Cisco 4400 Series User Manual

5-84
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 5 Configuring Security Solutions
Managing Rogue Devices
WCS Interaction
WCS software release 5.0 or later also supports rule-based classification. WCS uses the classification
rules configured on the controller. The controller sends traps to WCS after the following events:
• If an unknown access point moves to Friendly for the first time, the controller sends a trap to WCS
only if the rogue state is Alert. It does not send a trap if the rogue state is Internal or External.
• If a rogue entry is removed after the timeout expires, the controller sends a trap to WCS for rogue
access points categorized as Malicious (Alert, Threat) or Unclassified (Alert). The controller does
not remove rogue entries with the following rogue states: Contained, Contained Pending, Internal,
and External.
Configuring RLDP
You can configure RLDP to detect and automatically contain rogue devices using the controller GUI or
CLI.
Using the GUI to Configure RLDP
Using the controller GUI, follow these steps to configure RLDP.
Step 1 Click Security > Wireless Protection Policies > Rogue Policies > General to open the Rogue Policies
page (see Figure 5-41).
Figure 5-41 Rogue Policies Page
Step 2
Choose one of the following options from the Rogue Location Discovery Protocol drop-down box:
• Disable—Disables RLDP on all access points. This is the default value.
• All APs—Enables RLDP on all access points.
• Monitor Mode APs—Enables RLDP only on access points in monitor mode.

Cisco 4400 Series Specifications

General

Brand	Cisco
Model	4400 Series
Category	Controller
Language	English