Clients in a lobby attach to an access point that beacons the corporate SSID at a stronger signal than the corporate radios. That access point is not in the inventory. Why do the clients attach to it?
Select an answer to reveal the explanation.
Short Explanation
Clients are not loyal to your asset tag. They heard the same name, louder, and they went there. That louder beacon is not yours, and find it before you keep raising your own power and losing the same argument.
Full Explanation
A client picks among beacons of the SSID it wants, and a stronger signal is a normal reason to attach. This unauthorized access point beacons the corporate SSID louder than the corporate radios, so clients attach to it. They do not stay on the inventory radio, and a louder advertisement of the same name is not ignored. The country code does not prefer non-inventory radios. DHCP comes after the client has already attached. The rogue does not need a corporate scope to win the attach decision, and getting a corporate address is not what pulled the clients. An unauthorized access point beacons the same SSID at a stronger signal, and clients attach to it. They are choosing the stronger beacon, which is the rogue. Check one live client after the change and leave the rest of the floor alone until that client matches the result you expected. Exam caveat: raising your power can start a contest you do not want inside a lobby. Remove the unauthorized radio. Do not plan on out-shouting it as the design. Operational check: find the stronger BSSID, remove it, and confirm clients attach to a corporate radio.