All MIBs › CISCO-DOT11-WIDS-MIB › cDot11WidsEapolFloodClientMac
cDot11WidsEapolFloodClientMac
Module: CISCO-DOT11-WIDS-MIB
OID (symbolic): CISCO-DOT11-WIDS-MIB::cDot11WidsEapolFloodClientMac
OID (numeric): 1.3.6.1.4.1.9.9.456.1.1.7.1.2
Node type: OBJECT-TYPE
Type: MacAddress
Access: read-only
Description: This object identifies the MAC address of the wireless client that has made the maximum number of authentication attempts in the duration specified by the cDot11WidsEapolFloodInterval object.
At the end of each interval time indicated by cDot11WidsFloodInterval, the 802.11 station checks whether the total count of the number of authentication attempts made by all the clients exceed the threshold configured through the object cDot11WidsEapolFloodThreshold. If yes, then the agent populates this MIB object with the MAC of the wireless client that has made the maximum number of authentication attempts in that interval.
When the flood event is observed to be stopped, as indicated by a non-zero value for the cDot11WidsEapolFloodStopTime object, this object indicates the MAC of the wireless client that has made the maximum number of attempts for the entire duration of the flood observed between the times indicated by the objects cDot11WidsEapolFloodStartTime and cDot11WidsEapolFloodStopTime respectively.
What is cDot11WidsEapolFloodClientMac?
This read-only object reports the MAC address of the wireless client that made the most authentication attempts during a monitored EAPOL flood interval, helping identify a possible attacker or misbehaving client.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.456.1.1.7.1.2 snmpwalk -v2c -c public <target> CISCO-DOT11-WIDS-MIB::cDot11WidsEapolFloodClientMac
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.456.1.1.7.1.2.1 snmpget -v2c -c public <target> CISCO-DOT11-WIDS-MIB::cDot11WidsEapolFloodClientMac.1
Start monitoring Cisco wireless access points and WLAN controllers with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-DOT11-WIDS-MIB::cDot11WidsEapolFloodClientMac OID value, configure state conditions and alerts, and monitor any Cisco wireless access points and WLAN controllers from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.456 | ciscoDot11WidsMIB | CISCO-DOT11-WIDS-MIB |
| 1.3.6.1.4.1.9.9.456.1 | ciscoDot11WidsMIBObjects | CISCO-DOT11-WIDS-MIB |
| 1.3.6.1.4.1.9.9.456.1.1 | ciscoDot11WidsAuthFailures | CISCO-DOT11-WIDS-MIB |
| 1.3.6.1.4.1.9.9.456.1.1.7 | cDot11WidsEapolFloodTable | CISCO-DOT11-WIDS-MIB |
| 1.3.6.1.4.1.9.9.456.1.1.7.1 | cDot11WidsEapolFloodEntry | CISCO-DOT11-WIDS-MIB |
| 1.3.6.1.4.1.9.9.456.1.1.7.1.2 | cDot11WidsEapolFloodClientMac | CISCO-DOT11-WIDS-MIB |