Is there a way to detect and more importantly block a malicious client from running a dhcpd instance after authenticating to the wireless.
We have a wlc but the APs are in L3 capwap mode with local routing. No tunnelling of the client traffic through the wlc. Reason is should the wan towards the remote site fail, the remote clients could still use the wireless network at their site.
Port-sec/source-guard/dai is implemented on the L2 switches access ports but the wireless trunks have been trusted as the wireless clients could not effectively roam between the access points.
I would really appreciate some help.