Skip to content

Instantly share code, notes, and snippets.

@TomTasche
Created November 29, 2011 15:45
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save TomTasche/1405244 to your computer and use it in GitHub Desktop.
Save TomTasche/1405244 to your computer and use it in GitHub Desktop.
List rogue networks of a Cisco Access Point and inspect them in detail.
!taken from http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080b40901.shtml
(Cisco Controller) >show rogue ap summary
Rogue on wire Auto-Contain....................... Disabled
Rogue using our SSID Auto-Contain................ Disabled
Valid client on rogue AP Auto-Contain............ Disabled
Rogue AP timeout................................. 1200
MAC Address Classification # APs # Clients Last Heard
----------------- ------------------ ----- --------- -----------------------
00:14:1b:5b:1f:90 Unclassified 1 0 Thu Jun 10 19:04:51 2010
00:14:1b:5b:1f:91 Unclassified 1 0 Thu Jun 10 18:58:51 2010
00:14:1b:5b:1f:92 Unclassified 1 0 Thu Jun 10 18:49:50 2010
00:14:1b:5b:1f:93 Unclassified 1 0 Thu Jun 10 18:55:51 2010
00:14:1b:5b:1f:96 Unclassified 1 0 Thu Jun 10 18:58:51 2010
00:17:df:a9:08:00 Unclassified 1 0 Thu Jun 10 18:49:50 2010
00:17:df:a9:08:10 Unclassified 1 0 Thu Jun 10 18:55:51 2010
00:17:df:a9:08:11 Unclassified 1 0 Thu Jun 10 19:04:51 2010
00:17:df:a9:08:12 Unclassified 1 0 Thu Jun 10 18:49:50 2010
00:17:df:a9:08:16 Unclassified 1 0 Thu Jun 10 19:04:51 2010
(Cisco Controller) >show rogue ap detailed 00:14:1b:5b:1f:90
Rogue BSSID...................................... 00:14:1b:5b:1f:90
Is Rogue on Wired Network........................ No
Classification................................... Unclassified
Manual Contained................................. No
State............................................ Alert
First Time Rogue was Reported.................... Thu Jun 10 18:37:50 2010
Last Time Rogue was Reported..................... Thu Jun 10 19:04:51 2010
Reported By
AP 1
MAC Address.............................. 00:24:97:8a:09:30
Name..................................... AP_5500
Radio Type............................... 802.11g
SSID..................................... doob
Channel.................................. 6
RSSI..................................... -51 dBm
SNR...................................... 27 dB
Encryption............................... Disabled
ShortPreamble............................ Enabled
WPA Support.............................. Disabled
Last reported by this AP................. Thu Jun 10 19:04:51 2010
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment