Guest

Preview Tool

Cisco Bug: CSCvv54703 - RRM Neighbor APs showing up as rogue Aps causing false honeypot alarms to be generated

Last Modified

Oct 13, 2020

Products (1)

  • Cisco Aironet 1850 Series Access Points

Known Affected Releases

8.10(128.154)

Description (partial)

Symptom:
1- Frequently getting false honeypot alarms for our own APs joined to the WLC. From other nearby APs, we can see the honeypot "attacker" AP as a rogue AP which should not be the case.
2- Almost all of the APs under the AP's rogue list are our own APs
3- You can also see AP RRM neighbors are showing up as Rogue at the same time

You would get similar notifications on Prime Infrastructure for your own APs:
•	wIPS AP IP 1.1.1.1
•	Attacker Client/AP MAC 11:22:33:44:55:66
•	Modified July 31, 2020, 2:32:39 PM

Conditions:
- 4800 APs
- 8.10.128.154 image
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.