ai Traps Definitions Group. Aruba IAP-135, RAP-108, IAP-175P, Instant, RAP-3WN, AP-114, IAP-104, IAP-92, RAP-155P, AP-304

Document

| Traps

ai Traps Definitions Group

Table 11 ai Traps Definitions Group OIDs

Object Object ID

wlsxNUserEntryCreated wlsxNUserEntryDeleted wlsxNUserEntryAuthenticated wlsxNUserEntryDeAuthenticated wlsxNUserAuthenticationFailed wlsxNAuthServerReqTimedOut wlsxNAuthServerTimedOut wlsxNAuthServerIsUp wlsxNAccessPointIsUp wlsxNAccessPointIsDown wlsxNChannelChanged wlsxNStationAddedToBlackList wlsxNStationRemovedFromBlackList wlsxNRadioAttributesChanged wlsxUnsecureAPDetected wlsxUnsecureAPResolved wlsxStaImpersonation wlsxReservedChannelViolation

1.3.6.1.4.1.14823.2.3.3.1.200.2.1014

wlsxTrapDefinitionsGroup

1014

1.3.6.1.4.1.14823.2.3.3.1.200.2.1015

wlsxTrapDefinitionsGroup

1015

1.3.6.1.4.1.14823.2.3.3.1.200.2.1016

wlsxTrapDefinitionsGroup

1016

1.3.6.1.4.1.14823.2.3.3.1.200.2.1017

wlsxTrapDefinitionsGroup

1017

1.3.6.1.4.1.14823.2.3.3.1.200.2.1018

wlsxTrapDefinitionsGroup

1018

1.3.6.1.4.1.14823.2.3.3.1.200.2.1019

wlsxTrapDefinitionsGroup

1019

1.3.6.1.4.1.14823.2.3.3.1.200.2.1020

wlsxTrapDefinitionsGroup

1020

1.3.6.1.4.1.14823.2.3.3.1.200.2.1021

wlsxTrapDefinitionsGroup

1021

1.3.6.1.4.1.14823.2.3.3.1.200.2.1040

wlsxTrapDefinitionsGroup

1040

1.3.6.1.4.1.14823.2.3.3.1.200.2.1041

wlsxTrapDefinitionsGroup

1041

1.3.6.1.4.1.14823.2.3.3.1.200.2.1043

wlsxTrapDefinitionsGroup

1043

1.3.6.1.4.1.14823.2.3.3.1.200.2.1044

wlsxTrapDefinitionsGroup

1044

1.3.6.1.4.1.14823.2.3.3.1.200.2.1045

wlsxTrapDefinitionsGroup

1045

1.3.6.1.4.1.14823.2.3.3.1.200.2.1049

wlsxTrapDefinitionsGroup

1049

1.3.6.1.4.1.14823.2.3.3.1.200.2.1053

wlsxTrapDefinitionsGroup

1053

1.3.6.1.4.1.14823.2.3.3.1.200.2.1054

wlsxTrapDefinitionsGroup

1054

1.3.6.1.4.1.14823.2.3.3.1.200.2.1055

wlsxTrapDefinitionsGroup

1055

1.3.6.1.4.1.14823.2.3.3.1.200.2.1056

wlsxTrapDefinitionsGroup

1056

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

Table 11 ai Traps Definitions Group OIDs (Continued)

Object Object ID

wlsxValidSSIDViolation wlsxChannelMisconfiguration wlsxOUIMisconfiguration wlsxSSIDMisconfiguration wlsxShortPreableMisconfiguration wlsxWPAMisconfiguration wlsxAdhocNetworkDetected wlsxAdhocNetworkRemoved wlsxStaPolicyViolation wlsxRepeatWEPIVViolation wlsxWeakWEPIVViolation wlsxChannelInterferenceDetected wlsxChannelInterferenceCleared wlsxAPInterferenceDetected wlsxAPInterferenceCleared wlsxStaInterferenceDetected wlsxStaInterferenceCleared wlsxFrameRetryRateExceeded

1.3.6.1.4.1.14823.2.3.3.1.200.2.1057

wlsxTrapDefinitionsGroup

1057

1.3.6.1.4.1.14823.2.3.3.1.200.2.1058

wlsxTrapDefinitionsGroup

1058

1.3.6.1.4.1.14823.2.3.3.1.200.2.1059

wlsxTrapDefinitionsGroup

1059

1.3.6.1.4.1.14823.2.3.3.1.200.2.1060

wlsxTrapDefinitionsGroup

1060

1.3.6.1.4.1.14823.2.3.3.1.200.2.1061

wlsxTrapDefinitionsGroup

1061

1.3.6.1.4.1.14823.2.3.3.1.200.2.1062

wlsxTrapDefinitionsGroup

1062

1.3.6.1.4.1.14823.2.3.3.1.200.2.1063

wlsxTrapDefinitionsGroup

1063

1.3.6.1.4.1.14823.2.3.3.1.200.2.1064

wlsxTrapDefinitionsGroup

1064

1.3.6.1.4.1.14823.2.3.3.1.200.2.1065

wlsxTrapDefinitionsGroup

1065

1.3.6.1.4.1.14823.2.3.3.1.200.2.1066

wlsxTrapDefinitionsGroup

1066

1.3.6.1.4.1.14823.2.3.3.1.200.2.1067

wlsxTrapDefinitionsGroup

1067

1.3.6.1.4.1.14823.2.3.3.1.200.2.1068

wlsxTrapDefinitionsGroup

1068

1.3.6.1.4.1.14823.2.3.3.1.200.2.1069

wlsxTrapDefinitionsGroup

1069

1.3.6.1.4.1.14823.2.3.3.1.200.2.1070

wlsxTrapDefinitionsGroup

1070

1.3.6.1.4.1.14823.2.3.3.1.200.2.1071

wlsxTrapDefinitionsGroup

1071

1.3.6.1.4.1.14823.2.3.3.1.200.2.1072

wlsxTrapDefinitionsGroup

1072

1.3.6.1.4.1.14823.2.3.3.1.200.2.1073

wlsxTrapDefinitionsGroup

1073

1.3.6.1.4.1.14823.2.3.3.1.200.2.1074

wlsxTrapDefinitionsGroup

1074

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

| Traps

Table 11 ai Traps Definitions Group OIDs (Continued)

Object Object ID

wlsxFrameReceiveErrorRateExceeded wlsxFrameFragmentationRateExceeded wlsxFrameBandWidthRateExceeded wlsxFrameLowSpeedRateExceeded wlsxFrameNonUnicastRateExceeded wlsxLoadbalancingEnabled wlsxLoadbalancingDisabled wlsxChannelFrameRetryRateExceeded

1.3.6.1.4.1.14823.2.3.3.1.200.2.1075

wlsxTrapDefinitionsGroup

1075

1.3.6.1.4.1.14823.2.3.3.1.200.2.1076

wlsxTrapDefinitionsGroup

1076

1.3.6.1.4.1.14823.2.3.3.1.200.2.1077

wlsxTrapDefinitionsGroup

1077

1.3.6.1.4.1.14823.2.3.3.1.200.2.1078

wlsxTrapDefinitionsGroup

1078

1.3.6.1.4.1.14823.2.3.3.1.200.2.1079

wlsxTrapDefinitionsGroup

1079

1.3.6.1.4.1.14823.2.3.3.1.200.2.1080

wlsxTrapDefinitionsGroup

1080

1.3.6.1.4.1.14823.2.3.3.1.200.2.1081

wlsxTrapDefinitionsGroup

1081

1.3.6.1.4.1.14823.2.3.3.1.200.2.1082

wlsxTrapDefinitionsGroup

1082 wlsxChannelFrameFragmentationRateExce eded

1.3.6.1.4.1.14823.2.3.3.1.200.2.1083

wlsxTrapDefinitionsGroup

1083 wlsxChannelFrameErrorRateExceeded 1.3.6.1.4.1.14823.2.3.3.1.200.2.1084

wlsxTrapDefinitionsGroup

1084 wlsxSignatureMatchAP wlsxSignatureMatchSta wlsxChannelRateAnomaly wlsxNodeRateAnomaly

1.3.6.1.4.1.14823.2.3.3.1.200.2.1085

wlsxTrapDefinitionsGroup

1085

1.3.6.1.4.1.14823.2.3.3.1.200.2.1086

wlsxTrapDefinitionsGroup

1086

1.3.6.1.4.1.14823.2.3.3.1.200.2.1087

wlsxTrapDefinitionsGroup

1087

1.3.6.1.4.1.14823.2.3.3.1.200.2.1003

wlsxTrapDefinitionsGroup

1003 wlsxNodeRateAnomalyAP wlsxNodeRateAnomalySta wlsxEAPRateAnomaly wlsxSignalAnomaly

1.3.6.1.4.1.14823.2.3.3.1.200.2.1088

wlsxTrapDefinitionsGroup

1088

1.3.6.1.4.1.14823.2.3.3.1.200.2.1089

wlsxTrapDefinitionsGroup

1089

1.3.6.1.4.1.14823.2.3.3.1.200.2.1090

wlsxTrapDefinitionsGroup

1090

1.3.6.1.4.1.14823.2.3.3.1.200.2.1091

wlsxTrapDefinitionsGroup

1091

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

Table 11 ai Traps Definitions Group OIDs (Continued)

Object Object ID

wlsxSequenceNumberAnomalyAP wlsxSequenceNumberAnomalySta wlsxDisconnectStationAttack wlsxApFloodAttack wlsxAdhocNetwork wlsxWirelessBridge wlsxInvalidMacOUIAP wlsxInvalidMacOUISta wlsxWEPMisconfiguration wlsxStaRepeatWEPIVViolation wlsxStaWeakWEPIVViolation wlsxStaAssociatedToUnsecureAP wlsxStaUnAssociatedFromUnsecureAP wlsxAdhocNetworkBridgeDetected wlsxInterferingApDetected wlsxColdStart wlsxWarmStart wlsxAPImpersonation

1.3.6.1.4.1.14823.2.3.3.1.200.2.1092

wlsxTrapDefinitionsGroup

1092

1.3.6.1.4.1.14823.2.3.3.1.200.2.1093

wlsxTrapDefinitionsGroup

1093

1.3.6.1.4.1.14823.2.3.3.1.200.2.1094

wlsxTrapDefinitionsGroup

1094

1.3.6.1.4.1.14823.2.3.3.1.200.2.1095

wlsxTrapDefinitionsGroup

1095

1.3.6.1.4.1.14823.2.3.3.1.200.2.1096

wlsxTrapDefinitionsGroup

1096

1.3.6.1.4.1.14823.2.3.3.1.200.2.1097

wlsxTrapDefinitionsGroup

1097

1.3.6.1.4.1.14823.2.3.3.1.200.2.1098

wlsxTrapDefinitionsGroup

1098

1.3.6.1.4.1.14823.2.3.3.1.200.2.1099

wlsxTrapDefinitionsGroup

1099

1.3.6.1.4.1.14823.2.3.3.1.200.2.1100

wlsxTrapDefinitionsGroup

1100

1.3.6.1.4.1.14823.2.3.3.1.200.2.1101

wlsxTrapDefinitionsGroup

1101

1.3.6.1.4.1.14823.2.3.3.1.200.2.1102

wlsxTrapDefinitionsGroup

1102

1.3.6.1.4.1.14823.2.3.3.1.200.2.1103

wlsxTrapDefinitionsGroup

1103

1.3.6.1.4.1.14823.2.3.3.1.200.2.1104

wlsxTrapDefinitionsGroup

1104

1.3.6.1.4.1.14823.2.3.3.1.200.2.1105

wlsxTrapDefinitionsGroup

1105

1.3.6.1.4.1.14823.2.3.3.1.200.2.1106

wlsxTrapDefinitionsGroup

1106

1.3.6.1.4.1.14823.2.3.3.1.200.2.1111

wlsxTrapDefinitionsGroup

1111

1.3.6.1.4.1.14823.2.3.3.1.200.2.1112

wlsxTrapDefinitionsGroup

1112

1.3.6.1.4.1.14823.2.3.3.1.200.2.1113

wlsxTrapDefinitionsGroup

1113

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

| Traps

Table 11 ai Traps Definitions Group OIDs (Continued)

Object Object ID

wlsxNAuthServerIsDown wlsxWindowsBridgeDetected wlsxSignAPNetstumbler wlsxSignStaNetstumbler wlsxSignAPAsleap wlsxSignStaAsleap wlsxSignAPAirjack wlsxSignStaAirjack wlsxSignAPNullProbeResp wlsxSignStaNullProbeResp wlsxSignAPDeauthBcast wlsxSignStaDeauthBcast wlsxWindowsBridgeDetectedAP wlsxWindowsBridgeDetectedSta wlsxAdhocNetworkBridgeDetectedAP wlsxAdhocNetworkBridgeDetectedSta wlsxDisconnectStationAttackAP wlsxDisconnectStationAttackSta

1.3.6.1.4.1.14823.2.3.3.1.200.2.1115

wlsxTrapDefinitionsGroup

1115

1.3.6.1.4.1.14823.2.3.3.1.200.2.1129

wlsxTrapDefinitionsGroup

1129

1.3.6.1.4.1.14823.2.3.3.1.200.2.1134

wlsxTrapDefinitionsGroup

1134

1.3.6.1.4.1.14823.2.3.3.1.200.2.1135

wlsxTrapDefinitionsGroup

1135

1.3.6.1.4.1.14823.2.3.3.1.200.2.1136

wlsxTrapDefinitionsGroup

1136

1.3.6.1.4.1.14823.2.3.3.1.200.2.1137

wlsxTrapDefinitionsGroup

1137

1.3.6.1.4.1.14823.2.3.3.1.200.2.1138

wlsxTrapDefinitionsGroup

1138

1.3.6.1.4.1.14823.2.3.3.1.200.2.1139

wlsxTrapDefinitionsGroup

1139

1.3.6.1.4.1.14823.2.3.3.1.200.2.1140

wlsxTrapDefinitionsGroup

1140

1.3.6.1.4.1.14823.2.3.3.1.200.2.1141

wlsxTrapDefinitionsGroup

1141

1.3.6.1.4.1.14823.2.3.3.1.200.2.1142

wlsxTrapDefinitionsGroup

1142

1.3.6.1.4.1.14823.2.3.3.1.200.2.1143

wlsxTrapDefinitionsGroup

1143

1.3.6.1.4.1.14823.2.3.3.1.200.2.1144

wlsxTrapDefinitionsGroup

1144

1.3.6.1.4.1.14823.2.3.3.1.200.2.1145

wlsxTrapDefinitionsGroup

1145

1.3.6.1.4.1.14823.2.3.3.1.200.2.1146

wlsxTrapDefinitionsGroup

1146

1.3.6.1.4.1.14823.2.3.3.1.200.2.1147

wlsxTrapDefinitionsGroup

1147

1.3.6.1.4.1.14823.2.3.3.1.200.2.1148

wlsxTrapDefinitionsGroup

1148

1.3.6.1.4.1.14823.2.3.3.1.200.2.1149

wlsxTrapDefinitionsGroup

1149

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

Table 11 ai Traps Definitions Group OIDs (Continued)

Object Object ID

wlsxSuspectUnsecureAPDetected wlsxSuspectUnsecureAPResolved wlsxHtGreenfieldSupported wlsxHT40MHzIntoleranceAP wlsxHT40MHzIntoleranceSta wlsxNAdhocNetwork wlsxNAdhocNetworkBridgeDetectedAP wlsxNAdhocNetworkBridgeDetectedSta wlsxClientFloodAttack wlsxValidClientNotUsingEncryption wlsxAdhocUsingValidSSID wlsxAPSpoofingDetected wlsxClientAssociatingOnWrongChannel wlsxNDisconnectStationAttack wlsxNStaUnAssociatedFromUnsecureAP wlsxOmertaAttack wlsxTKIPReplayAttack wlsxChopChopAttack

1.3.6.1.4.1.14823.2.3.3.1.200.2.1150

wlsxTrapDefinitionsGroup

1150

1.3.6.1.4.1.14823.2.3.3.1.200.2.1151

wlsxTrapDefinitionsGroup

1151

1.3.6.1.4.1.14823.2.3.3.1.200.2.1157

wlsxTrapDefinitionsGroup

1157

1.3.6.1.4.1.14823.2.3.3.1.200.2.1158

wlsxTrapDefinitionsGroup

1158

1.3.6.1.4.1.14823.2.3.3.1.200.2.1159

wlsxTrapDefinitionsGroup

1159

1.3.6.1.4.1.14823.2.3.3.1.200.2.1161

wlsxTrapDefinitionsGroup

1161

1.3.6.1.4.1.14823.2.3.3.1.200.2.1162

wlsxTrapDefinitionsGroup

1162

1.3.6.1.4.1.14823.2.3.3.1.200.2.1163

wlsxTrapDefinitionsGroup

1163

1.3.6.1.4.1.14823.2.3.3.1.200.2.1170

wlsxTrapDefinitionsGroup

1170

1.3.6.1.4.1.14823.2.3.3.1.200.2.1171

wlsxTrapDefinitionsGroup

1171

1.3.6.1.4.1.14823.2.3.3.1.200.2.1172

wlsxTrapDefinitionsGroup

1172

1.3.6.1.4.1.14823.2.3.3.1.200.2.1173

wlsxTrapDefinitionsGroup

1173

1.3.6.1.4.1.14823.2.3.3.1.200.2.1174

wlsxTrapDefinitionsGroup

1174

1.3.6.1.4.1.14823.2.3.3.1.200.2.1175

wlsxTrapDefinitionsGroup

1175

1.3.6.1.4.1.14823.2.3.3.1.200.2.1176

wlsxTrapDefinitionsGroup

1176

1.3.6.1.4.1.14823.2.3.3.1.200.2.1177

wlsxTrapDefinitionsGroup

1177

1.3.6.1.4.1.14823.2.3.3.1.200.2.1178

wlsxTrapDefinitionsGroup

1178

1.3.6.1.4.1.14823.2.3.3.1.200.2.1179

wlsxTrapDefinitionsGroup

1179

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

| Traps

Table 11 ai Traps Definitions Group OIDs (Continued)

Object Object ID

wlsxFataJackAttack wlsxInvalidAddressCombination wlsxValidClientMisassociation wlsxMalformedHTIEDetected

1.3.6.1.4.1.14823.2.3.3.1.200.2.1180

wlsxTrapDefinitionsGroup

1180

1.3.6.1.4.1.14823.2.3.3.1.200.2.1181

wlsxTrapDefinitionsGroup

1181

1.3.6.1.4.1.14823.2.3.3.1.200.2.1182

wlsxTrapDefinitionsGroup

1182

1.3.6.1.4.1.14823.2.3.3.1.200.2.1183

wlsxTrapDefinitionsGroup

1183 wlsxMalformedAssocReqDetected wlsxOverflowIEDetected

1.3.6.1.4.1.14823.2.3.3.1.200.2.1184

wlsxTrapDefinitionsGroup

1184

1.3.6.1.4.1.14823.2.3.3.1.200.2.1185

wlsxTrapDefinitionsGroup

1185 wlsxOverflowEAPOLKeyDetected 1.3.6.1.4.1.14823.2.3.3.1.200.2.1186

wlsxTrapDefinitionsGroup

1186 wlsxMalformedFrameLargeDurationDetecte d

1.3.6.1.4.1.14823.2.3.3.1.200.2.1187

wlsxTrapDefinitionsGroup

1187 wlsxMalformedFrameWrongChannelDetect ed

1.3.6.1.4.1.14823.2.3.3.1.200.2.1188

wlsxTrapDefinitionsGroup

1188 wlsxMalformedAuthFrame 1.3.6.1.4.1.14823.2.3.3.1.200.2.1189

wlsxTrapDefinitionsGroup

1189 wlsxCTSRateAnomaly wlsxRTSRateAnomaly wlsxNRogueAPDetected wlsxNRogueAPResolved

1.3.6.1.4.1.14823.2.3.3.1.200.2.1190

wlsxTrapDefinitionsGroup

1190

1.3.6.1.4.1.14823.2.3.3.1.200.2.1191

wlsxTrapDefinitionsGroup

1191

1.3.6.1.4.1.14823.2.3.3.1.200.2.1192

wlsxTrapDefinitionsGroup

1192

1.3.6.1.4.1.14823.2.3.3.1.200.2.1193

wlsxTrapDefinitionsGroup

1193 wlsxNeighborAPDetected wlsxNInterferingAPDetected wlsxNSuspectRogueAPDetected wlsxNSuspectRogueAPResolved

1.3.6.1.4.1.14823.2.3.3.1.200.2.1194

wlsxTrapDefinitionsGroup

1194

1.3.6.1.4.1.14823.2.3.3.1.200.2.1195

wlsxTrapDefinitionsGroup

1195

1.3.6.1.4.1.14823.2.3.3.1.200.2.1196

wlsxTrapDefinitionsGroup

1196

1.3.6.1.4.1.14823.2.3.3.1.200.2.1197

wlsxTrapDefinitionsGroup

1197

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

Table 11 ai Traps Definitions Group OIDs (Continued)

Object Object ID

wlsxBlockAckAttackDetected wlsxHotspotterAttackDetected wlsxNSignatureMatch wlsxNSignatureMatchNetstumbler wlsxNSignatureMatchAsleap wlsxNSignatureMatchAirjack wlsxNSignatureMatchNullProbeResp wlsxNSignatureMatchDeauthBcast wlsxNSignatureMatchDisassocBcast wlsxNSignatureMatchWellenreiter wlsxAPDeauthContainment wlsxClientDeauthContainment wlsxAPWiredContainment wlsxClientWiredContainment wlsxAPTaggedWiredContainment wlsxClientTaggedWiredContainment wlsxTarpitContainment wlsxAPChannelChange

1.3.6.1.4.1.14823.2.3.3.1.200.2.1198

wlsxTrapDefinitionsGroup

1198

1.3.6.1.4.1.14823.2.3.3.1.200.2.1199

wlsxTrapDefinitionsGroup

1199

1.3.6.1.4.1.14823.2.3.3.1.200.2.1200

wlsxTrapDefinitionsGroup

1200

1.3.6.1.4.1.14823.2.3.3.1.200.2.1201

wlsxTrapDefinitionsGroup

1201

1.3.6.1.4.1.14823.2.3.3.1.200.2.1202

wlsxTrapDefinitionsGroup

1202

1.3.6.1.4.1.14823.2.3.3.1.200.2.1203

wlsxTrapDefinitionsGroup

1203

1.3.6.1.4.1.14823.2.3.3.1.200.2.1204

wlsxTrapDefinitionsGroup

1204

1.3.6.1.4.1.14823.2.3.3.1.200.2.1205

wlsxTrapDefinitionsGroup

1205

1.3.6.1.4.1.14823.2.3.3.1.200.2.1206

wlsxTrapDefinitionsGroup

1206

1.3.6.1.4.1.14823.2.3.3.1.200.2.1207

wlsxTrapDefinitionsGroup

1207

1.3.6.1.4.1.14823.2.3.3.1.200.2.1208

wlsxTrapDefinitionsGroup

1208

1.3.6.1.4.1.14823.2.3.3.1.200.2.1209

wlsxTrapDefinitionsGroup

1209

1.3.6.1.4.1.14823.2.3.3.1.200.2.1210

wlsxTrapDefinitionsGroup

1210

1.3.6.1.4.1.14823.2.3.3.1.200.2.1211

wlsxTrapDefinitionsGroup

1211

1.3.6.1.4.1.14823.2.3.3.1.200.2.1212

wlsxTrapDefinitionsGroup

1212

1.3.6.1.4.1.14823.2.3.3.1.200.2.1213

wlsxTrapDefinitionsGroup

1213

1.3.6.1.4.1.14823.2.3.3.1.200.2.1214

wlsxTrapDefinitionsGroup

1214

1.3.6.1.4.1.14823.2.3.3.1.200.2.1216

wlsxTrapDefinitionsGroup

1216

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

Table 11 ai Traps Definitions Group OIDs (Continued)

Object Object ID

wlsxAPPowerChange wlsxAPModeChange wlsxUserEntryAttributesChanged wlsxPowerSaveDosAttack wlsxNAPMasterStatusChange wlsxNAdhocUsingValidSSID wlsxMgmtUserAuthenticationFailed

1.3.6.1.4.1.14823.2.3.3.1.200.2.1217

wlsxTrapDefinitionsGroup

1217

1.3.6.1.4.1.14823.2.3.3.1.200.2.1218

wlsxTrapDefinitionsGroup

1218

1.3.6.1.4.1.14823.2.3.3.1.200.2.1219

wlsxTrapDefinitionsGroup

1219

1.3.6.1.4.1.14823.2.3.3.1.200.2.1220

wlsxTrapDefinitionsGroup

1220

1.3.6.1.4.1.14823.2.3.3.1.200.2.1221

wlsxTrapDefinitionsGroup

1221

1.3.6.1.4.1.14823.2.3.3.1.200.2.1222

wlsxTrapDefinitionsGroup

1222

1.3.6.1.4.1.14823.2.3.3.1.200.2.1224

wlsxTrapDefinitionsGroup

1224

wlsxNUserEntryCreated

Objects

Status

Description

wlsxTrapTime, wlsxTrapUserIpAddress, wlsxTrapUserPhyAddress current

This trap indicates that a new user was created.

| Traps Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxNUserEntryDeleted

Objects

Status

Description

wlsxTrapTime, wlsxTrapUserIpAddress, wlsxTrapUserPhyAddress current

This trap indicates that a user was deleted.

wlsxNUserEntryAuthenticated

Objects

Status

Description

wlsxTrapTime, wlsxTrapUserIpAddress, wlsxTrapUserPhyAddress, wlsxTrapUserName, wlsxTrapUserAuthenticatio Method, wlsxTrapUserRole current

This trap indicates that a user is Authenticated.

wlsxNUserEntryDeAuthenticated

Objects

Status

Description

wlsxTrapTime, wlsxTrapUserIpAddress, wlsxTrapUserPhyAddress current

This trap indicates that a user is Deauthenticated.

wlsxNUserAuthenticationFailed

Objects

Status

Description

wlsxTrapTime, wlsxTrapUserIpAddress, wlsxTrapUserPhyAddress current

This trap indicates that a user authentication has failed.

wlsxNAuthServerReqTimedOut

Objects

Status

Description

wlsxTrapTime, wlsxTrapAuthServerName current

This trap indicates that the authentication server request timed out.

wlsxNAuthServerTimedOut

Objects

Status

Description

wlsxTrapTime, wlsxTrapAuthServerName, wlsxTrapAuthServerTimeout current

This trap indicates that the authentication server timed out.

wlsxNAuthServerIsUp

Objects

Status

Description

wlsxTrapTime, wlsxTrapAuthServerName current

This trap indicates that an authentication server is up.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

| Traps

wlsxNAccessPointIsUp

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress current

A Trap which indicates that an access point up.

wlsxNAccessPointIsDown

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress current

A Trap which indicates that an access point down.

wlsxNChannelChanged

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPBSSID, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an access point at Location wlsxTrapAPLocation has changed the channel.

wlsxNStationAddedToBlackList

Objects

Status

Description

wlsxTrapTime, wlsxTrapNodeMac, wlsxTrapStationBlackListReason current

This trap indicates that the station is black listed.

wlsxNStationRemovedFromBlackList

Objects

Status

Description

wlsxTrapTime, wlsxTrapNodeMac current

This trap indicates that the station is removed from the black list.

the frame type.

wlsxNRadioAttributesChanged

Objects

Status

Description

{wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPIpAddress, wlsxTrapAPChannel, wlsxTrapAPTxPower } current

A Trap which indicates changes in the Radio attributes of an access point.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxUnsecureAPDetected

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel, wlsxTrapMatchedMac, wlsxTrapMatchedIp, wlsxTrapRogueInfoURL} current

This trap indicates that an unauthorized access point is connected to the wired network. The access point is declared Rogue because it was matched to a MAC address.

wlsxUnsecureAPResolved

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that a previously detected access point, classified as Rogue, is no longer present in the network.

wlsxStaImpersonation

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapNodeMac, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation } current

This trap indicates that an AM detected Station Impersonation.

wlsxReservedChannelViolation

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AM detected an access point which is violating the

Reserved Channel configuration.

wlsxValidSSIDViolation

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP has detected an access point is violating Valid SSID configuration by using an SSID that is reserved for use by a valid AP only.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

| Traps

wlsxChannelMisconfiguration

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP detected an access point that has a channel misconfiguration because it is using a channel that is not valid.

wlsxOUIMisconfiguration

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP detected an access point that has an OUI misconfiguration because it is using an OUI that is not valid.

wlsxSSIDMisconfiguration

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP detected an access point that has an SSID misconfiguration because it is using an SSID that is not valid.

wlsxShortPreableMisconfiguration

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an access point has bad short preamble configuration.

wlsxWPAMisconfiguration

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP detected an access point that is misconfigured because it is not using WPA.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxAdhocNetworkDetected

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AM has detected an adhoc network.

wlsxAdhocNetworkRemoved

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that a previously detected adhoc network is no longer present in the network.

wlsxStaPolicyViolation

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapNodeMac, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that Protection was enforced because a valid station's association to a non-valid access point violated Valid Station policy. For more information check http://www.wve.org/entries/show/WVE-2005-0008 and http:// www.wve.org/entries/show/WVE-2005-0019.

wlsxRepeatWEPIVViolation

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP detected that a valid access point is using the same

WEP initialization vector in consecutive packets.

wlsxWeakWEPIVViolation

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP detected that a valid access point is using a Weak

WEP initialization vector. For more information check http://www.wve.org/entries/ show/WVE-2005-0021

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

100

| Traps

wlsxChannelInterferenceDetected

Objects

Status

Description

{wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation,wlsxTrapAPChannel} current

This trap indicates that an AP has detected channel interference.

wlsxChannelInterferenceCleared

Objects

Status

Description

{wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that a previously detected channel interference is no longer present.

wlsxAPInterferenceDetected

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP has detected interference for an access point.

wlsxAPInterferenceCleared

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that the previously detected interference for an access point is no longer present.

wlsxStaInterferenceDetected

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapNodeMac, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP has detected interference for a station.

wlsxStaInterferenceCleared

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapNodeMac, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that the previously detected interference for a station is no longer present.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxFrameRetryRateExceeded

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP detected that an access point has exceeded the configured upper threshold for Frame Retry Rate.

wlsxFrameReceiveErrorRateExceeded

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapTargetAPChannel, wlsxTrapAPLocation } current

This trap indicates that an AP detected that an access point has exceeded the configured upper threshold for Frame Receive Error Rate.

wlsxFrameFragmentationRateExceeded

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapTargetAPChannel, wlsxTrapAPLocation } current

This trap indicates that an AP detected that an access point exceeded the configured upper threshold for Frame Fragmentation Rate.

wlsxFrameBandWidthRateExceeded

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapNodeMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP detected that a station or access point has exceeded the configured upper threshold for Bandwidth rate.

wlsxFrameLowSpeedRateExceeded

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapNodeMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP detected that a station has exceeded the configured upper threshold for Low speed rate.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

101

102

| Traps

wlsxFrameNonUnicastRateExceeded

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapNodeMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP detected that station has exceeded the configured upper threshold for Non Unicast traffic rate.

wlsxLoadbalancingEnabled

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AM is reporting that an AP has enabled Load balancing.

wlsxLoadbalancingDisabled

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AM is reporting that an AP has enabled Load balancing.

wlsxChannelFrameRetryRateExceeded

Objects

Status

Description

{wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP has detected that the configured upper threshold for

Frame Retry Rate was exceeded on a channel.

wlsxChannelFrameFragmentationRateExceeded

Objects

Status

Description

{wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP has detected that the configured upper threshold for

Frame Fragmentation Rate was exceeded on a channel.

wlsxChannelFrameErrorRateExceeded

Objects

Status

Description

{wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP has detected that the configured upper threshold for

Frame Receive Error Rate was exceeded on a channel.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxSignatureMatchAP

Objects

Status

Description

{wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected a signature match in a frame from an access point.

wlsxSignatureMatchSta

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation } current

This trap indicates that an AP detected a signature match in a frame from a Station.

wlsxChannelRateAnomaly

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapFrameType, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP detected frames on a channel which exceed the configured IDS rate threshold.

For more information check: http://www.wve.org/entries/show/WVE-2005-0052 http://www.wve.org/entries/show/WVE-2005-0045 http://www.wve.org/entries/show/WVE-2005-0046 http://www.wve.org/entries/show/WVE-2005-0047 http://www.wve.org/entries/show/WVE-2005-0048

wlsxNodeRateAnomaly

Objects

Status

Description

wlsxTrapTime, wlsxTrapFrameType, wlsxTrapNodeMac, wlsxTrapSnr, wlsxTrapAPBSSID, wlsxTrapAPLocation current

This trap indicates that a node is exceeding the threshold set for the frame type.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

103

104

| Traps

wlsxNodeRateAnomalyAP

Objects

Status

Description

{wlsxTrapTime, wlsxTrapFrameType, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected frames transmitted or received by an access point, which exceed the configured IDS rate threshold.

wlsxNodeRateAnomalySta

Objects

Status

Description

{wlsxTrapTime, wlsxTrapFrameType, wlsxTrapNodeMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected frames transmitted or received by a node, which exceed the configured IDS rate threshold.

wlsxEAPRateAnomaly

Objects

Status

Description

{wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that the rate of EAP Handshake packets received by an AP has exceeded the configured IDS EAP Handshake rate threshold.

For more information check http://www.wve.org/entries/show/WVE-2005-0049

wlsxSignalAnomaly

Objects

Status

Description

{wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AM detected a Signal Anomaly.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxSequenceNumberAnomalyAP

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation } current

This trap indicates that an AM received packets from an AP which exceeds the acceptable sequence number difference.

The acceptable sequence number difference is an IDS configuration object.

For more information check: http://www.wve.org/entries/show/WVE-2005-0061 http://www.wve.org/entries/show/WVE-2005-0019 http://www.wve.org/entries/show/WVE-2005-0008 http://www.wve.org/entries/show/WVE-2005-0045 http://www.wve.org/entries/show/WVE-2005-0046 http://www.wve.org/entries/show/WVE-2005-0047 http://www.wve.org/entries/show/WVE-2005-0048

wlsxSequenceNumberAnomalySta

Objects

Status

Description

wlsxTrapTime, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AM received packets from a Node which exceeds the acceptable sequence number difference.

The acceptable sequence number difference is an IDS configuration object.

For more information check http://www.wve.org/entries/show/WVE-2005-0061 http://www.wve.org/entries/show/WVE-2005-0019 http://www.wve.org/entries/show/WVE-2005-0008 http://www.wve.org/entries/show/WVE-2005-0045 http://www.wve.org/entries/show/WVE-2005-0046 http://www.wve.org/entries/show/WVE-2005-0047 http://www.wve.org/entries/show/WVE-2005-0048

wlsxDisconnectStationAttack

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapFrameType, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AM detected a station Disconnect attack.

For more information check: http://www.wve.org/entries/show/WVE-2005-0045 http://www.wve.org/entries/show/WVE-2005-0046 http://www.wve.org/entries/show/WVE-2005-0048

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

105

106

| Traps

wlsxApFloodAttack

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that the number of potential fake APs detected by an AP has exceeded the configured IDS threshold. This is the total number of fake

APs observed across all bands.

For more information check http://www.wve.org/entries/show/WVE-2005-0056

wlsxAdhocNetwork

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapSourceMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation } current

This trap indicates that an AM detected an Adhoc Network. A station is connected to an adhoc AP.

wlsxWirelessBridge

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTransmitterMac, wlsxTrapReceiverMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected a Wireless Bridge when a WDS frame was seen between the transmitter and receiver addresses.

wlsxInvalidMacOUIAP

Objects

Status

Description

{wlsxTrapTime, wlsxTrapAddressType, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected an invalid MAC OUI in the BSSID of a frame.

An invalid MAC OUI suggests that the frame may be spoofed.

wlsxInvalidMacOUISta

Objects

Status

Description

{wlsxTrapTime, wlsxTrapAddressType, wlsxTrapNodeMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected an invalid MAC OUI in the SRC or DST address of a frame. An invalid MAC OUI suggests that the frame may be spoofed.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxWEPMisconfiguration

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP detected an access point that is misconfigured because it does not have Privacy enabled.

wlsxStaRepeatWEPIVViolation

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapNodeMac, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP detected that a valid station is using the same WEP initialization vector in consecutive packets.

wlsxStaWeakWEPIVViolation

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapNodeMac, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP detected that a valid station is using a Weak WEP initialization vector.

wlsxStaAssociatedToUnsecureAP

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapNodeMac, wlsxTrapAPLocation, wlsxTrapAPChannel, wlsxTrapRogueInfoURL} current

This trap indicates that an AM detected a client associated with a Rogue access point.

wlsxStaUnAssociatedFromUnsecureAP

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapNodeMac} current

This trap indicates that a previously detected rogue access point association is no longer present.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

107

108

| Traps

wlsxAdhocNetworkBridgeDetected

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapSourceMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AM has detected an Adhoc network that is bridging to a wired network.

wlsxInterferingApDetected

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel, wlsxTrapInterferingAPInfoURL } current

This trap indicates that an AP detected an access point classified as Interfering. The access point is declared Interfering because it is neither authorized nor classified as

Rogue.

wlsxColdStart

Objects

Status

Description

wlsxTrapTime current

An enterprise version of cold start trap, which contains the controller time stamp.

wlsxWarmStart

Objects

Status

Description

wlsxTrapTime current

An enterprise version of warm start trap, which contains the controller time stamp.

wlsxAPImpersonation

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP detected AP Impersonation because the number of beacons seen has exceeded the expected number by the configured percentage threshold.The expected number is calculated based on the Beacon Interval Field in the Beacon frame.

wlsxNAuthServerIsDown

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapAuthServerName } current

This trap indicates that an authentication server is down.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxWindowsBridgeDetected

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapSourceMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AM has detected a station that is bridging from a wireless network to a wired network.

wlsxSignAPNetstumbler

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation } current

This trap indicates that an AP detected a signature match for Netstumbler from an access point. For more information check http://www.wve.org/entries/show/WVE-

2005-0025

wlsxSignStaNetstumbler

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation } current

This trap indicates that an AP detected a signature match for Netstumbler from a

Station. For more information check http://www.wve.org/entries/show/WVE-2005-

0025.

wlsxSignAPAsleap

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation } current

This trap indicates that an AP detected a signature match for ASLEAP from an access point. For more information check http://www.wve.org/entries/show/WVE-

2005-0027

wlsxSignStaAsleap

Objects

Status

Description

{wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected a signature match for ASLEAP from a

Station.For more information check http://www.wve.org/entries/show/WVE-2005-

0027

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

109

110

| Traps

wlsxSignAPAirjack

Objects

Status

Description

{wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation } current

This trap indicates that an AP detected a signature match for AirJack from an access point. For more information check http://www.wve.org/entries/show/WVE-

2005-0018

wlsxSignStaAirjack

Objects

Status

Description

{wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected a signature match for AirJack from a Station.

For more information check http://www.wve.org/entries/show/WVE-2005-0018

wlsxSignAPNullProbeResp

Objects

Status

Description

{wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected a signature match for Null-Probe-Response from an access point. For more information check http://www.wve.org/entries/ show/WVE-2006-0064

wlsxSignStaNullProbeResp

Objects

Status

Description

{wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected a signature match for Null-Probe-Response from a Station.

For more information check http://www.wve.org/entries/show/WVE-2006-0064

wlsxSignAPDeauthBcast

Objects

Status

Description

{wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected a signature match for Deauth-Broadcast from an access point. For more information check: http://www.wve.org/entries/show/WVE-2005-0019 http://www.wve.org/entries/show/WVE-2005-0045

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxSignStaDeauthBcast

Objects

Status

Description

{wlsxTrapTime, wlsxTrapSignatureName, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AP detected a signature match for Deauth-Broadcast from a Station.For more information check: http://www.wve.org/entries/show/WVE-2005-0019 http://www.wve.org/entries/show/WVE-2005-0045

wlsxWindowsBridgeDetectedAP

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP is detecting an access point that is bridging from a wireless network to a wired network.

wlsxWindowsBridgeDetectedSta

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapSourceMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AP is detecting a station that is bridging from a wireless network to a wired network.

wlsxAdhocNetworkBridgeDetectedAP

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel } current

This trap indicates that an AM has detected an adhoc network that is bridging to a wired network

wlsxAdhocNetworkBridgeDetectedSta

Objects

Status

Description

wlsxTrapTime, wlsxTrapSourceMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AM has detected an adhoc network that is bridging to a wired network

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

111

112

| Traps

wlsxDisconnectStationAttackAP

Objects

Status

Description

{wlsxTrapTime, wlsxTrapFrameType, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that an AM detected a station Disconnect attack.

For more information check: http://www.wve.org/entries/show/WVE-2005-0045 http://www.wve.org/entries/show/WVE-2005-0046 http://www.wve.org/entries/show/WVE-2005-0048

wlsxDisconnectStationAttackSta

Objects

Status

Description

wlsxTrapTime, wlsxTrapFrameType, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AM detected a station Disconnect attack.

For more information check: http://www.wve.org/entries/show/WVE-2005-0045 http://www.wve.org/entries/show/WVE-2005-0046 http://www.wve.org/entries/show/WVE-2005-0048

wlsxSuspectUnsecureAPDetected

Objects

Status

Description

{wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPRadioNumber, wlsxTrapMatchedMac, wlsxTrapMatchedIp, wlsxTrapConfidenceLevel, wlsxTrapAPLocation, wlsxTrapRogueInfoURL} current

This trap indicates that an access point, classified as Suspected Rogue, has been detected by a Controller. The AP is suspected to be rogue, with the supplied confidence level, because it was matched to the wired MAC address.

wlsxSuspectUnsecureAPResolved

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPRadioNumber current

This trap indicates that a previously detected access point, classified Suspected

Rogue, is either no longer present in the network or has changed its state.

wlsxHtGreenfieldSupported

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected an access point that supports HT Greenfield mode. For more information check http://www.wve.org/entries/show/WVE-2008-

0005

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxHT40MHzIntoleranceAP

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID,wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress,wlsxTrapAPRadioNumber, wlsxTrapAPLocation,wlsxTrapAPChannel } current

This trap indicates that an AP is detecting an access point with the HT 40MHz intolerance setting. For more information check http://www.wve.org/entries/show/

WVE-2008-0004

wlsxHT40MHzIntoleranceSta

Objects

Status

Description

{wlsxTrapTime, wlsxTrapSourceMac,wlsxTrapSnr, wlsxTrapAPChannel,wlsxTrapFrameType, wlsxTrapAPMacAddress,wlsxTrapAPRadioNumber, wlsxTrapAPLocation} current

This trap indicates that the system is detecting an HT 40MHz Intolerance setting from a Station.

For more information check http://www.wve.org/entries/show/WVE-2008-0004

wlsxNAdhocNetwork

Objects

Status

Description

{wlsxTrapTime, wlsxTrapSourceMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP detected an adhoc network where a station is connected to an adhoc access point.

wlsxNAdhocNetworkBridgeDetectedAP

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP detected an adhoc network that is bridging to a wired network.

wlsxNAdhocNetworkBridgeDetectedSta

Objects

Status

Description

{ wlsxTrapTime, wlsxTrapSourceMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel} current

This trap indicates that an AP detected an adhoc network that is bridging to a wired network.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

113

114

| Traps

wlsxClientFloodAttack

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that the number of potential fake clients detected by an AP has exceeded the configured IDS threshold. This is the total number of fake clients observed across all bands.

For more information check http://www.wve.org/entries/show/WVE-2005-0056

wlsxValidClientNotUsingEncryption

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapSourceMac, wlsxTrapReceiverMac, wlsxTrapNodeMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected an unencrypted data frame between a valid client and an access point.

wlsxAdhocUsingValidSSID

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected an adhoc network using a valid/protected

SSID.

For more information check http://www.wve.org/entries/show/WVE-2005-0008

wlsxAPSpoofingDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapSourceMac, wlsxTrapReceiverMac, wlsxTrapSpoofedFrameType, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected that one of its virtual APs is being spoofed using MAC spoofing.

For more information check http://www.wve.org/entries/show/WVE-2005-0019

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxClientAssociatingOnWrongChannel

Objects

Status

Description

This trap indicates that an AP detected a client trying to associate to one of its

BSSIDs on the wrong channel. This can be a sign that the BSSID is being spoofed in order to fool the client into thinking the AP is operating on another channel.

wlsxNDisconnectStationAttack

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP has determined that a client is under Disconnect

Attack because the rate of Assoc/Reassoc Response packets received by that client exceeds the configured threshold.

For more information check: http://www.wve.org/entries/show/WVE-2005-0045 http://www.wve.org/entries/show/WVE-2005-0046 http://www.wve.org/entries/show/WVE-2005-0048

wlsxNStaUnAssociatedFromUnsecureAP

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapNodeMac, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP that had previously detected a client association to a

Rogue access point is no longer detecting that association.

wlsxOmertaAttack

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapNodeMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected an Omerta attack.

For more information check http://www.wve.org/entries/show/WVE-2005-0053

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

115

116

| Traps

wlsxTKIPReplayAttack

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapSourceMac, wlsxTrapReceiverMac, wlsxTrapTargetAPBSSID, wlsxTrapAPChannel, wlsxTrapSnr current

This trap indicates that an AP detected a TKIP replay attack. If successful this could be the precursor to more advanced attacks.

For more information check http://www.wve.org/entries/show/WVE-2008-0013

wlsxChopChopAttack

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapSourceMac, wlsxTrapReceiverMac, wlsxTrapTargetAPBSSID, wlsxTrapAPChannel, wlsxTrapSnr current

This trap indicates that an AP detected a ChopChop attack.

For more information check http://www.wve.org/entries/show/WVE-2006-0038

wlsxFataJackAttack

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapNodeMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected a FATA-Jack attack.

For more information check http://www.wve.org/entries/show/WVE-2006-0057

wlsxInvalidAddressCombination

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapSourceMac, wlsxTrapReceiverMac, wlsxTrapAPChannel, wlsxTrapSnr current

This trap indicates that an AP detected an invalid source and destination combination.

For more information check http://www.wve.org/entries/show/WVE-2008-0011

wlsxValidClientMisassociation

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapNodeMac, wlsxTrapAssociationType, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected a misassociation between a valid client and an unsafe AP.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxMalformedHTIEDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapSourceMac, wlsxTrapReceiverMac, wlsxTrapTargetAPBSSID, wlsxTrapAPChannel, wlsxTrapSnr current

This trap indicates that an AP detected a malformed HT Information Element. This can be the result of a misbehaving wireless driver or it may be an indication of a new wireless attack.

wlsxMalformedAssocReqDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapSourceMac, wlsxTrapReceiverMac, wlsxTrapTargetAPBSSID, wlsxTrapAPChannel, wlsxTrapSnr current

This trap indicates that an AP detected a malformed association request with a

NULL SSID.

For more information check http://www.wve.org/entries/show/WVE-2008-0010

wlsxOverflowIEDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapSourceMac, wlsxTrapReceiverMac, wlsxTrapTargetAPBSSID, wlsxTrapAPChannel, wlsxTrapSnr current

This trap indicates that an AP detected a management frame with a malformed information element. The declared length of the element is larger than the entire frame containing the element. This may be used to corrupt or crash wireless drivers.

For more information check http://www.wve.org/entries/show/WVE-2008-0008

wlsxOverflowEAPOLKeyDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapSourceMac, wlsxTrapReceiverMac, wlsxTrapTargetAPBSSID, wlsxTrapAPChannel, wlsxTrapSnr current

This trap indicates that an AP detected a key in an EAPOL Key message with a specified length greater than the length of the entire message.

For more information check http://www.wve.org/entries/show/WVE-2008-0009

wlsxMalformedFrameLargeDurationDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapSourceMac, wlsxTrapAPChannel, wlsxTrapSnr current

This trap indicates that an AP detected an unusually large duration in a wireless frame. This may be an attempt to block other devices from transmitting.

For more information check http://www.wve.org/entries/show/WVE-2005-0051

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

117

118

| Traps

wlsxMalformedFrameWrongChannelDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapSourceMac, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapTargetAPChannel, wlsxTrapAPChannel, wlsxTrapSnr current

This trap indicates that an AP detected a beacon on one channel advertising another channel. This could be an attempt to lure clients away from a valid AP.

For more information check http://www.wve.org/entries/show/WVE-2006-0050

wlsxMalformedAuthFrame

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapNodeMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected an authentication frame with either a bad algorithm (similar to Fata-Jack) or a bad transaction.

For more information check http://www.wve.org/entries/show/WVE-2006-0057

wlsxCTSRateAnomaly

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that the rate of CTS packets received by an AP exceeds the configured IDS threshold.

wlsxRTSRateAnomaly

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that the rate of RTS packets received by an AP exceeds the configured IDS threshold.

wlsxNRogueAPDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPChannel current

This trap indicates that an unauthorized access point is connected to the wired network. The access point is classified as Rogue by the system.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxNRogueAPResolved

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPChannel current

This trap indicates that a previously detected access point, classified as Rogue, is either no longer present in the network or it changed its state.

wlsxNeighborAPDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPChannel current

This trap indicates that an access point has been classified as a Neighbor by the system.

wlsxNInterferingAPDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPChannel current

This trap indicates that an access point has been classified as Interfering by the system. The access point is declared Interfering because it is not authorized, nor has it been classified as a rogue.

wlsxNSuspectRogueAPDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPChannel, wlsxTrapConfidenceLevel current

This trap indicates that an access point, classified as suspected rogue, is detected by the system. The AP is suspected to be rogue with the supplied confidence level.

wlsxNSuspectRogueAPResolved

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapAPChannel current

This trap indicates that a previously detected access point, classified as suspected rogue, is either no longer present in the network or has changed its state.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

119

120

| Traps

wlsxBlockAckAttackDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapSourceMac, wlsxTrapReceiverMac, wlsxTrapTargetAPBSSID, wlsxTrapAPChannel, wlsxTrapSnr current

This trap indicates that an attempt has been made to deny service to the source address by spoofing a block ACK add request that sets a sequence number window outside the currently used window.

For more information check http://www.wve.org/entries/show/WVE-2008-0006

wlsxHotspotterAttackDetected

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapNodeMac, wlsxTrapSourceMac, wlsxTrapTargetAPBSSID, wlsxTrapAPChannel, wlsxTrapSnr, wlsxTrapTargetAPSSID current

This trap indicates that a new AP has appeared immediately following a client probe request. This is indicative of the Hotspotter tool or similar that attempts to trap clients with a fake hotspot or other wireless network.

For more information check http://www.wve.org/entries/show/WVE-2005-0054

wlsxNSignatureMatch

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTransmitterMac, wlsxTrapReceiverMac, wlsxTrapSignatureName, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected a signature match in a frame.

wlsxNSignatureMatchNetstumbler

Objects

Status

Description

This trap indicates that an AP detected a signature match for Netstumbler in a frame.

For more information check http://www.wve.org/entries/show/WVE-2005-0025

wlsxNSignatureMatchAsleap

Objects

Status

Description

This trap indicates that an AP detected a signature match for ASLEAP in a frame.

For more information check http://www.wve.org/entries/show/WVE-2005-0027

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxNSignatureMatchAirjack

Objects

Status

Description

This trap indicates that an AP detected a signature match for Airjack in a frame.

For more information check http://www.wve.org/entries/show/WVE-2005-0018

wlsxNSignatureMatchNullProbeResp

Objects

Max-Access

Status

Description

current

This trap indicates that an AP detected a signature match for Null-Probe-Response in a frame.

For more information check http://www.wve.org/entries/show/WVE-2006-0064

wlsxNSignatureMatchDeauthBcast

Objects

Max-Access

Status

Description

current

This trap indicates that an AP detected a signature match for Deauth-Broadcast in a frame.

For more information check: http://www.wve.org/entries/show/WVE-2005-0019 http://www.wve.org/entries/show/WVE-2005-0045

wlsxNSignatureMatchDisassocBcast

Objects

Max-Access

Status

Description

current

This trap indicates that an AP detected a signature match for Disassoc-Broadcast in a frame.

For more information check: http://www.wve.org/entries/show/WVE-2005-0019 http://www.wve.org/entries/show/WVE-2005-0046

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

121

122

| Traps

wlsxNSignatureMatchWellenreiter

Objects

Status

Description

This trap indicates that an AP detected a signature match for Wellenreiter in a frame. For more information check http://www.wve.org/entries/show/WVE-2006-

0058

wlsxAPDeauthContainment

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapNodeMac, wlsxTrapAPChannel, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AP has attempted to contain an access point by disconnecting its client.

wlsxClientDeauthContainment

Objects

Status

Description

wlsxTrapTime, wlsxTrapNodeMac, wlsxTrapTargetAPBSSID, wlsxTrapAPChannel, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AP has attempted to contain a client by disconnecting it from the AP that it is associated with.

wlsxAPWiredContainment

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapNodeMac, wlsxTrapDeviceIpAddress, wlsxTrapDeviceMac, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AP has attempted to contain an access point by disrupting traffic to its client on the wired interface.

wlsxClientWiredContainment

Objects

Status

Description

wlsxTrapTime, wlsxTrapNodeMac, wlsxTrapTargetAPBSSID, wlsxTrapDeviceIpAddress, wlsxTrapDeviceMac, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AP has attempted to contain a client by disrupting traffic to it on the wired interface.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide

wlsxAPTaggedWiredContainment

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapNodeMac, wlsxTrapDeviceIpAddress, wlsxTrapDeviceMac, wlsxTrapVlanId, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AP has attempted to contain an access point by disrupting traffic to its client on the wired interface.

wlsxClientTaggedWiredContainment

Objects

Status

Description

wlsxTrapTime, wlsxTrapNodeMac, wlsxTrapTargetAPBSSID, wlsxTrapDeviceIpAddress, wlsxTrapDeviceMac, wlsxTrapVlanId, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AP has attempted to contain a client by disrupting traffic to it on the wired interface.

wlsxTarpitContainment

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapNodeMac, wlsxTrapAPChannel, wlsxTrapTargetAPChannel, wlsxTrapSourceMac, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AP has attempted to contain an access point by moving a client that is attempting to associate to it to a tarpit.

wlsxAPChannelChange

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPChannel, wlsxTrapAPChannelSec, wlsxTrapAPPrevChannel, wlsxTrapAPPrevChannelSec, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPARMChangeReason current

This trap indicates that an AP changed its channel.

wlsxAPPowerChange

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPTxPower, wlsxTrapAPPrevTxPower, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AP changed its transmit power level.

Aruba Instant 6.2.1.0-3.3 | MIB Reference Guide Traps |

123

124

| Traps

wlsxAPModeChange

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPCurMode, wlsxTrapAPPrevMode, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation current

This trap indicates that an AP changed its mode from AP to AP Monitor or vice versa.

wlsxUserEntryAttributesChanged

Objects

Status

Description

wlsxTrapTime, wlsxTrapUserIpAddress, wlsxTrapUserPhyAddress, wlsxTrapAPBSSID, wlsxTrapAPName, wlsxTrapCardSlot, wlsxTrapPortNumber, wlsxTrapUserAttributeChangeType current

This trap indicates that the user entry attributes have changed.

wlsxPowerSaveDosAttack

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapNodeMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected a Power Save DoS attack.

wlsxNAPMasterStatusChange

Objects

Status

Description

wlsxTrapTime, wlsxTrapAPMacAddress, wlsxTrapApControllerIp, wlsxTrapApMasterStatus current

This trap indicates that the status of the AP as seen by the master controller has changed.

wlsxNAdhocUsingValidSSID

Objects

Status

Description

wlsxTrapTime, wlsxTrapTargetAPBSSID, wlsxTrapTargetAPSSID, wlsxTrapSourceMac, wlsxTrapSnr, wlsxTrapAPMacAddress, wlsxTrapAPRadioNumber, wlsxTrapAPLocation, wlsxTrapAPChannel current

This trap indicates that an AP detected an adhoc network node using a valid/ protected SSID.

For more information check http://www.wve.org/entries/show/WVE-2005-0008