FIG. 1 is a high-level block diagram illustrating a system for preventing connections to unauthorized access points with channel switch announcements, according to one embodiment. The system 100 includes an AP 101, a station 102 and an optional controller 103 coupled in communication with an unauthorized AP 50. Other embodiments of the system 100 can include additional network components that are not shown in FIG. 1. For example, there can be more APs (authorized and unauthorized) and more stations. There can also be network devices such as switches, routers, fire walls, proxy servers, and the like.

The AP (or authorized AP) 101 can be any of the computing devices, such as a personal computer, a server blade, any computing environment as shown in FIG. 6. For example, the AP 101 can be an Access Point—Model 101 or an Access Point—Model 433 (modified as discussed herein) by Meru Networks of Sunnyvale, Calif., now Fortinet, Inc. The AP 101 is preferably connected to the network 150 (or to a switch, router, hub, or another AP that is connected to the network 150) via a wired or wireless connection. The AP 101 can be set-up in various configurations with other APs to provide wireless coverage areas. In one embodiment, the functionality is incorporated into a switch or router, and in another embodiment, is incorporated into a custom enclosure. In operation, the AP 101 transmits network packets to and from station 102.