WAP Local Mode vs Monitor Mode for Rogue Detection
Wireless AP Rogue Detection operates on wireless access points that are in either Local Mode or Monitor Mode. The following table compares how rogue detection is performed in each mode, based on Cisco's troubleshooting tech notes document titled "Resolve Rogue Detection and Mitigation in an Unified Wireless Network":
| AP Mode | Local Mode APs | Monitor Mode APs |
|---|---|---|
| Wireless clients | Serves clients with time-slicing off-channel scan | Does not serve clients |
| Timing | Listens for 50 ms on each channel | Listens for 1.2 seconds on each channel |
| Channels | Can be configured to scan: - all channels - country-specific channels - DCA channels | Scans all channels, non configurable |
Note that there is also Rogue Detection mode in older APs, which has been deprecated.