You are here
WL0031 - WLC Rogue Detection and IDS (Part 2)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Wireless
The video discusses a topic of rogue device detection on Cisco Wireless LAN Controller. We will demonstrate how a rogue is detected, using Monitor Mode AP and WSM, and determined if it is connected to your corporate network. We will go through configuration of rogue classification and containment. The video closes with overview on wireless IDS. Wireshark captures are taken throughout the video to provide you with insight into protocol behavior.
Part 2 of the video covers RLDP and Rogue Detector AP
Topic:
- Rouge Detection
- Monitor Mode AP and Wireless Security Module (WSM)
- Rogue Location Discovery Protocol (RLDP)
- Rogue Detector AP
-
Rogue Classification
- Friendly, Malicious, Custom, Unclassified
- Manual and Auto Rogue Class Assignment
- Rogue Containment (Manual and Automatic)
- Wireless Intrusion Detection
- Wireless IDS Signature
- Wireshark Capture
2 comments
for AP in detector mode, must be trunk ?
Hi metha, thanks for video ->> For AP to work in detector mode, it must be trunk ?
for AP in detector mode, must be trunk ?
If you want wired detection, then yes, you need to trunk data VLAN you want to monitor to the AP.