All MIBs › CISCO-DOT11-IF-MIB › cd11IfRogueApDetectedNotif
cd11IfRogueApDetectedNotif
Module: CISCO-DOT11-IF-MIB
OID (symbolic): CISCO-DOT11-IF-MIB::cd11IfRogueApDetectedNotif
OID (numeric): 1.3.6.1.4.1.9.9.272.0.2
Node type: NOTIFICATION-TYPE
Description: This notification will be sent when a radio interface detects a new rogue AP and causes a new row to be added to the cd11IfRogueApDetectedTable.
What is cd11IfRogueApDetectedNotif?
This notification is sent when a wireless radio interface detects a previously unknown rogue access point (an unauthorized or spoofed AP) and creates a new entry in the rogue AP detection table. It alerts administrators to potential security threats from unauthorized wireless equipment. An operator would monitor for this trap to quickly identify and investigate unauthorized wireless access points in the network coverage area.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' CISCO-DOT11-IF-MIB::cd11IfRogueApDetectedNotif snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.9.9.272.0.2
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:56594->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (403120402) 46 days, 15:46:44.02 SNMPv2-MIB::snmpTrapOID.0 = OID: CISCO-DOT11-IF-MIB::cd11IfRogueApDetectedNotif
Start monitoring Cisco Aironet/Catalyst wireless access points (802.11 radio interfaces) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-DOT11-IF-MIB::cd11IfRogueApDetectedNotif OID value, configure state conditions and alerts, and monitor any Cisco Aironet/Catalyst wireless access points (802.11 radio interfaces) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.272 | ciscoDot11IfMIB | CISCO-DOT11-IF-MIB |
| 1.3.6.1.4.1.9.9.272.0 | ciscoDot11IfMIBNotifications | CISCO-DOT11-IF-MIB |
| 1.3.6.1.4.1.9.9.272.0.2 | cd11IfRogueApDetectedNotif | CISCO-DOT11-IF-MIB |