How does WLSE detect rogue access points?
A. Here is a brief summary of the rogue access point detection logic: a. A rogue AP appears and starts sending out beacons and responding to probe-requests. b. A nearby managed and RM-enabled access point or client detects the beacon (same channel or off-channel) or probe response (off-channel). The access point or client sends back a beacon report of the rogue access point in the next scheduled RM report. The scheduled internal RM reporting interval is 90 seconds, so this step can take up to 90 seconds to complete. c. The WLSE Radio Manager (RM) receives the beacon report, recognizes that this access point is not in the system (not a managed access point, and not a previously detected radio), and triggers the rogue access point switch-port tracing logic. The WLSE RM does not issue a rogue AP fault at this time. d. The WLSE RM waits for 3 measurement intervals (3×90, or 270 seconds) for other surrounding access points or clients to report the same radio. This delay allows as many acces
