Novice Question: How is it possible for me to see the clients that are connected to a Rogue AP?

  • 1
  • Question
  • Updated 3 years ago
  • (Edited)

Aerohive is picking up rogue APs that are definitely not a part of our internal network. How is it that I can see MAC addresses, vendors, ect, of the devices connected to a rogue AP?


Thanks,

Tim

Photo of Tim

Tim

  • 1 Post
  • 0 Reply Likes

Posted 3 years ago

  • 1
Photo of Paul Daniel

Paul Daniel

  • 5 Posts
  • 1 Reply Like
I suspect that is because wifi is a radio network.  Even though the "rogue" AP is not on your network, the AP itself is broadcasting it's SSIDs and the devices connecting to it are broadcasting their details all the time to see what other wireless networks are available or if there is a stronger signal available. 
Photo of Nathaniel Moore

Nathaniel Moore, Employee

  • 56 Posts
  • 16 Reply Likes
Hi Tim,

Paul is spot on. The information picked up by our APs and displayed on HiveManager is made possible due to the fact that the beacon information is unencrypted; we can see which client is connected to which AP because the AP broadcasts it's SSID and BSSID information and the client responds in a similar manner depending on which AP it wishes to connect to.