All MIBs › CISCO-WDS-IDS-MIB › ciscoWdsIdsMacSpoofUserId
ciscoWdsIdsMacSpoofUserId
Module: CISCO-WDS-IDS-MIB
OID (symbolic): CISCO-WDS-IDS-MIB::ciscoWdsIdsMacSpoofUserId
OID (numeric): 1.3.6.1.4.1.9.9.457.1.1.3.1.4
Node type: OBJECT-TYPE
Type: SnmpAdminString
Access: read-only
Description: This object indicates the userId used by the wireless client when attempting the MAC spoofing attack.
What is ciscoWdsIdsMacSpoofUserId?
This read-only SnmpAdminString (1-253 chars) reports the userId the wireless client presented while attempting the detected MAC-spoofing attack. An admin uses this to see what credential or identity the attacking client tried to use alongside the spoofed MAC address. For example, an admin correlating a spoofing alert with AAA logs looks up ciscoWdsIdsMacSpoofUserId to trace the attacker's attempted login identity.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.457.1.1.3.1.4 snmpwalk -v2c -c public <target> CISCO-WDS-IDS-MIB::ciscoWdsIdsMacSpoofUserId
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.457.1.1.3.1.4.1 snmpget -v2c -c public <target> CISCO-WDS-IDS-MIB::ciscoWdsIdsMacSpoofUserId.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> ciscoWdsIdsMacSpoofUserId.1
Start monitoring Cisco IOS-based wireless access point or WDS-designated switch with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-WDS-IDS-MIB::ciscoWdsIdsMacSpoofUserId OID value, configure state conditions and alerts, and monitor any Cisco IOS-based wireless access point or WDS-designated switch from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.457 | ciscoWdsIdsMIB | CISCO-WDS-IDS-MIB |
| 1.3.6.1.4.1.9.9.457.1 | ciscoWdsIdsMIBObjects | CISCO-WDS-IDS-MIB |
| 1.3.6.1.4.1.9.9.457.1.1 | ciscoWdsIdsMacSpoofing | CISCO-WDS-IDS-MIB |
| 1.3.6.1.4.1.9.9.457.1.1.3 | ciscoWdsIdsMacSpoofTable | CISCO-WDS-IDS-MIB |
| 1.3.6.1.4.1.9.9.457.1.1.3.1 | ciscoWdsIdsMacSpoofEntry | CISCO-WDS-IDS-MIB |
| 1.3.6.1.4.1.9.9.457.1.1.3.1.4 | ciscoWdsIdsMacSpoofUserId | CISCO-WDS-IDS-MIB |