Our NAC system, Impulse SafeConnect, detects rogue AP's by using what they call "NAT Detection". If the gateway of the students computer does not match the gateway of the network, their IP (external one of the rogue router/AP) gets blocked with a message stating the following:
================= You are connected to the network through an unapproved device To connect to the Gordon college network, you must plug directly into the network through the port in your room, or be connected to the official campus wireless network. The official Gordon wireless networks include: .... ================= The students see this message, and learn that the devices are not allowed (and don't work), they then unplug them, getting rid of the rogue wireless signal. This has eliminated not only wireless rogues, but wired routers (which we also prohibit). -Mike From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[EMAIL PROTECTED] On Behalf Of Peter P Morrissey Sent: Saturday, August 23, 2008 8:11 PM To: [email protected] Subject: [WIRELESS-LAN] Roque AP's Has anyone had any success dealing with Rogue AP's? Is anyone else seeing a lot of them this year? We have 100% coverage in the dorms, and advertise this. We also constantly tell people not to put up rogues, but it is very challenging to control the rogues in our dorms. Pete Morrissey Syracuse University ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
