A method, apparatus and software product for detecting rogue access points in a wireless network

Abstract

A method, an apparatus, and a software program to implement a method to detect a rogue access point of a wireless network. The method includes maintaining an AP database that includes information about managed access point (APs) and friendly APs, including the MAC address of each managed AP. The method further includes sending a scan request to one or more managed APs, including one or more of a request for the receiving managed AP to scan for beacons and probe responses and a request for the receiving managed AP to request its clients to scan for beacons and probe responses. The method further includes receiving reports from at least one of the receiving managed APs, a report including information on any beacon or probe response received that was sent by an AP. For each beacon or probe response on which information is received, the method analyzes the information received in the report about the AP that sent the beacon or probe response, the analyzing including ascertaining if the MAC address of the AP that sent the beacon or probe response matches a MAC address of an AP in the AP database to ascertain whether or not the AP is a potential rogue AP or a managed or friendly AP.

Description

[0001] Related Patent Applications [0002] This application claims priority to U.S. Provisional Patent Application Serial No. 60 / 490,847, Docket / Reference No. CISCO-8125P, Inventor Tolson et al., entitled "A METHOD, APPARATUS, AND SOFTWARE PRODUCT FORDETECTING ROGUE ACCESS POINTS IN A WIRELESS NETWORK" rights, this patent application has been assigned to the assignee of the present invention and is incorporated herein by reference. [0003] This invention is related to copending U.S. Patent Application Serial No. 10 / 629,384, docket / reference number CISCO-7391, inventor to Kaiser et al., entitled "RADIOLOCATION USING A PATH LOSS DATA," which is assigned to the present invention assignee, which is hereby incorporated by reference. technical field [0004] The present invention relates to wireless networks, and more particularly to network security and detection of rogue access points in infrastructure wireless networks. Background technique [0005] The use of wireless netw...

AI Technical Summary

Problems solved by technology

However, since the rogue AP may be a device installed in an adjacent location, detection methods requiring a wired connection may not always be successful

Images