Cisco 897 AP station-role scanner

• In station-role scanner the AP scans all channels.
• In station-role scanner and monitor the AP monitor all activity on configured channel and transmits traffic to analyzer.

interface Dot11Radio0
 station-role scanner
 monitor frames endpoint ip address 192.168.64.11 port 5000 truncate 128

Analyzing

On wireshark use filter udp.port == 5000 and decode as CWIDS (Cisco Wireless Intrusion Detection System)