Any type of over-the-air containment risks the wrath of the FCC. In light of recent rulings and fines, I’m not risking any manipulation on the airwaves; whether it’s deauths or jamming or whatever. We take care of it at a purely wired level (disable the port the APs/routers are connected to). As others mentioned printers/Roku/PS4s, etc are still an issue, but we try our best at the beginning of every semester to quash as many as possible (Fall – incoming freshmen, spring – new Christmas presents). We also use communication and social pressure to help with the issue. We’ve even had issues resolved without our input – dorm residents see an “unapproved” SSID, find out who has it, and utilize RAs, etc to get it removed.
Thomas Carter Network & Operations Manager Austin College From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Watters, John Sent: Friday, February 26, 2016 9:50 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Rogue AP's We are a Cisco shop that uses the Airwave AMPs for management. We let the AMPs contain the rogues. It works reasonably well and certainly beats trying to it do it manually on the controllers. Right now we are seeing 2,279 rogues on our campus with the biggest category being HP printers. We do have a policy that tells folks not to do this. But, there is really no penalty to them for ignoring the policy. On a related note our legal folks are considering whether to let us continue to try to contain rogues on campus. Has any other campus been told not to do rogue containment? -jcw [UA Logo] John Watters The University of Alabama Office of Information Technology 205-348-3992 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Tyler Sent: Friday, February 26, 2016 8:40 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] Rogue AP's Wireless managers, {cross referenced with NETMAN} I am wondering if anyone has found an automatic way to block rogue AP’s on your network. I know I can get a report from Airwave on rogue AP’s, but it seems like it would be time consuming to go after each of them individually. I am curious how some of you handle this. Do you have a method for blocking them? Also, there are other products beginning to broadcast their own ssid as well including printers, connectify, etc. How do you handle them? Do you even have policy restricting those from your network? Tim Tyler Network Engineer Beloit College ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
