CCIE Wireless Exam: Rogue Location Discovery Protocol Mode

Access Point Operation in Rogue Location Discovery Protocol Mode

Prev Question Next Question

Question

Which statement describes the operation of an access point in Rogue Location Discovery Protocol mode?

Answers

A. The AP uses the existing wireless infrastructure in order to scan for rogue APs. Once discovered, these rogues are added to a local list that includes the rogues` BSSIDs, MAC addresses, and any discovered security provisions (WPA, WEP, etc.).

B. The AP detects a rogue client, and then the network administrator is able to contain both the rogue AP and the rogue clients. This can be achieved because 802.11 deauthentication packets are sent to clients that are associated to rogue APs, so threats such as holes are mitigated.

C. The AP moves to the rogue channel and attempts to connect to the rogue as a client. The AP then tries to obtain an IP address and forwards a UDP packet to the controller through the rogue. If the controller receives this packet, the network administrator is notified that a rogue AP has been discovered on the wired network.

D. The AP determines whether or not a rogue access point is on a trusted network. It does not provide RF service of any kind, but rather receives periodic rogue access point reports from the controller, and sniffs all ARP packets. If it finds a match between an ARP request and a MAC address it receives from the.

Show Answer

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

The correct answer is A: "The AP uses the existing wireless infrastructure to scan for rogue APs. Once discovered, these rogues are added to a local list that includes the rogues' BSSIDs, MAC addresses, and any discovered security provisions (WPA, WEP, etc.)."

Rogue Location Discovery Protocol (RLDP) is a feature that allows wireless access points (APs) to detect rogue access points within the network. When an access point is in RLDP mode, it uses its radio to scan for other wireless access points within range. The access point listens for beacons and probes from other access points and examines the contents of those frames to identify rogue access points.

If the access point detects a rogue access point, it adds the rogue's BSSID, MAC address, and any discovered security provisions (WPA, WEP, etc.) to a local list. The access point then sends this information to the wireless LAN controller, which can take further action based on the security policy defined by the network administrator. This action can range from simply logging the event to blocking the rogue access point from the network entirely.

RLDP is an important security feature that can help prevent unauthorized access to the wireless network. By using existing infrastructure to scan for rogue access points, network administrators can easily monitor their wireless environment and take action to secure it against potential threats.

Prev Question Next Question