CISCO-WDS-IDS-MIB Table View

This table gives the information about the MAC 
spoofing attacks detected by the network entity
offering WDS.
          
An entry in this table is created by the agent when
the WDS detects a MAC spoofing attack.  
          
The agent at anytime will retain only the most
recent and maximum number of entries possible
for a particular MAC.  The older entries are
purged automatically when the number of entries
for a particular MAC reaches its maximum.
Thus, there can be a maximum of those many
different MAC addresses indicated by 
ciscoWdsIdsMaxMacAddresses and for each MAC
address, the maximum number of entries is
indicated by the value of the MIB object
ciscoWdsIdsMaxEntriesPerMac. 
          
MAC spoofing is detected only by the network entity
serving as the active WDS and hence this table
is populated only by the active WDS as indicated
by the values 'wds' and 'active' for the MIB objects
cDot11csServiceType and cDot11csWdsInstanceState
respectively.  If cDot11csServiceType equals 'none'
indicating that WDS is not configured in this
station, or cDot11csWdsInstanceState not equals
'active' indicating that this entity is not the
currently active WDS, a 'noSuchInstance' error
is returned for the queries to the objects of this
table.

ciscoWdsIdsMacSpoofEntry row .1.3.6.1.4.1.9.9.457.1.1.3.1

An entry holds the information about one instance of
MAC spoofing attack detected on the radio interface
of the AP identified by
ciscoWdsIdsMacSpoofStaMacAddress.

Indexes

ciscoWdsIdsMacSpoofStaMacAddress ciscoWdsIdsMacSpoofIndex

Column	Syntax	OID
ciscoWdsIdsMacSpoofStaMacAddress This object identifies the radio interface of the 802.11 station, that has forwarded the authentication request of the client with the spoofed MAC address indicated by ciscoWdsIdsMacSpoofClient, to the WDS.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.457.1.1.3.1.1
ciscoWdsIdsMacSpoofIndex This object identifies the set of information about one instance of a MAC spoofing attack detected by the WDS. The radio interface of the 802.11 station that has forwarded the authentication request is identified by ci…	SNMPv2-SMIUnsigned32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.457.1.1.3.1.2
ciscoWdsIdsMacSpoofClient This object indicates the MAC address that has been spoofed.	SNMPv2-TCMacAddress Type Constraints: range: 6 Description: Represents an 802 MAC address represented in the `canonical' order defined by IEEE 802.1a, i.e., as if it were transmitted least significant bit first, even though 802.5 (in contrast to other 802.x protocols) requires M…	.1.3.6.1.4.1.9.9.457.1.1.3.1.3
ciscoWdsIdsMacSpoofUserId This object indicates the userId used by the wireless client when attempting the MAC spoofing attack.	OctetString Constraints: range: 1-253	.1.3.6.1.4.1.9.9.457.1.1.3.1.4
ciscoWdsIdsMacSpoofDetectTime This object indicates the time at which this MAC spoofing attempt is detected by the WDS.	SNMPv2-TCTimeStamp Based On: SNMPv2-SMITimeTicks Description: The value of the sysUpTime object at which a specific occurrence happened. The specific occurrence must be defined in the description of any object defined using this type. If sysUpTime is reset t…	.1.3.6.1.4.1.9.9.457.1.1.3.1.5