RBTWS-INFO-RF-DETECT-MIB

All MIBs › RBTWS-INFO-RF-DETECT-MIB

Organization: Enterasys Networks

Last Updated: 2007-08-30

Category: Wireless LAN

Description: Provides RF detection and rogue access point identification data for Enterasys RoamAbout wireless LAN controllers.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is RBTWS-INFO-RF-DETECT-MIB?

RBTWS-INFO-RF-DETECT-MIB is an Enterasys (later Extreme Networks) RoamAbout wireless MIB covering the RF Detect feature of its WLAN controller/access-point product family. It defines a table of detected RF transmitters, capturing rogue and neighboring wireless devices seen by the controller, including their MAC addresses, channel, signal strength, SSID, and security classification. Its monitoring role is centered on wireless security and RF environment status rather than classic hardware sensors: operators use it to detect rogue access points, unauthorized transmitters, and interference sources on their WLAN. It is part of the larger Enterasys RoamAbout ('rbtws') MIB family and depends on that vendor's WLAN controller architecture for the underlying data collection. It is deployed on Enterasys/Extreme Networks wireless LAN controllers in enterprise or campus Wi-Fi deployments for RF security monitoring, typically after an RBTWS-INFO-RF-DETECT-MIB download into the operator's SNMP management platform.

IPNetwork Monitor allows you to monitor SNMP objects defined in RBTWS-INFO-RF-DETECT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Enterasys/Extreme Networks RoamAbout wireless LAN controller and access points

Monitoring Examples

An administrator would poll rbtwsInfoRFDetectXmtrTable / rbtwsInfoRFDetectXmtrEntry to enumerate detected transmitters, reading rbtwsInfoRFDetectXmtrTransmitterMacAddress, rbtwsInfoRFDetectXmtrSsid, rbtwsInfoRFDetectXmtrRssi, and rbtwsInfoRFDetectXmtrClassification for each entry. A transmitter whose rbtwsInfoRFDetectXmtrClassification reads rogue with a strong rbtwsInfoRFDetectXmtrRssi indicates an unauthorized AP operating near the campus, prompting investigation. rbtwsInfoRFDetectCurrentXmtrTableSize gives a quick count of tracked RF sources, useful for spotting sudden spikes in detected devices.

What Can Be Monitored

detected rogue/neighboring transmitters
transmitter MAC address and SSID
signal strength (RSSI)
channel number
networking mode
rogue AP classification

Imported Objects

From RBTWS-AP-TC

RbtwsChannelNum
RbtwsRssi

From RBTWS-RF-DETECT-TC

RbtwsRFDetectClassification
RbtwsRFDetectClassificationReason
RbtwsRFDetectNetworkingMode

From RBTWS-ROOT-MIB

rbtwsMibs

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Gauge32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString
MacAddress

How to Use in IPNetwork Monitor

Example using rbtwsInfoRFDetectCurrentXmtrTableSize OID:

Select an Enterasys/Extreme Networks RoamAbout wireless LAN controller and access point (rogue AP/RF detection) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type rbtwsInfoRFDetectCurrentXmtrTableSize into the Find box to locate it in the OID tree, then select it and click OK. It reports the current number of Transmitter-Listener-Channel combinations found and recorded by RF detection. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Gauge32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
rbtwsInfoRFDetectMib	1.3.6.1.4.1.52.4.15.1.4.9			RF Detect MIB. Copyright 2007 Enterasys Networks, Inc. All rights reserved. This SNMP Management Information Base Specification (Specification) embodies confidential and proprietary intellectual property. This Specification is supplied 'AS IS' and Enterasys Networks makes no warranty, either express or implied, as to the use, operation, condition, or performance of the Specification.
rbtwsInfoRFDetectObjects	1.3.6.1.4.1.52.4.15.1.4.9.1
rbtwsInfoRFDetectDataObjects	1.3.6.1.4.1.52.4.15.1.4.9.1.1
rbtwsInfoRFDetectXmtrTable	1.3.6.1.4.1.52.4.15.1.4.9.1.1.1		not-accessible	Transmitter table. May contain tens of thousands of entries (different Transmitter-Listener-Channel combinations).
rbtwsInfoRFDetectXmtrEntry	1.3.6.1.4.1.52.4.15.1.4.9.1.1.1.1		not-accessible	Transmitter-Listener-Channel combination.
MAC rbtwsInfoRFDetectXmtrTransmitterMacAddress	1.3.6.1.4.1.52.4.15.1.4.9.1.1.1.1.1	MacAddress	not-accessible	The MAC Address of this Transmitter.
MAC rbtwsInfoRFDetectXmtrListenerMacAddress	1.3.6.1.4.1.52.4.15.1.4.9.1.1.1.1.2	MacAddress	not-accessible	The MAC Address of this Listener.
RBT rbtwsInfoRFDetectXmtrChannelNum	1.3.6.1.4.1.52.4.15.1.4.9.1.1.1.1.3	RbtwsChannelNum	not-accessible	Channel Number this transmitter was using when this listener detected it.
RBT rbtwsInfoRFDetectXmtrRssi	1.3.6.1.4.1.52.4.15.1.4.9.1.1.1.1.4	RbtwsRssi	read-only	Received Signal Strength Indicator at this listener.
STR rbtwsInfoRFDetectXmtrSsid	1.3.6.1.4.1.52.4.15.1.4.9.1.1.1.1.5	DisplayString	read-only	The service/SSID name this transmitter was using. Zero-length string when unknown or not applicable.
RBT rbtwsInfoRFDetectXmtrNetworkingMode	1.3.6.1.4.1.52.4.15.1.4.9.1.1.1.1.6	RbtwsRFDetectNetworkingMode	read-only	The way this transmitter is doing wireless networking: ad-hoc mode networking or infrastructure mode networking.
RBT rbtwsInfoRFDetectXmtrClassification	1.3.6.1.4.1.52.4.15.1.4.9.1.1.1.1.7	RbtwsRFDetectClassification	read-only	The RF classification of this transmitter.
RBT rbtwsInfoRFDetectXmtrClassificationReason	1.3.6.1.4.1.52.4.15.1.4.9.1.1.1.1.8	RbtwsRFDetectClassificationReason	read-only	The reason why this transmitter was classified by RF detection the way it is.
G32 rbtwsInfoRFDetectCurrentXmtrTableSizeEx	1.3.6.1.4.1.52.4.15.1.4.9.1.1.2	Gauge32	read-only	Current number of Transmitter-Listener-Channel combinations found and recorded by RF detection.
rbtwsInfoRFDetectConformance	1.3.6.1.4.1.52.4.15.1.4.9.1.2
rbtwsInfoRFDetectCompliances	1.3.6.1.4.1.52.4.15.1.4.9.1.2.1
rbtwsInfoRFDetectCompliance	1.3.6.1.4.1.52.4.15.1.4.9.1.2.1.1			The compliance statement for devices that implement the RF Detect MIB.
rbtwsInfoRFDetectGroups	1.3.6.1.4.1.52.4.15.1.4.9.1.2.2
rbtwsInfoRFDetectXmtrGroup	1.3.6.1.4.1.52.4.15.1.4.9.1.2.2.1			Mandatory group of objects implemented to provide RF Detect Transmitter info.
rbtwsInfoRFDetectXmtrClassificationGroup	1.3.6.1.4.1.52.4.15.1.4.9.1.2.2.2			Group of objects implemented to provide RF Detect Classification info. Introduced in 6.2 release.
rbtwsInfoRFDetectCurrentXmtrTableSizeGroup	1.3.6.1.4.1.52.4.15.1.4.9.1.2.2.3			Group for one object that provides the current number of Transmitter-Listener-Channel combinations found and recorded by RF detection. Introduced in 6.2 release.

RFC description

Enterasys RBTWS (Robust Wireless Switch) vendor-private MIB for RF detection and transmitter classification on wireless networks.

Start monitoring Enterasys/Extreme Networks RoamAbout wireless LAN controller and access points (rogue AP/RF detection) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RBTWS-INFO-RF-DETECT-MIB