frank -----Original Message----- From: King, Michael [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 21, 2006 11:36 AM To: [email protected] Subject: Re: [WIRELESS-LAN] lwapp "rogue detector mode" AP configuration Hi Todd, I think your talking about the Rogue Location Discovery Protocol. >From what I remember (and Hopefully Frank Bulk will jump in here), the AP will try to connect to the rogue AP, and if it get's an IP address that it recognizes, it gives it an increased precedence. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
