wlsxWPAFTAttack
AI-AP-MIB ·
.1.3.6.1.4.1.14823.2.3.3.1.200.2.1267
Object
notification
This trap indicates there is a possible attack of the Fast BSS Transition causing a WPA key re-installation. This can be indicative of a security breach where an attacker can hijack a client's association and/or decrypt an otherwise secure connection.
Context
- MIB
- AI-AP-MIB
- OID
.1.3.6.1.4.1.14823.2.3.3.1.200.2.1267- Type
- notification
- Status
- current
- Parent
- aiTrapDefinitionsGroup
- Siblings
- 170
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| wlsxNodeRateAnomaly This trap indicates that a node is exceeding the threshold set for
the frame type. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1003 |
| wlsxNUserEntryCreated This trap indicates that a new user was created. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1014 |
| wlsxNUserEntryDeleted This trap indicates that a user was deleted. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1015 |
| wlsxNUserEntryAuthenticated This trap indicates that a user is Authenticated. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1016 |
| wlsxNUserEntryDeAuthenticated This trap indicates that a user is Deauthenticated. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1017 |
| wlsxNUserAuthenticationFailed This trap indicates that a user authentication has failed. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1018 |
| wlsxNAuthServerReqTimedOut This trap indicates that the authentication server request timed out. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1019 |
| wlsxNAuthServerTimedOut This trap indicates that the authentication server timed out. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1020 |
| wlsxNAuthServerIsUp This trap indicates that an authentication server is up. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1021 |
| wlsxNAccessPointIsUp A Trap which indicates that an access point up. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1040 |
| wlsxNAccessPointIsDown A Trap which indicates that an access point down. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1041 |
| wlsxNChannelChanged This trap indicates that an access point at Location
wlsxTrapAPLocation has changed the channel. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1043 |
| wlsxNStationAddedToBlackList obsolete This trap indicates that the station is black listed.
**NOTE: this notification is obsoleted and replaced by
wlsxNStationAddedToDenyList. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1044 |
| wlsxNStationRemovedFromBlackList obsolete This trap indicates that the station is removed from the black list.
**NOTE: this notification is obsoleted and replaced by
wlsxNStationRemovedFromDenyList | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1045 |
| wlsxNRadioAttributesChanged A Trap which indicates changes in the Radio attributes of an
access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1049 |
| wlsxUnsecureAPDetected This trap indicates that an unauthorized access point is connected to the wired network. The access point is declared Rogue because it was matched to a MAC address. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1053 |
| wlsxUnsecureAPResolved This trap indicates that a previously detected access point, classified as Rogue,
is no longer present in the network. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1054 |
| wlsxStaImpersonation This trap indicates that an AM detected Station Impersonation. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1055 |
| wlsxReservedChannelViolation This trap indicates that an AM detected an access point
which is violating the Reserved Channel configuration. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1056 |
| wlsxValidSSIDViolation This trap indicates that an AP has detected an access point is violating
Valid SSID configuration by using an SSID that is reserved for use by a valid AP only. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1057 |
| wlsxChannelMisconfiguration This trap indicates that an AP detected an access point that has a channel misconfiguration
because it is using a channel that is not valid. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1058 |
| wlsxOUIMisconfiguration This trap indicates that an AP detected an access point that has an OUI misconfiguration because
it is using an OUI that is not valid. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1059 |
| wlsxSSIDMisconfiguration This trap indicates that an AP detected an access point that has an SSID misconfiguration because it is using
an SSID that is not valid. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1060 |
| wlsxShortPreableMisconfiguration This trap indicates that an access point has bad Short preamble
configuration. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1061 |
| wlsxWPAMisconfiguration This trap indicates that an AP detected an access point that is misconfigured because it is not using WPA. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1062 |
| wlsxAdhocNetworkDetected This trap indicates that an AM has detected an Ad hoc
network. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1063 |
| wlsxAdhocNetworkRemoved This trap indicates that a previously detected Ad hoc Network is no
longer present in the network. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1064 |
| wlsxStaPolicyViolation This trap indicates that Protection was enforced because a valid station's association to a non-valid access point violated Valid Station policy. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1065 |
| wlsxRepeatWEPIVViolation This trap indicates that an AP detected that a valid access point is using the same WEP initialization vector in consecutive packets. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1066 |
| wlsxWeakWEPIVViolation This trap indicates that an AP detected that a valid access point is using a Weak WEP initialization vector. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1067 |
| wlsxChannelInterferenceDetected This trap indicates that an AP has detected channel interference. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1068 |
| wlsxChannelInterferenceCleared This trap indicates that a previously detected channel interference
is no longer present. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1069 |
| wlsxAPInterferenceDetected This trap indicates that an AP has detected interference for an access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1070 |
| wlsxAPInterferenceCleared This trap indicates that the previously detected interference for an access point
is no longer present. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1071 |
| wlsxStaInterferenceDetected This trap indicates that an AP has detected interference for a station. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1072 |
| wlsxStaInterferenceCleared This trap indicates that the previously detected interference for a station
is no longer present. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1073 |
| wlsxFrameRetryRateExceeded This trap indicates that an AP detected that an access point has exceeded the configured upper threshold for Frame Retry Rate. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1074 |
| wlsxFrameReceiveErrorRateExceeded This trap indicates that an AP detected that an access point has exceeded the configured upper threshold for Frame Receive Error Rate. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1075 |
| wlsxFrameFragmentationRateExceeded This trap indicates that an AP detected that an access point exceeded the configured upper threshold for Frame Fragmentation Rate. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1076 |
| wlsxFrameBandWidthRateExceeded This trap indicates that an AP detected that a station or access point has exceeded the configured upper threshold for Bandwidth rate. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1077 |
| wlsxFrameLowSpeedRateExceeded This trap indicates that an AP detected that a station has exceeded the configured upper threshold for Low speed rate. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1078 |
| wlsxFrameNonUnicastRateExceeded This trap indicates that an AP detected that a station has exceeded the configured upper threshold for Non Unicast traffic rate. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1079 |
| wlsxLoadbalancingEnabled This trap indicates that an AM is reporting that an AP
has enabled Load balancing. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1080 |
| wlsxLoadbalancingDisabled This trap indicates that an AM is reporting that an AP
has enabled Load balancing. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1081 |
| wlsxChannelFrameRetryRateExceeded This trap indicates that an AP has detected that the configured upper threshold for Frame Retry Rate was exceeded on a channel. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1082 |
| wlsxChannelFrameFragmentationRateExceeded This trap indicates that an AP has detected that the configured upper threshold for Frame Fragmentation Rate was exceeded on a channel. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1083 |
| wlsxChannelFrameErrorRateExceeded This trap indicates that an AP has detected that the configured upper threshold for Frame Receive Error Rate was exceeded on a channel. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1084 |
| wlsxSignatureMatchAP This trap indicates that an AP detected a signature match in a frame from an access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1085 |
| wlsxSignatureMatchSta This trap indicates that an AP detected a signature match in a frame from a Station. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1086 |
| wlsxChannelRateAnomaly This trap indicates that an AP detected frames on a channel which
exceed the configured IDS rate threshold. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1087 |
| wlsxNodeRateAnomalyAP This trap indicates that an AP detected frames transmitted or received by an
access point, which exceed the configured IDS rate threshold. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1088 |
| wlsxNodeRateAnomalySta This trap indicates that an AP detected frames transmitted or received by a
node, which exceed the configured IDS rate threshold. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1089 |
| wlsxEAPRateAnomaly This trap indicates that the rate of EAP Handshake packets
received by an AP has exceeded the configured IDS EAP Handshake rate threshold. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1090 |
| wlsxSignalAnomaly This trap indicates that an AM detected a Signal Anomaly. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1091 |
| wlsxSequenceNumberAnomalyAP This trap indicates that an AM received packets from an AP
which exceeds the acceptable sequence number difference.
The acceptable sequence number difference is an IDS configurat… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1092 |
| wlsxSequenceNumberAnomalySta This trap indicates that an AM received packets from a Node
which exceeds the acceptable sequence number difference.
The acceptable sequence number difference is an IDS configura… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1093 |
| wlsxDisconnectStationAttack This trap indicates that an AM detected a station Disconnect
attack. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1094 |
| wlsxApFloodAttack This trap indicates that the number of potential fake APs detected by
an AP has exceeded the configured IDS threshold. This is the total number of fake APs observed across all ba… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1095 |
| wlsxAdhocNetwork This trap indicates that an AM detected an Ad hoc
Network. An Station is connected to an ad hoc AP. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1096 |
| wlsxWirelessBridge This trap indicates that an AP detected a Wireless Bridge when a WDS frame was seen between the transmitter and receiver addresses. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1097 |
| wlsxInvalidMacOUIAP This trap indicates that an AP detected an invalid MAC OUI in the BSSID of a frame. An invalid MAC OUI suggests that the frame may be spoofed. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1098 |
| wlsxInvalidMacOUISta This trap indicates that an AP detected an invalid MAC OUI in the SRC or DST address of a frame. An invalid MAC OUI suggests that the frame may be spoofed. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1099 |
| wlsxWEPMisconfiguration This trap indicates that an AP detected an access point that is misconfigured because it does not have Privacy enabled. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1100 |
| wlsxStaRepeatWEPIVViolation This trap indicates that an AP detected that a valid station is using the same WEP initialization vector in consecutive packets. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1101 |
| wlsxStaWeakWEPIVViolation This trap indicates that an AP detected that a valid station is using a Weak WEP initialization vector. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1102 |
| wlsxStaAssociatedToUnsecureAP This trap indicates that an AM detected a client associated
with a Rogue access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1103 |
| wlsxStaUnAssociatedFromUnsecureAP This trap indicates that a previously detected rogue access point
association is no longer present. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1104 |
| wlsxAdhocNetworkBridgeDetected This trap indicates that an AM has detected an Ad hoc
network that is bridging to a wired network | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1105 |
| wlsxInterferingApDetected This trap indicates that an AP detected an access point classified as Interfering. The access point
is declared Interfering because it is neither authorized or classified as Rogu… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1106 |
| wlsxColdStart An enterprise version of cold start trap, which contains the controller time stamp. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1111 |
| wlsxWarmStart An enterprise version of warm start trap, which contains the controller time stamp. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1112 |
| wlsxAPImpersonation This trap indicates that an AP detected AP Impersonation because the number of beacons seen has exceeded the expected number by the configured percentage threshold.
The expected n… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1113 |
| wlsxNAuthServerIsDown This trap indicates that an authentication server is down. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1115 |
| wlsxWindowsBridgeDetected This trap indicates that an AM has detected a station
that is bridging from a wireless network
to a wired network | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1129 |
| wlsxSignAPNetstumbler This trap indicates that an AP detected a signature match for Netstumbler from an access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1134 |
| wlsxSignStaNetstumbler This trap indicates that an AP detected a signature match for Netstumbler from a Station. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1135 |
| wlsxSignAPAsleap This trap indicates that an AP detected a signature match for ASLEAP from an access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1136 |
| wlsxSignStaAsleap This trap indicates that an AP detected a signature match for ASLEAP from a Station. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1137 |
| wlsxSignAPAirjack This trap indicates that an AP detected a signature match for AirJack from an access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1138 |
| wlsxSignStaAirjack This trap indicates that an AP detected a signature match for AirJack from a Station. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1139 |
| wlsxSignAPNullProbeResp This trap indicates that an AP detected a signature match for Null-Probe-Response from an access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1140 |
| wlsxSignStaNullProbeResp This trap indicates that an AP detected a signature match for Null-Probe-Response from a Station. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1141 |
| wlsxSignAPDeauthBcast This trap indicates that an AP detected a signature match for Deauth-Broadcast from an access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1142 |
| wlsxSignStaDeauthBcast This trap indicates that an AP detected a signature match for Deauth-Broadcast from a Station. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1143 |
| wlsxWindowsBridgeDetectedAP This trap indicates that an AP is detecting an access point that is bridging from a wireless network
to a wired network. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1144 |
| wlsxWindowsBridgeDetectedSta This trap indicates that an AP is detecting a station that is bridging from a wireless network
to a wired network. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1145 |
| wlsxAdhocNetworkBridgeDetectedAP This trap indicates that an AM has detected an Ad hoc
network that is bridging to a wired network | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1146 |
| wlsxAdhocNetworkBridgeDetectedSta This trap indicates that an AM has detected an Ad hoc
network that is bridging to a wired network | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1147 |
| wlsxDisconnectStationAttackAP This trap indicates that an AM detected a station disconnect
attack. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1148 |
| wlsxDisconnectStationAttackSta This trap indicates that an AM detected a station Disconnect
attack. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1149 |
| wlsxSuspectUnsecureAPDetected This trap indicates that an access point, classified as Suspected Rogue, has been
detected by a Controller. The AP is suspected to be rogue,
with the supplied confidence level, b… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1150 |
| wlsxSuspectUnsecureAPResolved This trap indicates that a previously detected access point, classified Suspected
Rogue, is either no longer present in the network or
has changed its state. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1151 |
| wlsxHtGreenfieldSupported This trap indicates that an AP detected an access point that supports HT Greenfield mode. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1157 |
| wlsxHT40MHzIntoleranceAP This trap indicates that an AP is detecting an access point with the HT 40MHz intolerance setting. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1158 |
| wlsxHT40MHzIntoleranceSta This trap indicates that the system is detecting an HT 40MHz Intolerance setting from a Station. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1159 |
| wlsxNAuthServerAllInService This trap indicates that all authentication servers is a server group are brought back in service. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1160 |
| wlsxNAdhocNetwork This trap indicates that an AP detected an ad hoc
network where a station is connected to an ad hoc access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1161 |
| wlsxNAdhocNetworkBridgeDetectedAP This trap indicates that an AP detected an ad hoc
network that is bridging to a wired network. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1162 |
| wlsxNAdhocNetworkBridgeDetectedSta This trap indicates that an AP detected an ad hoc
network that is bridging to a wired network. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1163 |
| wlsxClientFloodAttack This trap indicates that the number of potential fake clients detected by
an AP has exceeded the configured IDS threshold. This is the total number of fake clients observed acros… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1170 |
| wlsxValidClientNotUsingEncryption This trap indicates that an AP detected an unencrypted data frame between a valid client and an access point. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1171 |
| wlsxAdhocUsingValidSSID This trap indicates that an AP detected an ad hoc network using a valid/protected SSID. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1172 |
| wlsxAPSpoofingDetected This trap indicates that an AP detected that one of its virtual APs is being spoofed using MAC spoofing. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1173 |
| wlsxClientAssociatingOnWrongChannel This trap indicates that an AP detected a client trying to associate to one of its BSSIDs on the wrong channel. This can be a sign that the BSSID is
being spoofed in order to fo… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1174 |
| wlsxNDisconnectStationAttack This trap indicates that an AP has determined that a client is under Disconnect Attack because the rate of Assoc/Reassoc Response packets
received by that client exceeds the confi… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1175 |
| wlsxNStaUnAssociatedFromUnsecureAP This trap indicates that an AP that had previously detected a client association to a Rogue access point is no longer detecting that association. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1176 |
| wlsxOmertaAttack This trap indicates that an AP detected an Omerta attack. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1177 |
| wlsxTKIPReplayAttack This trap indicates that an AP detected a TKIP replay attack. If successful this could be the precursor to more
advanced attacks. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1178 |
| wlsxChopChopAttack This trap indicates that an AP detected a ChopChop attack. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1179 |
| wlsxFataJackAttack This trap indicates that an AP detected a FATA-Jack attack. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1180 |
| wlsxInvalidAddressCombination This trap indicates that an AP detected an invalid source and destination combination. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1181 |
| wlsxValidClientMisassociation This trap indicates that an AP detected a misassociation between a valid client and an unsafe AP. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1182 |
| wlsxMalformedHTIEDetected This trap indicates that an AP detected a malformed HT Information Element. This can be the result of a misbehaving wireless driver or it may be an indication of a new wireless at… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1183 |
| wlsxMalformedAssocReqDetected This trap indicates that an AP detected a malformed association request with a NULL SSID. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1184 |
| wlsxOverflowIEDetected This trap indicates that an AP detected a management frame with a malformed information element. The declared length of the element is larger than the entire frame containing the … | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1185 |
| wlsxOverflowEAPOLKeyDetected This trap indicates that an AP detected a key in an EAPOL Key message with a specified length greater than the length of the entire message. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1186 |
| wlsxMalformedFrameLargeDurationDetected This trap indicates that an AP detected an unusually large duration in a wireless frame. This may be an attempt to block other devices from transmitting. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1187 |
| wlsxMalformedFrameWrongChannelDetected This trap indicates that an AP detected a beacon on one channel advertising another channel. This could be an attempt to lure clients away from a valid AP. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1188 |
| wlsxMalformedAuthFrame This trap indicates that an AP detected an authentication frame with
either a bad algorithm (similar to Fata-Jack) or a bad transaction. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1189 |
| wlsxCTSRateAnomaly This trap indicates that the rate of CTS packets
received by an AP exceeds the configured IDS threshold. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1190 |
| wlsxRTSRateAnomaly This trap indicates that the rate of RTS packets
received by an AP exceeds the configured IDS threshold. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1191 |
| wlsxNRogueAPDetected This trap indicates that an unauthorized access point is connected to the wired network. The access point is
classified as Rogue by the system. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1192 |
| wlsxNRogueAPResolved This trap indicates that a previously detected access point, classified as Rogue,
is either no longer present in the network or it changed its state. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1193 |
| wlsxNeighborAPDetected This trap indicates that an access point has been classified as a Neighbor by the system. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1194 |
| wlsxNInterferingAPDetected This trap indicates that an access point has been classified as Interfering by the system. The access point
is declared Interfering because it is not authorized, nor has it been … | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1195 |
| wlsxNSuspectRogueAPDetected This trap indicates that an access point, classified as Suspected Rogue, is
detected by the system. The AP is suspected to be rogue
with the supplied confidence level. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1196 |
| wlsxNSuspectRogueAPResolved This trap indicates that a previously detected access point, classified as Suspected
Rogue, is either no longer present in the network or
has changed its state. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1197 |
| wlsxBlockAckAttackDetected This trap indicates that an attempt has been made to deny service to
the source address by spoofing a block ACK add request that sets a
sequence number window outside the currentl… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1198 |
| wlsxHotspotterAttackDetected This trap indicates that a new AP has appeared immediately following a client probe request.
This is indicative of the Hotspotter tool or similar that attempts to trap clients wit… | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1199 |
| wlsxNSignatureMatch This trap indicates that an AP detected a signature match in a frame. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1200 |
| wlsxNSignatureMatchNetstumbler This trap indicates that an AP detected a signature match for Netstumbler in a frame. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1201 |
| wlsxNSignatureMatchAsleap This trap indicates that an AP detected a signature match for ASLEAP in a frame. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1202 |
| wlsxNSignatureMatchAirjack This trap indicates that an AP detected a signature match for Airjack in a frame. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1203 |
| wlsxNSignatureMatchNullProbeResp This trap indicates that an AP detected a signature match for Null-Probe-Response in a frame. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1204 |
| wlsxNSignatureMatchDeauthBcast This trap indicates that an AP detected a signature match for Deauth-Broadcast in a frame. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1205 |
| wlsxNSignatureMatchDisassocBcast This trap indicates that an AP detected a signature match for Disassoc-Broadcast in a frame. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1206 |
| wlsxNSignatureMatchWellenreiter This trap indicates that an AP detected a signature match for Wellenreiter in a frame. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1207 |
| wlsxAPDeauthContainment This trap indicates that an AP has attempted to contain an access point by disconnecting its client. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1208 |
| wlsxClientDeauthContainment This trap indicates that an AP has attempted to contain a client by disconnecting it from the AP that it is associated with. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1209 |
| wlsxAPWiredContainment This trap indicates that an AP has attempted to contain an access point by disrupting traffic to its client on the wired interface. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1210 |
| wlsxClientWiredContainment This trap indicates that an AP has attempted to contain a client by disrupting traffic to it on the wired interface. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1211 |
| wlsxAPTaggedWiredContainment This trap indicates that an AP has attempted to contain an access point by disrupting traffic to its client on the wired interface. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1212 |
| wlsxClientTaggedWiredContainment This trap indicates that an AP has attempted to contain a client by disrupting traffic to it on the wired interface. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1213 |
| wlsxTarpitContainment This trap indicates that an AP has attempted to contain an access point by moving a client that is attempting to associate to it to a tarpit. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1214 |
| wlsxAPChannelChange This trap indicates that an AP changed its channel. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1216 |
| wlsxAPPowerChange This trap indicates that an AP changed its transmit power level. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1217 |
| wlsxAPModeChange This trap indicates that an AP changed its mode from AP to APMonitor or vice versa. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1218 |
| wlsxUserEntryAttributesChanged This trap indicates that the user entry attributes have changed. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1219 |
| wlsxPowerSaveDosAttack This trap indicates that an AP detected a Power Save DoS attack. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1220 |
| wlsxNAPMasterStatusChange obsolete This trap indicates that the status of the AP as seen by
the master controller has changed.
**NOTE: this notification is obsoleted and replaced by
wlsxNAPConductorStatusChange | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1221 |
| wlsxNAdhocUsingValidSSID This trap indicates that an AP detected an ad hoc network node using a valid/protected SSID. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1222 |
| wlsxMgmtUserAuthenticationFailed This trap indicates that a management user authentication has failed. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1224 |
| wlsxAPActiveUplinkChanged When the active uplink of an AP changes, a notification is
sent to the Management Entity with the new uplink type | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1252 |
| wlsxAPManagedModeConfigFailureTrap Indicated failure in applying config. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1255 |
| wlsxNAuthServerAcctTimedOut This trap indicates that the authentication server accounting timed out. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1256 |
| wlsxPortalServerDown This trap indicates that the portal server is down. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1259 |
| wlsxPortalServerUp This trap indicates that the portal server is up. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1260 |
| wlsxIAPVoiceClientLocationUpdate The trap represents a IAP voice client location update. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1262 |
| wlsxMitMDetected This trap indicates that an AP detected a possible channel-based Man in the Middle attack by someone using spoofed beacons with an invalid Channel Switch Announcement. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1268 |
| wlsxAPLoopDetected This trap indicates that loop is detected on AP's secure jack port. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1271 |
| wlsxAPBROADCASTSTORM This trap indicates that broadcast storm is detected on AP's secure jack port. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1272 |
| wlsxCLEARPASSSERVERINVALID This trap indicates that clearpass server is not valid when using the CA to verity the server for download-role. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1274 |
| wlsxAPUSBPLUGALARM This trap indicates that an USB device is plugged in or out to an AP. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1277 |
| wlsxClientRejectedByMaxClientCount This trap indicates the client is rejected by the max client count. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1284 |
| wlsxClientPskAuthenticationFailed This trap indicates the client PSK Authentication Failed. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1285 |
| wlsxNStationAddedToDenyList This trap indicates that the station is in deny list. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1286 |
| wlsxNStationRemovedFromDenyList This trap indicates that the station is removed from the deny list. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1287 |
| wlsxNAPConductorStatusChange This trap indicates that the status of the AP as seen by
the conductor controller has changed. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1288 |
| wlsxPeerAssociatedToWifiDirectGo This trap indicates that an AP detected a wireless client associated to a WIFI-Direct Group Owner. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1291 |
| wlsxPeerAssociatedToWifiDirectGoContainment This trap indicates that containment is being enforced on a wireless client that is associated to a WIFI-Direct Group Owner. | notification | - | .1.3.6.1.4.1.14823.2.3.3.1.200.2.1292 |
Notification Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| wlsxTrapTime This object is used in all the enterprise traps to indicate the
the time when the trap is generated on the controller. | scalar | SNMPv2-TCDateAndTime | .1.3.6.1.4.1.14823.2.3.3.1.200.1.60 |
| wlsxTrapAPMacAddress This object is used in the traps to indicate
the wired MAC address of an access point, for which the trap is being raised. | scalar | SNMPv2-TCMacAddress | .1.3.6.1.4.1.14823.2.3.3.1.200.1.1 |
| wlsxTrapAPRadioNumber This object represents the radio number. | scalar | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.14823.2.3.3.1.200.1.56 |
| wlsxTrapAPLocation This object is used in the traps to indicate the Location of the AP. | scalar | OctetString | .1.3.6.1.4.1.14823.2.3.3.1.200.1.17 |
| wlsxTrapNodeMac This object is used in the traps to indicate the MAC address of
a node. | scalar | SNMPv2-TCMacAddress | .1.3.6.1.4.1.14823.2.3.3.1.200.1.8 |
| wlsxTrapAPChannel This object is used in the traps to indicate the Current Channel. | scalar | SNMPv2-SMIInteger32 | .1.3.6.1.4.1.14823.2.3.3.1.200.1.18 |
| wlsxTrapTargetAPBSSID This object is used in the traps to indicate the BSSID of the
access point, for which we are raising the trap. If an
Air Monitor is sending the trap then this will indicate
AP. If… | scalar | SNMPv2-TCMacAddress | .1.3.6.1.4.1.14823.2.3.3.1.200.1.5 |
| wlsxTrapAPBand This object represents the radio band on which an AP operates on. | scalar | OctetString | .1.3.6.1.4.1.14823.2.3.3.1.200.1.166 |