CISCO-LWAPP-MFP-MIB :: ciscoLwappMfpAnomalyDetected

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › CISCO-LWAPP-MFP-MIB › ciscoLwappMfpAnomalyDetected

ciscoLwappMfpAnomalyDetected

Module: CISCO-LWAPP-MFP-MIB

OID (symbolic): CISCO-LWAPP-MFP-MIB::ciscoLwappMfpAnomalyDetected

OID (numeric): 1.3.6.1.4.1.9.9.518.0.4

Node type: NOTIFICATION-TYPE

Description: This notification is sent by the agent when the MFP configuration of the WLAN was violated by the radio interface cLApIfSmtDot11Bssid and detected by the radio interface cLApDot11IfSlotId of the AP cLApMacAddress. The violation is indicated by cLMfpEventType.

Through this notification, the controller reports the NMS the occurrence of a total of cLMfpEventTotal volation events, of type cLMfpEventType, upon observing the management frame(s) indicated by cLMfpEventFrames for the last cLMfpEventPeriod time units. When cLMfpEventTotal is 0, it indicates that no further anomalies have recently been detected and that the NMS should clear any alarm raised about the MFP errors.

This notification is generated by the controller only if MFP has been configured as the protection mechanism through cLMfpProtectType.

Examples

Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):

snmptrap -v2c -c public <manager> '' CISCO-LWAPP-MFP-MIB::ciscoLwappMfpAnomalyDetected
snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.9.9.518.0.4

Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):

snmptrapd -f -Lo -c /dev/null authCommunity log public

Example snmptrapd log entry:

zoo11-linux.zoo [UDP: [192.168.30.111]:64789->[192.168.30.10]:162]:
  DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (214141717) 24 days, 18:50:17.17
  SNMPv2-MIB::snmpTrapOID.0 = OID: CISCO-LWAPP-MFP-MIB::ciscoLwappMfpAnomalyDetected

Start monitoring Cisco Wireless LAN Controllers (LWAPP-based) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-LWAPP-MFP-MIB::ciscoLwappMfpAnomalyDetected OID value, configure state conditions and alerts, and monitor any Cisco Wireless LAN Controllers (LWAPP-based) from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.9ciscoMgmtCISCO-SMI
Numeric OIDNameModule
1.3.6.1.4.1.9.9.518ciscoLwappMfpMIBCISCO-LWAPP-MFP-MIB
1.3.6.1.4.1.9.9.518.0ciscoLwappMfpMIBNotifsCISCO-LWAPP-MFP-MIB
1.3.6.1.4.1.9.9.518.0.4ciscoLwappMfpAnomalyDetectedCISCO-LWAPP-MFP-MIB