bsnSignatureAttackDetected
AIRESPACE-WIRELESS-MIB ·
.1.3.6.1.4.1.14179.2.6.3.70
Object
notification
This trap is sent out when a signature attack is detected by the switch. The standard and custom signatures are predefined on the switch (see bsnSignatureConfig group). The signatures also defines if its detection should be reported. The trap variables bsnSignatureName and bsnSignatureDescription are retrieved from the detected signature definition. Clear Trap Variable is turned on when the signature attack stops. The signature's quiet time configuration speicifes the time after which the clear trap would be sent. bsnSignatureMacInfo indicates whether the signature is used to track pattern matches for all source MAC addresses together or seperately for individual source MAC addresses. bsnSignatureAttackFrequency will carry the value for a specific MAC address or for all MAC addresses depending on bsnSignatureMacInfo.
Context
- MIB
- AIRESPACE-WIRELESS-MIB
- OID
.1.3.6.1.4.1.14179.2.6.3.70- Type
- notification
- Status
- current
- Parent
- bsnTraps
- Siblings
- 81
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| bsnDot11StationDisassociate The disassociate notification shall be sent when the Station
sends a Disassociation frame. The value of the notification
shall include the MAC address of the MAC to which the
Dis… | notification | - | .1.3.6.1.4.1.14179.2.6.3.1 |
| bsnAPIfDown deprecated When Airespace AP's interface's operation status goes down
this trap will be sent. | notification | - | .1.3.6.1.4.1.14179.2.6.3.10 |
| bsnAPLoadProfileFailed When LOAD Profile state changes from PASS to FAIL,
notification will be sent with Dot3 MAC address of Airespace
AP and slot ID of Airespace AP IF. This trap sending can be
enabl… | notification | - | .1.3.6.1.4.1.14179.2.6.3.11 |
| bsnAPNoiseProfileFailed When Noise Profile state changes from PASS to FAIL,
notification will be sent with Dot3 MAC address of Airespace
AP and slot ID of Airespace AP IF. This trap sending can be
enab… | notification | - | .1.3.6.1.4.1.14179.2.6.3.12 |
| bsnAPInterferenceProfileFailed When Interference Profile state changes from PASS to FAIL,
notification will be sent with Dot3 MAC address of Airespace
AP and slot ID of Airespace AP IF. This trap sending can b… | notification | - | .1.3.6.1.4.1.14179.2.6.3.13 |
| bsnAPCoverageProfileFailed When Coverage Profile state changes from PASS to FAIL,
notification will be sent with Dot3 MAC address of Airespace
AP and slot ID of Airespace AP IF. This trap sending can be
e… | notification | - | .1.3.6.1.4.1.14179.2.6.3.14 |
| bsnAPCurrentTxPowerChanged Whenever dynamic algorithms are running and
bsnAPIfPhyPowerAutomaticOn is true, Airespace AP Interface's
CurrentTxPower might get updated by algorithm. When
this occurs notificat… | notification | - | .1.3.6.1.4.1.14179.2.6.3.15 |
| bsnAPCurrentChannelChanged Whenever dynamic algorithms are running and
bsnAPIfPhyChannelAutomaticOn is true, Airespace AP
Interface's CurrentChannel might get updated by algorithm.
When this occurs notifi… | notification | - | .1.3.6.1.4.1.14179.2.6.3.16 |
| bsnDot11StationDeauthenticate The deauthenticate notification shall be sent when the Station
sends a Deauthentication frame. The value of the notification
shall include the MAC address of the MAC to which the
… | notification | - | .1.3.6.1.4.1.14179.2.6.3.2 |
| bsnRrmDot11aGroupingDone When Grouping is done, this notification will be sent from the
previous Group Leader where grouping algorithm was run. It has
MAC address of the new Group Leader. | notification | - | .1.3.6.1.4.1.14179.2.6.3.21 |
| bsnRrmDot11bGroupingDone When Grouping is done, this notification will be sent from the
previous Group Leader where grouping algorithm was run. It has
MAC address of the new Group Leader. | notification | - | .1.3.6.1.4.1.14179.2.6.3.22 |
| bsnConfigSaved When configuration is save either from CLI or web interface
This trap will be sent to inform NMS to do refresh | notification | - | .1.3.6.1.4.1.14179.2.6.3.23 |
| bsnDot11EssCreated Whenever a new Ess (WLAN) is created, this notification will
be sent along with EssIndex | notification | - | .1.3.6.1.4.1.14179.2.6.3.24 |
| bsnDot11EssDeleted Whenever a Ess (WLAN)is deleted, this notification will be
sent along with EssIndex | notification | - | .1.3.6.1.4.1.14179.2.6.3.25 |
| bsnRADIUSServerNotResponding This trap is to indicate that no RADIUS server(s) are responding
to authentication requests sent by the RADIUS client within the
MWAR device(Switch). | notification | - | .1.3.6.1.4.1.14179.2.6.3.26 |
| bsnAuthenticationFailure This trap is to inform that client authentication failure has
occured at MWAR(Switch). This could be cli/web user, wlan user,
or Mac Authorized user. ServiceType will indicate wh… | notification | - | .1.3.6.1.4.1.14179.2.6.3.27 |
| bsnIpsecEspAuthFailureTrap IPsec packets with invalid hashes were found in an inbound
ESP SA. The total number of authentication errors
accumulated is sent for the specific row of the
ipsecSaEspInTable tabl… | notification | - | .1.3.6.1.4.1.14179.2.6.3.28 |
| bsnIpsecEspReplayFailureTrap IPsec packets with invalid sequence numbers were found in
an inbound ESP SA. The total number of replay errors
accumulated is sent for the specific row of the
ipsecSaEspInTable ta… | notification | - | .1.3.6.1.4.1.14179.2.6.3.29 |
| bsnDot11StationAuthenticateFail The authenticate failure notification shall be sent when the
Station sends an Authentication frame with a status code other
than 'successful'. The value of the notification shall … | notification | - | .1.3.6.1.4.1.14179.2.6.3.3 |
| bsnIpsecEspInvalidSpiTrap A packet with an unknown SPI was detected from the
specified peer with the specified SPI using the specified
protocol. The destination address of the received packet is
specified … | notification | - | .1.3.6.1.4.1.14179.2.6.3.31 |
| bsnIpsecIkeNegFailure An attempt to negotiate a phase 1 IKE SA failed.
The notification counts are also sent as part of the trap,
along with the current value of the total negotiation error
counters fo… | notification | - | .1.3.6.1.4.1.14179.2.6.3.33 |
| bsnIpsecSuiteNegFailure An attempt to negotiate a phase 2 SA suite for the
specified selector failed.
The current total failure counts are passed as well as the
notification type counts for the notify in… | notification | - | .1.3.6.1.4.1.14179.2.6.3.34 |
| bsnIpsecInvalidCookieTrap ISAKMP packets with invalid cookies were detected from the
specified source, intended for the specified destination.
The initiator and responder cookies are also sent w… | notification | - | .1.3.6.1.4.1.14179.2.6.3.35 |
| bsnRogueAPDetected When a Rogue AP is detected this Trap will be sent out along
with APMacAddress on which its detected | notification | - | .1.3.6.1.4.1.14179.2.6.3.36 |
| bsnAPLoadProfileUpdatedToPass When LOAD Profile state changes from FAIL to PASSt this
notification will be sent with Dot3 MAC address of Airespace
AP and slot ID of Airespace AP IF. This trap sending can be
… | notification | - | .1.3.6.1.4.1.14179.2.6.3.37 |
| bsnAPNoiseProfileUpdatedToPass When Noise Profile state changes from FAIL tp PASS,
notification will be sent with Dot3 MAC address of Airespace
AP and slot ID of Airespace AP IF. This trap sending can be
enab… | notification | - | .1.3.6.1.4.1.14179.2.6.3.38 |
| bsnAPInterferenceProfileUpdatedToPass When Interference Profile state changes from FAIL tp PASS,
notification will be sent with Dot3 MAC address of Airespace
AP and slot ID of Airespace AP IF. This trap sending can b… | notification | - | .1.3.6.1.4.1.14179.2.6.3.39 |
| bsnDot11StationAssociateFail The associate failure notification shall be sent when the
Station sends an Association frame with a status code other
than 'successful'. The value of the notification
shall inclu… | notification | - | .1.3.6.1.4.1.14179.2.6.3.4 |
| bsnAPCoverageProfileUpdatedToPass When Coverage Profile state changes from FAIL tp PASS,
notification will be sent with Dot3 MAC address of Airespace
AP and slot ID of Airespace AP IF. This trap sending can be
e… | notification | - | .1.3.6.1.4.1.14179.2.6.3.40 |
| bsnRogueAPRemoved When a Rogue AP that was detected earlier no longer exists
this Trap will be sent out along
with APMacAddress on which its detected | notification | - | .1.3.6.1.4.1.14179.2.6.3.41 |
| bsnRadiosExceedLicenseCount Whenever the currently associated Radios exceed the License Count
This trap will be sent to annoy the Customer | notification | - | .1.3.6.1.4.1.14179.2.6.3.42 |
| bsnSensedTemperatureTooHigh Temperature sensor temp too High - temp is too high on the unit.
Immediate action should be taken | notification | - | .1.3.6.1.4.1.14179.2.6.3.43 |
| bsnSensedTemperatureTooLow Temperature sensor temp too Low - temp is too high on the unit.
Immediate action should be taken | notification | - | .1.3.6.1.4.1.14179.2.6.3.44 |
| bsnTemperatureSensorFailure Temperature sensor hw failure - temp sensor has failed.
Temperature is unknown | notification | - | .1.3.6.1.4.1.14179.2.6.3.45 |
| bsnTemperatureSensorClear Temperature sensor clear -- temp sensor alarm condition is over.
sensor is operating within proper temp range | notification | - | .1.3.6.1.4.1.14179.2.6.3.46 |
| bsnPOEControllerFailure POE Controller has failed. Its a very critical trap.
User intervention is required. | notification | - | .1.3.6.1.4.1.14179.2.6.3.47 |
| bsnMaxRogueCountExceeded The number of rogues has exceeded the maximum Rogues allowed | notification | - | .1.3.6.1.4.1.14179.2.6.3.48 |
| bsnMaxRogueCountClear The number of rogues is within the maximum Rogues allowed | notification | - | .1.3.6.1.4.1.14179.2.6.3.49 |
| bsnAPUp obsolete When Airespace AP operation status goes up this trap will be
sent | notification | - | .1.3.6.1.4.1.14179.2.6.3.5 |
| bsnApMaxRogueCountExceeded The number of rogues has exceeded the maximum Rogues allowed on
the AP | notification | - | .1.3.6.1.4.1.14179.2.6.3.50 |
| bsnApMaxRogueCountClear The number of rogues is within the maximum Rogues allowed on the
AP | notification | - | .1.3.6.1.4.1.14179.2.6.3.51 |
| bsnDot11StationBlacklisted The station exclusion notification shall be sent when the
client is excluded. The reason could be repeated auth or
association failures or IP Address theft.
The value of the not… | notification | - | .1.3.6.1.4.1.14179.2.6.3.52 |
| bsnDot11StationAssociate The associate notification shall be sent when any of the
watchlisted clients(present on at least one watch list)
associates with an AP. The value of the notification
shall include… | notification | - | .1.3.6.1.4.1.14179.2.6.3.53 |
| bsnApBigNavDosAttack The AP sent a string of messages with large NAV field. This is most
likely a malicious denial of service attack. | notification | - | .1.3.6.1.4.1.14179.2.6.3.55 |
| bsnTooManyUnsuccessLoginAttempts The Management User made too many unsuccessful login attempts. | notification | - | .1.3.6.1.4.1.14179.2.6.3.56 |
| bsnWepKeyDecryptError Issued when a decrypt error occurrs. The WEP Key configured at
the station may be wrong. | notification | - | .1.3.6.1.4.1.14179.2.6.3.57 |
| bsnWpaMicErrorCounterActivated Issued when a WPA MIC error occurs and a counter measure is
activated at the AP. | notification | - | .1.3.6.1.4.1.14179.2.6.3.58 |
| bsnRogueAPDetectedOnWiredNetwork When a Rogue is detected on the wired network this trap will
be sent out.
The same trap with bsnRogueAPOnWiredNetwork set to no will
clear the previous trap. | notification | - | .1.3.6.1.4.1.14179.2.6.3.59 |
| bsnAPDown obsolete When Airespace AP operation status goes down this trap will be
sent | notification | - | .1.3.6.1.4.1.14179.2.6.3.6 |
| bsnApHasNoRadioCards When an AP has no radio cards present on it, the switch
sends this trap. | notification | - | .1.3.6.1.4.1.14179.2.6.3.60 |
| bsnDuplicateIpAddressReported This trap is issued when the switch or an AP detects another
machine using its IP Address. The first variable has value
yes if the duplicate IP is reported by an AP. In that case… | notification | - | .1.3.6.1.4.1.14179.2.6.3.61 |
| bsnAPContainedAsARogue When our AP detects that it is being contained by another AP,
this trap is issued. The clear flag is true if the AP is no
longer being contained. | notification | - | .1.3.6.1.4.1.14179.2.6.3.62 |
| bsnTrustedApHasInvalidSsid Issued when a Trusted Rogue AP is auto contained for advertising
invalid SSID.
If the clear variable has value true, then the trap clears the
earlier alert. | notification | - | .1.3.6.1.4.1.14179.2.6.3.63 |
| bsnTrustedApIsMissing Issued when a Trusted Rogue AP is missing or has failed.
If the clear variable has value true, then the trap clears the
earlier alert. | notification | - | .1.3.6.1.4.1.14179.2.6.3.64 |
| bsnAdhocRogueAutoContained Issued when an Adhoc Rogue is auto contained.
If the clear variable has value true, then the trap clears the
earlier alert. | notification | - | .1.3.6.1.4.1.14179.2.6.3.65 |
| bsnRogueApAutoContained Issued when a Rogue AP is auto contained for advertising our SSID.
If the clear variable has value true, then the trap clears the
earlier alert. | notification | - | .1.3.6.1.4.1.14179.2.6.3.66 |
| bsnTrustedApHasInvalidEncryption Issued when a Trusted Rogue AP is auto contained for using
invalid encryption. The second param is for the encryption used
and the third param is for encryption required.
If the … | notification | - | .1.3.6.1.4.1.14179.2.6.3.67 |
| bsnTrustedApHasInvalidRadioPolicy Issued when a Trusted Rogue AP is auto contained for using
invalid radio policy. The second param is for the radio policy
used and the third param is for radio policy required.
… | notification | - | .1.3.6.1.4.1.14179.2.6.3.68 |
| bsnNetworkStateChanged When the 802.11a or b/g network state is changed this trap
is issued. | notification | - | .1.3.6.1.4.1.14179.2.6.3.69 |
| bsnAPAssociated deprecated When Airespace AP Associates to a Airespace Switch, AP
associated notification will be sent with dot3 MAC address of
Airespace AP.This will help management system to discover
Ai… | notification | - | .1.3.6.1.4.1.14179.2.6.3.7 |
| bsnAPRadioCardTxFailure This trap is sent by the switch when a radio card on an AP
stops transmitting. | notification | - | .1.3.6.1.4.1.14179.2.6.3.71 |
| bsnAPRadioCardTxFailureClear This trap is sent by the switch when a radio card on an AP
starts transmitting again after a prior failure. | notification | - | .1.3.6.1.4.1.14179.2.6.3.72 |
| bsnAPRadioCardRxFailure This trap is sent by the switch when a radio card on an AP
stops receiving. | notification | - | .1.3.6.1.4.1.14179.2.6.3.73 |
| bsnAPRadioCardRxFailureClear This trap is sent by the switch when a radio card on an AP
starts receiving again after a prior failure. | notification | - | .1.3.6.1.4.1.14179.2.6.3.74 |
| bsnAPImpersonationDetected This trap is sent by the switch when a radio of an
authenticated AP hears from another AP whose MAC Address
neither matches that of a rogue's and nor is it an
authenticated neigh… | notification | - | .1.3.6.1.4.1.14179.2.6.3.75 |
| bsnTrustedApHasInvalidPreamble Issued when a Trusted Rogue AP is auto contained for using invalid
preamble. The second param is for the preamble used and the third
param is for preamble required. If the clear v… | notification | - | .1.3.6.1.4.1.14179.2.6.3.76 |
| bsnAPIPAddressFallback This trap is sent out when an AP, with the configured static
ip-address, fails to establish connection with outside world
and starts using DHCP as a fallback option. | notification | - | .1.3.6.1.4.1.14179.2.6.3.77 |
| bsnAPFunctionalityDisabled This trap is sent out when AP functionality on the switch is
disabled because the License key has expired
or has been deleted or doesn't match the switch image. | notification | - | .1.3.6.1.4.1.14179.2.6.3.78 |
| bsnAPRegulatoryDomainMismatch deprecated This trap is generated if an AP's regulatory domain doesn't
match the country the switch is configured for. Due to the
mismatch, the AP will fail to associate with the Switch. | notification | - | .1.3.6.1.4.1.14179.2.6.3.79 |
| bsnAPDisassociated When Airespace AP disassociates from Airespace Switch, AP
disassociated notification will be sent with dot3 MAC address
of Airespace AP management system to remove Airespace AP fr… | notification | - | .1.3.6.1.4.1.14179.2.6.3.8 |
| bsnRxMulticastQueueFull This trap indicates that the CPU's Receive Multicast Queue is
Full. | notification | - | .1.3.6.1.4.1.14179.2.6.3.80 |
| bsnRadarChannelDetected This trap is sent when radar signals are detected on the
current channel | notification | - | .1.3.6.1.4.1.14179.2.6.3.81 |
| bsnRadarChannelCleared This trap will be generated, if a radar trap has been
generated earlier, after the expiry of Non-Occupancy Period. | notification | - | .1.3.6.1.4.1.14179.2.6.3.82 |
| bsnAPAuthorizationFailure This trap is sent out in case of authorization failure while
attempting to associate the AP to the controller.
bsnAPDot3MacAddress represents the mac-address of that AP.
bsnAPName… | notification | - | .1.3.6.1.4.1.14179.2.6.3.83 |
| radioCoreDumpTrap When radio module in AP dumps core, it informs controller and
controller generates this trap. The core file can be retrieved
on demand. | notification | - | .1.3.6.1.4.1.14179.2.6.3.84 |
| invalidRadioTrap This trap will be generated when an AP has joined is using
unsupported radio or a radio slot not currently not being
used. | notification | - | .1.3.6.1.4.1.14179.2.6.3.85 |
| countryChangeTrap deprecated This trap will be generated when an operator changes the
country of operation. New country code will be sent in trap. | notification | - | .1.3.6.1.4.1.14179.2.6.3.86 |
| unsupportedAPTrap This trap will be generated when unsupported AP try to join
40xx/410x or 3500 with 64MB flash. | notification | - | .1.3.6.1.4.1.14179.2.6.3.87 |
| heartbeatLossTrap This trap will be generated when controller loses
connection with the Supervisor Switch in which it
is physically embedded and doesn't hear the
heartbeat keepalives from the Super… | notification | - | .1.3.6.1.4.1.14179.2.6.3.88 |
| locationNotifyTrap This trap will be generated by the location server
for notifications of location events. | notification | - | .1.3.6.1.4.1.14179.2.6.3.89 |
| bsnAPIfUp deprecated When Airespace AP's interface's operation status goes up this
trap will be sent | notification | - | .1.3.6.1.4.1.14179.2.6.3.9 |