ciscoLwappMfpAnomalyDetected1
CISCO-LWAPP-MFP-MIB ·
.1.3.6.1.4.1.9.9.518.0.5
Object
notification
This notification is sent by the agent when the
MFP configuration of the WLAN was violated by the
radio interface cLApIfSmtDot11Bssid and detected by
the radio interface cLApDot11IfSlotId of the AP
cLApMacAddress. The violation is indicated by
cLMfpEventType.
Through this notification, the controller reports
the NMS the occurrence of a total of cLMfpEventTotal
volation events, of type cLMfpEventType, upon
observing the management frame(s) indicated by
cLMfpEventFrames for the last cLMfpEventPeriod
time units. When cLMfpEventTotal is 0, it
indicates that no further anomalies have recently
been detected and that the NMS should clear any
alarm raised about the MFP errors.
cLClientLastSourceMacAddress is used only when the
controller generates notifications about client-related
attacks. The controller will populate zeros as the value
for cLClientLastSourceMacAddress when reporting anomalies
sourced by infrastructure devices.
This notification is generated by the controller
only if MFP has been configured as the protection
mechanism through cLMfpProtectType.
Context
- MIB
- CISCO-LWAPP-MFP-MIB
- OID
.1.3.6.1.4.1.9.9.518.0.5- Type
- notification
- Status
- current
- Parent
- ciscoLwappMfpMIBNotifs
- Siblings
- 4
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ciscoLwappMfpProtectConfigMismatch This notification is sent by the agent when the
controller detects that the AP couldn't apply the
protection configuration to the specific radio
interface for the specified WLAN. … | notification | - | .1.3.6.1.4.1.9.9.518.0.1 |
| ciscoLwappMfpValidationConfigMismatch This notification is sent by the agent when the
controller detects that the AP couldn't configure
itself with the MFP signature validation
configuration. The controller detects … | notification | - | .1.3.6.1.4.1.9.9.518.0.2 |
| ciscoLwappMfpTimebaseStatus This notification is sent by the agent to indicate
the controller's status of synchronization of its
timebase with that of a central timebase. The
notification is sent once after… | notification | - | .1.3.6.1.4.1.9.9.518.0.3 |
| ciscoLwappMfpAnomalyDetected deprecated This notification is sent by the agent when the
MFP configuration of the WLAN was violated by the
radio interface cLApIfSmtDot11Bssid and detected by
the radio interface cLApDot… | notification | - | .1.3.6.1.4.1.9.9.518.0.4 |
Notification Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| cLApMacAddress This object represents the radio MAC address
of a LWAPP AP. | scalar | SNMPv2-TCMacAddress | .1.3.6.1.4.1.9.9.518.1.1 |
| cLApDot11IfSlotIdx This object represents the slotId of the dot11
interface. | scalar | Unsigned32 | .1.3.6.1.4.1.9.9.518.1.2 |
| CISCO-LWAPP-AP-MIBcLApIfSmtDot11Bssid This object represents the base BSSID of this AP, which
is the MAC address of the radio interface of this
AP. | column | SNMPv2-TCMacAddress | .1.3.6.1.4.1.9.9.513.1.1.2.1.1 |
| cLMfpEventType This object represents the type of the MFP anomaly event. | scalar | CISCO-LWAPP-TC-MIBCLMfpEventType | .1.3.6.1.4.1.9.9.518.1.5 |
| cLMfpEventTotal This object represents the number of MFP anomaly events
detected in the prior period indicated by cLMfpEventPeriod.
cLMfpEventType indicates the type of the anomaly
event. | scalar | SNMPv2-SMIGauge32 | .1.3.6.1.4.1.9.9.518.1.6 |
| cLMfpEventPeriod This object represents the time period, in hundredths
of a second, in which the reported number of events are
detected. This is the time interval at which
the control… | scalar | SNMPv2-TCTimeInterval | .1.3.6.1.4.1.9.9.518.1.7 |
| cLMfpEventFrames This object indicates which type of 802.11 management
frames contain anomalies of type cLMfpEventType.
When the controller detects anomalies using the
MFP validation test it wil… | scalar | CISCO-LWAPP-TC-MIBCLEventFrames | .1.3.6.1.4.1.9.9.518.1.8 |
| cLClientLastSourceMacAddress This object represents the MAC address of the
client that is responsible for the most recent event
related to a wireless client. This information is useful to
identify the rogue… | scalar | SNMPv2-TCMacAddress | .1.3.6.1.4.1.9.9.518.1.10 |
| CISCO-LWAPP-AP-MIBcLApName This object specifies the administrative name
assigned to the AP by the user. If an AP is not configured,
its factory default name will be ap:<last three byte
of MACAddress> eg.… | column | OctetString | .1.3.6.1.4.1.9.9.513.1.1.1.1.5 |