what is "seen on LAN" rogue ssid?

[Snika]

I checked the rogue detect log as above.
I need to figure out what this log is.
The log says "seen on LAN".
Does this mean that the client broadcasting the SSID is trying to make a wired connection to the LAN?

[Brash · Accepted solution]

It looks like it's a false positive related to miiror casting.

https://community.meraki.com/t5/Wireless-LAN/Air-Marshall-Rogue-SSID-s/td-p/39859

[Snika]

I enabled and tested mirrorcasting with my laptop, but it didn't detect it as a rogue AP.

But looking at the rules for SSIDs that start with DIRECT, I think you're right.

[Brash]

And to answer your question, "seen on LAN" indicates that the broadcasting device is directly connected to your LAN network (Eg. if you were to connect a non Meraki AP)