Rogue AP detection

A system comprising one or more processors configured to perform operations including:

• initiating, at a wireless controller, a rogue access point detection process for a network;
• transmitting a signature frame to a mobility agent in a wireless switch via a wired portion of the network;
• constructing the signature frame, by the mobility agent in the wireless switch, to include a switch identifier, a port identifier and a VLAN identifier in the signature frame;
• transmitting, by the mobility agent in the wireless switch, the signature frame, to one or more access points in the wireless network;
• receiving, at an authorized access point, the signature frame transmitted via a wireless signal from a rogue access point;
• reporting reception of the signature frame to the wireless controller;
• and
• generating a signal to shut down a port associated with the rogue access point.

A nontransitory computer readable medium having stored thereon software instructions that, when executed by a processor of a wireless controller, cause the processor to perform operations including:

• initiating a rogue access point detection process for a network;
• transmitting a signature frame to a mobility agent in a wireless switch via a wired portion of the network;
• constructing the signature frame, by the mobility agent in the wireless switch, to include a switch identifier, a port identifier and a VLAN identifier in the signature frame;
• transmitting, by the mobility agent in the wireless switch, the signature frame, to one or more access points in the wireless network;
• receiving, at an authorized access point, the signature frame transmitted via a wireless signal from a rogue access point;
• reporting reception of the signature frame to the wireless controller;
• and
• generating a signal to shut down a port associated with the rogue access point.