What is meaning on below error Meraki Error.

Rahul_Wankhade
Comes here often

What is meaning on below error Meraki Error.

Hi all,

 

What is meaning of below error. Is it critical to our wireless network or can be ignored. 

 

Jan 24 16:21:46 10.138.80.46/10.138.80.46 cisco_meraki_wap|v1: 1611505325.032721513 AP01 airmarshal_events type=ssid_spoofing_detected ssid='Corp-SSID' vap='3' bssid='02:8D:DB: 71:C4:37' src='02:8D:DB:71:C4:37' dst='1A:BA:03:16:A7:5B' channel='11' rssi='7' fc_type='0' fc_subtype='5'
Regards,
Rahul Wankhade
4 Replies 4
CptnCrnch
Kind of a big deal
Kind of a big deal

Hi Rahul,

 

it looks like someone is spoofing / trying to impersonate your Corp-SSID.

 

For mitigation please take a look at https://documentation.meraki.com/MR/Monitoring_and_Reporting/Mitigating_a_Spoofed_AP

Rahul_Wankhade
Comes here often

Thank you for your response. 

 

As I checked the Air marshal spoofs logs nothing showing there. Please refer below screenshot. 

 

Rahul_Wankhade_1-1611576442928.png

 

Regards,
Rahul Wankhade
Greenberet
Head in the Cloud

check the selected time.

Currently you have set it to "for the last day", try a longer period

Rahul_Wankhade
Comes here often

Hi,

 

Selected last week still not data showing. 

 

Rahul_Wankhade_0-1611581059894.png

 

Regards,
Rahul Wankhade
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels