ciscoLwappMfpAnomalyDetected1

This notification is sent by the agent when the
MFP configuration of the WLAN was violated by the 
radio interface cLApIfSmtDot11Bssid and detected by 
the radio interface cLApDot11IfSlotId of the AP 
cLApMacAddress.  The violation is indicated by
cLMfpEventType.
          
Through this notification, the controller reports
the NMS the occurrence of a total of cLMfpEventTotal
volation events, of type cLMfpEventType, upon
observing the management frame(s) indicated by
cLMfpEventFrames for the last cLMfpEventPeriod
time units.  When cLMfpEventTotal is 0, it
indicates that no further anomalies have recently
been detected and that the NMS should clear any
alarm raised about the MFP errors.
          
cLClientLastSourceMacAddress is used only when the 
controller generates notifications about client-related 
attacks. The controller will populate zeros as the value 
for cLClientLastSourceMacAddress when reporting anomalies 
sourced by infrastructure devices.
          
This notification is generated by the controller
only if MFP has been configured as the protection
mechanism through cLMfpProtectType.

MIB

CISCO-LWAPP-MFP-MIB

OID

.1.3.6.1.4.1.9.9.518.0.5

Type

notification

Status

current

Parent

ciscoLwappMfpMIBNotifs

Groups

1