RUCKUS-ZD-EVENT-MIB

All MIBs › RUCKUS-ZD-EVENT-MIB

Organization: Ruckus Wireless, Inc.

Last Updated: 2010-10-15

Category: Wireless and Radio

Description: Defines SNMP trap notifications for Ruckus ZoneDirector controller events and AP status changes.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is RUCKUS-ZD-EVENT-MIB?

RUCKUS-ZD-EVENT-MIB is a Ruckus Wireless notification MIB that defines SNMP traps for events raised by a ZoneDirector WLAN controller and its managed access points. Rather than pollable data, it carries event metadata such as severity, type, status, and free-text title/content describing what happened. Its central use is fault and status monitoring: it flags conditions like an AP going offline, a rogue AP being detected, or a client-related security event, all timestamped and identified by serial/network-element ID. It is meant to be used alongside the ZoneDirector controller's core management MIBs for full context on the reporting device. It is typically deployed in enterprise WLAN environments where traps from ZoneDirector controllers are forwarded to an NMS or SIEM for real-time alerting. Engineers can download the RUCKUS-ZD-EVENT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in RUCKUS-ZD-EVENT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Ruckus ZoneDirector WLAN controllers
Ruckus access points managed by ZoneDirector
Ruckus ZoneDirector wireless LAN controllers

Monitoring Examples

An NMS traps on ruckusZDEventTraps carrying ruckusZDEventSeverity, ruckusZDEventType, and ruckusZDEventTitle/ruckusZDEventContent to alert on events such as rogue AP detection (ruckusZDEventRogueMacAddr) or a client/AP issue tied to ruckusZDEventAPMacAddr, with ruckusZDEventTime and ruckusZDEventSerial/ruckusZDEventNEID used to pinpoint when and which controller raised the event.

What Can Be Monitored

event severity level
event type/category
event status
rogue AP MAC address
affected client MAC address
SSID associated with event

Imported Objects

From RUCKUS-ROOT-MIB

ruckusEvents

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
MacAddress

OIDs

OID symbolic	OID numeric	Type	Access	Description
ruckusZDEventMIB	1.3.6.1.4.1.25053.2.2			Ruckus ZD event objects, including trap OID and trap payload.
ruckusZDEventTraps	1.3.6.1.4.1.25053.2.2.1
NTF ruckusZDEventAPJoinTrap	1.3.6.1.4.1.25053.2.2.1.1			Trigger when there is a AP join event. The AP's MAC address is enclosed.
NTF ruckusZDEventSSIDSpoofTrap	1.3.6.1.4.1.25053.2.2.1.2			Trigger when a SSID-spoofing rogue AP is detected. The rogue AP's MAC address and SSID are enclosed.
NTF ruckusZDEventMACSpoofTrap	1.3.6.1.4.1.25053.2.2.1.3			Trigger when a MAC-spoofing rogue AP is detected. The rogue AP's MAC address and SSID are enclosed.
NTF ruckusZDEventRogueAPTrap	1.3.6.1.4.1.25053.2.2.1.4			Trigger when a rogue AP is detected. The rogue AP's MAC address and SSID are enclosed.
NTF ruckusZDEventAPLostTrap	1.3.6.1.4.1.25053.2.2.1.5			Trigger when AP lost contact. The AP's MAC address is enclosed.
NTF ruckusZDEventAPLostHeartbeatTrap	1.3.6.1.4.1.25053.2.2.1.6			Trigger when AP lost heartbeats. The AP's MAC address is enclosed.
NTF ruckusZDEventClientAuthFailBlockTrap	1.3.6.1.4.1.25053.2.2.1.7			Triggered when a client fails authentication too many times in a row. The client's MAC address, AP's MAC address and SSID are enclosed.
NTF ruckusZDEventAPResetTrap	1.3.6.1.4.1.25053.2.2.1.8			Trigger when AP reboots.
NTF ruckusZDEventIPChangeTrap	1.3.6.1.4.1.25053.2.2.1.9			Trigger when IP changes.
NTF ruckusZDEventSystemColdStartTrap	1.3.6.1.4.1.25053.2.2.1.10			Trigger when system performs cold start.
NTF ruckusZDEventAPChannelChangeTrap	1.3.6.1.4.1.25053.2.2.1.11			Trigger when AP channel changes.
NTF ruckusZDEventRadiusAuthUnavailableTrap	1.3.6.1.4.1.25053.2.2.1.12			Trigger when RADIUS authentication server unavailable.
NTF ruckusZDEventRadiusAcctUnavailableTrap	1.3.6.1.4.1.25053.2.2.1.13			Trigger when RADIUS accounting server unavailable.
NTF ruckusZDEventClientJoinFailAPBusyTrap	1.3.6.1.4.1.25053.2.2.1.14			Trigger when client joins fail because AP is busy.
NTF ruckusZDEventInterferenceADHoc	1.3.6.1.4.1.25053.2.2.1.15			Trigger when an interference AD hoc is detected.
NTF ruckusZDEventImageUpgradeFailTrap	1.3.6.1.4.1.25053.2.2.1.16			Trigger when AP image upgrade fails.
NTF ruckusZDEventHeartbeatTrap	1.3.6.1.4.1.25053.2.2.1.22			Trigger with trap heartbeat sent.
NTF ruckusZDEventAttackedTrap	1.3.6.1.4.1.25053.2.2.1.24			Trigger with a malicious attack is found.
NTF ruckusZDEventSystemWarmStartTrap	1.3.6.1.4.1.25053.2.2.1.25			Trigger when system performs warm start.
NTF ruckusZDEventInterfereAPTrap	1.3.6.1.4.1.25053.2.2.1.26			Trigger when a rogue AP used same channel with current AP is detected.
NTF ruckusZDEventAPSystemColdStartTrap	1.3.6.1.4.1.25053.2.2.1.31			Trigger when an AP performs cold start.
NTF ruckusZDEventAPSystemWarmStartTrap	1.3.6.1.4.1.25053.2.2.1.32			Trigger when an AP performs warm start.
NTF ruckusZDEventAPSSIDChangedTrap	1.3.6.1.4.1.25053.2.2.1.33			Trigger when an AP SSID changed.
NTF ruckusZDEventAPClientExceedValve	1.3.6.1.4.1.25053.2.2.1.34			Triggered when AP online client exceed valve.
NTF ruckusZDEventAPAvailableStatusTrap	1.3.6.1.4.1.25053.2.2.1.35			Trigger when AP is available.
NTF ruckusZDEventAPWirelessInterfaceFaultTrap	1.3.6.1.4.1.25053.2.2.1.36			Trigger when AP wireless interface is fault.
NTF ruckusZDEventSystemCpuUtilExceedValve	1.3.6.1.4.1.25053.2.2.1.37			Trigger when System CPU utilization is exceed valve.
NTF ruckusZDEventSystemMemUtilExceedValve	1.3.6.1.4.1.25053.2.2.1.38			Trigger when System memory utilization is exceed valve.
NTF ruckusZDEventSystemBandwidthUtilExceedValve	1.3.6.1.4.1.25053.2.2.1.39			Trigger when System bandwidth utilization is exceed valve.
NTF ruckusZDEventSystemDropPacketRateExceedValve	1.3.6.1.4.1.25053.2.2.1.40			Trigger when System drop packet rate is exceed valve.
NTF ruckusZDEventAPSyncTimeFail	1.3.6.1.4.1.25053.2.2.1.41			Trigger when AP sync clock failure with AC.
NTF ruckusZDEventSystemCpuUtilClrWarn	1.3.6.1.4.1.25053.2.2.1.42			Trigger when System CPU utilization is under the valve.
NTF ruckusZDEventSystemMemUtilClrwarn	1.3.6.1.4.1.25053.2.2.1.43			Trigger when System memory utilization is under the valve.
NTF ruckusZDEventClientJoin	1.3.6.1.4.1.25053.2.2.1.60			Triggered when a client join a AP success. The client's MAC address, AP's MAC address and SSID are enclosed.
NTF ruckusZDEventClientJoinFailed	1.3.6.1.4.1.25053.2.2.1.61			Triggered when a client join a AP failed. The client's MAC address, AP's MAC address and SSID are enclosed.
NTF ruckusZDEventClientJoinFailedAPBusy	1.3.6.1.4.1.25053.2.2.1.62			Triggered when a client join a AP failed because of AP too busy. The client's MAC address, AP's MAC address and SSID are enclosed.
NTF ruckusZDEventClientDisconnect	1.3.6.1.4.1.25053.2.2.1.63			Triggered when a client disconnect from AP. The client's MAC address, AP's MAC address and SSID are enclosed.
NTF ruckusZDEventClientRoamOut	1.3.6.1.4.1.25053.2.2.1.64			Triggered when a client roam out from AP. The client's MAC address, AP's MAC address and SSID are enclosed.
NTF ruckusZDEventClientRoamIn	1.3.6.1.4.1.25053.2.2.1.65			Triggered when a client roam in from AP. The client's MAC address, AP's MAC address and SSID are enclosed.
NTF ruckusZDEventClientAuthFailed	1.3.6.1.4.1.25053.2.2.1.66			Triggered when a client authenticate failure . The client's MAC address, AP's MAC address and SSID are enclosed.Failure reason.
NTF ruckusZDEventClientAuthorizationFailed	1.3.6.1.4.1.25053.2.2.1.67			Triggered when a client has no authorization to join a AP. The client's MAC address, AP's MAC address and SSID are enclosed.
NTF ruckusZDEventAPCPUvalve	1.3.6.1.4.1.25053.2.2.1.83			Triggered when AP cpu util exceed valve.
NTF ruckusZDEventAPMEMvalve	1.3.6.1.4.1.25053.2.2.1.84			Triggered when AP memory util exceed valve.
NTF ruckusZDEventAPCPUvalveClrwarn	1.3.6.1.4.1.25053.2.2.1.85			Trigger when AP cpu utilization is under the valve.
NTF ruckusZDEventAPMEMvalveClrwarn	1.3.6.1.4.1.25053.2.2.1.86			Trigger when AP memory utilization is under the valve.
NTF ruckusZDEventAPNumStaExceedValveClrwarn	1.3.6.1.4.1.25053.2.2.1.87			Trigger when online client clr warning.
NTF ruckusZDEventDhcpPoolFull	1.3.6.1.4.1.25053.2.2.1.88			Trigger when DHCP pool is full.
NTF ruckusZDEventDhcpPoolAbun	1.3.6.1.4.1.25053.2.2.1.89			Trigger when DHCP pool is abundant.
NTF ruckusZDEventSmartRedundancyChangetoActive	1.3.6.1.4.1.25053.2.2.1.100			[Smart Redundancy] Peer ZoneDirector peer ip not found, system changed to active state
NTF ruckusZDEventSmartRedundancyActiveConnected	1.3.6.1.4.1.25053.2.2.1.101			[Smart Redundancy] connected, system is in active state
NTF ruckusZDEventSmartRedundancyActiveDisconnected	1.3.6.1.4.1.25053.2.2.1.102			[Smart Redundancy] disconnected, system is in active state
NTF ruckusZDEventSmartRedundancyStandbyConnected	1.3.6.1.4.1.25053.2.2.1.103			[Smart Redundancy] connected, system is in standby state
NTF ruckusZDEventSmartRedundancyStandbyDisconnected	1.3.6.1.4.1.25053.2.2.1.104			[Smart Redundancy] disconnected, system is in standby state
ruckusZDEventObjects	1.3.6.1.4.1.25053.2.2.2
OCT ruckusZDEventSerial	1.3.6.1.4.1.25053.2.2.2.1	OCTET STRING	accessible-for-notify	Trap serial number.
OCT ruckusZDEventNEID	1.3.6.1.4.1.25053.2.2.2.2	OCTET STRING	accessible-for-notify	Network element ID.
OCT ruckusZDEventSeverity	1.3.6.1.4.1.25053.2.2.2.3	OCTET STRING	accessible-for-notify	Severity level of the trap.
OCT ruckusZDEventType	1.3.6.1.4.1.25053.2.2.2.4	OCTET STRING	accessible-for-notify	Trap type.
OCT ruckusZDEventTime	1.3.6.1.4.1.25053.2.2.2.5	OCTET STRING	accessible-for-notify	Time when trap occured.
INT ruckusZDEventStatus	1.3.6.1.4.1.25053.2.2.2.6	INTEGER	accessible-for-notify	Trap status.
OCT ruckusZDEventTitle	1.3.6.1.4.1.25053.2.2.2.7	OCTET STRING	accessible-for-notify	Trap title.
OCT ruckusZDEventContent	1.3.6.1.4.1.25053.2.2.2.8	OCTET STRING	accessible-for-notify	Trap content.
OCT ruckusZDEventClientMacAddr	1.3.6.1.4.1.25053.2.2.2.15	OCTET STRING	accessible-for-notify	The client's MAC address.
OCT ruckusZDEventAPMacAddr	1.3.6.1.4.1.25053.2.2.2.18	OCTET STRING	accessible-for-notify	The AP's MAC address.
OCT ruckusZDEventRogueMacAddr	1.3.6.1.4.1.25053.2.2.2.20	OCTET STRING	accessible-for-notify	The rogue AP's MAC address.
OCT ruckusZDEventSSID	1.3.6.1.4.1.25053.2.2.2.23	OCTET STRING	accessible-for-notify	SSID.
U32 ruckusZDEventChannel	1.3.6.1.4.1.25053.2.2.2.25	Unsigned32	accessible-for-notify	Channel.
OCT ruckusZDEventReason	1.3.6.1.4.1.25053.2.2.2.28	OCTET STRING	accessible-for-notify	Failure Reason.
OCT ruckusZDEventIpAddr	1.3.6.1.4.1.25053.2.2.2.30	OCTET STRING	accessible-for-notify	IpAddress (ipv4 and ipv6).

RFC description

Defines event traps for Ruckus ZoneDirector wireless controller including AP join and rogue AP detection.

Start monitoring Ruckus ZoneDirector WLAN controllers with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RUCKUS-ZD-EVENT-MIB

What Is RUCKUS-ZD-EVENT-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description