Tracking and shutting down an unknown Wi-Fi signal using Cisco Meraki. How to get network to stop sending alerts.

Problem: 

If Cisco Meraki Access Point keeps signaling a new Wi-Fi is showing up in the environment and the customer is trying to accomplish the following:

1. Track down the Wi-Fi origination point.
2. Shut down the Wi-Fi if it's not needed.
3. (If needed) Get the network to stop sending alerts?

Solution: 

1- To track down the WiFi origination point, a WiFi analyzer tool such as Meraki WiFi Stumbler or Acrylic WiFi Professional can be used. This tool will scan the area for WiFi networks and show you the signal strength of each network. Once you have identified the network that is causing the problem, you can use the tool to track down the location of the access point. 
 
2- Once access point has been located, it can be shut it down if not needed by physically disconnecting it from the power source. If the access point is password protected, you will need to obtain the password before you can shut it down.
 
3- If the customer needs to keep the Access Point running, it can be configured to broadcast a different SSID. This will stop the network from sending alerts about the new WiFi network.
 

1- Steps on how to track down the WiFi origination point using a WiFi analyzer tool:
 

1. Download and install a WiFi analyzer tool on your computer or mobile device, you can use Meraki WiFi Stumbler or Acrylic WiFi Professional.
2. Launch the WiFi analyzer tool and start scanning for WiFi networks.
3. Take note of the signal strength of each network.
4. Move around the area until you find the location where the signal strength is the strongest.
5. This is the location of the WiFi access point. 

2- Steps on how to shut down a WiFi access point:
 

1. Locate the WiFi access point.
2. Disconnect the WiFi access point from the power source.
3. If the WiFi access point is password protected, you will need to obtain the password before you can shut it down.

3- (If needed) Here are the steps on how to configure a WiFi access point to broadcast a different SSID:
 

1. Log in to the WiFi access point's web interface.
2. Navigate to the WiFi settings page.
3. Change the SSID to a different name.
4. Click the Save button.

 
 
Cisco Meraki Access Points (APs) send alerts about new WiFi networks in order to help you identify and mitigate rogue APs. Rogue APs are unauthorized wireless access points that can be used to eavesdrop on traffic or launch attacks against your network.
 
To configure your Meraki network to stop sending alerts about new WiFi networks, you can:
 

1. Log in to the Meraki dashboard.
2. Navigate to the Alert Profiles page.
3. Click the Edit button for the alert profile that is sending the alerts.
4. Under the Alerts section, uncheck the New WiFi network detected checkbox.
5. Click the Save button.

 
Here are some additional tips for troubleshooting rogue APs:

• Keep your firmware up to date. Firmware updates often include security patches that can help to protect your network from rogue APs.
• Use strong passwords for your APs. Avoid using default passwords or easily guessed passwords.
• Enable MAC address filtering. MAC address filtering allows you to restrict access to your network to authorized devices.
• Monitor your network traffic for unusual activity. Rogue APs can often be detected by monitoring for unusual traffic patterns, such as a large number of new devices connecting to your network or a sudden increase in traffic volume.

 
By following these tips, you can help to protect your network from rogue APs and keep your data safe.

Sources:

1- How to locate an access point: https://www.acrylicwifi.com/en/blog/how-to-locate-an-access-point/ 

2- Meraki WiFi Stumbler WiFi analyzer tool: https://meraki.cisco.com/blog/2010/02/presenting-the-meraki-wifi-stumbler-a-new-free-tool-for-troubleshooting-optimizing-and-planning-wireless-deployments/

3- Arylic WiFi Profesional: https://www.acrylicwifi.com/en/wifi-analyzer/

4- How to shut down a WiFi access point : https://community.meraki.com/t5/Wireless-LAN/Switch-off-access-points-at-night/m-p/12182

The support article from the Cisco Meraki Support website provides step-by-step instructions on how to locate the access point, disconnect it from the power source, and obtain the password (if necessary).

The article also includes a troubleshooting section that provides tips on how to resolve common problems that may occur when shutting down a WiFi access point.

5- (If needed) Considerations about using multiple Wireless Access Points with the same channel and SSID: https://superuser.com/questions/474280/considerations-about-using-multiple-wireless-access-points-with-the-same-channel

This is a discussion on Super User that explains the pros and cons of using the same or different channels for multiple access points with the same SSID. It also provides some tips on how to avoid interference and improve performance.

6- (If needed) Configure SSID Settings: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Wi-Fi-Cloud/discover/configure/wifi/wifi_config_ssid.html

This is a guide from WatchGuard Technologies that explains how to configure the SSID settings for your WiFi network. It covers the basic settings such as SSID name, security mode, encryption type, and passphrase, as well as advanced settings such as VLAN tagging, captive portal, and client isolation.

7- Removing or configuring Network alerts from APs using Cisco Meraki: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Alerts_and_Notifications 

There are a number of options available in the Meraki dashboard for email alerts to be sent when certain network or device events occur. This article outlines which options are available for each product and provides additional considerations when using network alerts and organization-wide notifications throughout the dashboard.

8- (If needed) Common Dashboard Alerts for Device Connectivity: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Alerts_and_Notifications/Common_Dashboard_Alerts_for_Device_Connectivity 

If a Cisco Meraki device has issues with connectivity to the dashboard, the dashboard should show an alert. These alerts can be viewed by the device in question from your devices' list or adding the Alerts column to your list of devices. Reviewing and correcting any alerts will help your network's stability.