Wireless AP Rogue Detection Mode

Rogue Detection mode is a wireless AP mode in which the AP’s radio is disabled so that it can focus solely on monitoring wired traffic. The controller sends a rogue detector AP a list of suspected rogue clients and AP MAC addresses. By listening only for ARP packets, the rogue detector can correlate information about rogue devices heard over the air with ARP data gathered from the wired network, helping to identify unauthorized devices. If needed, it can be connected to all broadcast domains via a trunk link.

Rogue Detection Mode is supported only on Cisco IOS-based Wave 1 Access Points, as stated in Cisco's "Wireless Controller Configuration Guide, Release 8.10," and has been deprecated. In more recent versions of Cisco's wireless products, only Local Mode and Monitor Mode APs perform rogue detection.

Links

https://networklessons.com/cisco/ccna-200-301/cisco-wireless-ap-modes#Rogue_Detector