SSID Hidden strange in Air Marshal

DTellez
Here to help

SSID Hidden strange in Air Marshal

Hello everybody.

 

We noticed in Air Marshal we see a Hidden SSID strange.

 

DTellez_1-1744300615328.png

 

I don't know why Meraki see 1163 MACs address in broadcast, and emiting in multiples channels.

 

This SSID is seeing by all my APs, but in the AP01 and AP05 with 255 dB of signal over noise. This meaning is near to this radios.

 

DTellez_2-1744300729042.png

I see multiples MACs with differentes OUIs (I attach an example).

 

DTellez_3-1744300764428.png

 

This behavior is repeated in all the networks in all organizations I manage.

 

Anyone can explain me what is happened? I don't belive is a physical device putted, because it's repeated in all sites, and I doubt that.

 

Thank you.

7 Replies 7
alemabrahao
Kind of a big deal
Kind of a big deal

I suggest you use a wireless network analysis tool to analyze the traffic and identify patterns or anomalies.

I also suggest you check that you are running the most current firmware version and open a support case with Meraki.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
DTellez
Here to help

I don't believe something happend in the spectrum. This appear in all, more than 500, sites I manage.

Ryan_Miles
Meraki Employee All-Star Meraki Employee All-Star
Meraki Employee All-Star

Note: A “hidden SSID” on the Air Marshal page is an SSID name that is not included in the beacons and probe responses for a particular BSSID. These can usually be ignored during common network operation, and are unlikely to result in noticeable RF interference. Administrators may specify the same allow list, contain, alert, uncontain rules for BSSIDs contributing to the hidden SSID's seen by selecting the Hidden row and selecting the Broadcast MAC to apply the rule to. 

 

https://documentation.meraki.com/MR/Monitoring_and_Reporting/Air_Marshal#Rogue_SSIDs_2

 

So, "Hidden" is a container for any SSID not sending its name in beacons and probes. Meaning it can be lots of SSIDs contributing to the count, MACs, APs seen by, etc.

RaphaelL
Kind of a big deal
Kind of a big deal

As mentionned by Ryan , pretty pretty sure this is normal. They all group up in one big bucket : 

RaphaelL_0-1744304827249.png

Which also explains all the different BSSIDs ( MACs ) 

DTellez
Here to help

With 255 dB of SNR? It's strange, it isn't?

cmr
Kind of a big deal
Kind of a big deal

Is it not related to meshing, do you have meshing turned on?

If my answer solves your problem please click Accept as Solution so others can benefit from it.
DTellez
Here to help

I had it turned on. I turned off but as you see the SSID Hidden still appear.

 

DTellez_1-1744355625416.png

DTellez_2-1744355639519.png

DTellez_3-1744355708265.png

 

Get notified when there are additional replies to this discussion.