Cisco Lightweight Access Point Modes

From the wireless LAN controller, a lightweight access point can be configured to operate in several different types of mode:


The default mode of a lightweight access point. It offers one or more basic service sets on a specific channel. When the access point is not transmitting it scans the other channels to measure for levels of noise, measure interference, discover rogue devices and match against intrusion detection system events.


The access point does not transmit, but the receiver is enabled to act as a sensor. The access point checks for intrusion system detection events, rogue access points and tries to detect the position of stations through location based services.


The access point at a remote location can locally switch traffic between an SSID and a VLAN if the CAPWAP tunnel is offline in this mode.


The access point dedicates the radios to receiving 802.11 traffic from other devices, like a packet capture.

The captured traffic is forwarded to a P.C. running network analyser software such as Wireshark.

Rouge Detector

The access point dedicates itself to detecting rogue devices by gathering MAC addresses on the wired network with those it captures over the wireless airwaves. Rogue devices appear on both networks.


The access point becomes a dedicated bridge between two networks. Two access points that are in bridge mode can be used to link two locations together that are separated by a distance.

Multiple access points can form a mesh network.


The access point in this mode combines the features of Bridge and Flexconnect


The access point dedicates the radio to analysing the spectrum on all wireless channels. The access point will feedback gathered detail to a P.C. running software that can read spectrum analysis operations.



, ,




Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.