All MIBs › WS-TRAP-MIB › wsTrapWirelessStationTkipCounterMeasures

wsTrapWirelessStationTkipCounterMeasures

OID (symbolic): WS-TRAP-MIB::wsTrapWirelessStationTkipCounterMeasures

OID (numeric): 1.3.6.1.4.1.388.14.5.1.7.1.24

Node type: NOTIFICATION-TYPE

Description: There have been 2 or more TKIP MIC checksum failures in the last 60 seconds, as a result that Wireless Lan has been disabled for 60 seconds. MIC failures can occur either because someone is trying to attack the network and guess your TKIP keys, or because of some stations that have drivers that generate invalid frames.

Solution: View the system logs to see which wireless station is generating these MIC failures. If it is on your network, then take that station off the network for now. Contact support.

Other Possibilities: If your network is setup for eap authentication with TKIP encryption, and there are frequent reauthentications, MIC failures can occur. If this is the case, try reducing the frequency of re-authentications, and see if it helps with the countermeasures. Again see if the failures are caused by one particular station.

Severity: TP_SEV_WARN

Message: Activated

Examples

Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):

snmptrap -v2c -c public <manager> '' WS-TRAP-MIB::wsTrapWirelessStationTkipCounterMeasures
snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.388.14.5.1.7.1.24

Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):

snmptrapd -f -Lo -c /dev/null authCommunity log public

Example snmptrapd log entry:

zoo11-linux.zoo [UDP: [192.168.30.111]:51265->[192.168.30.10]:162]:
  DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (206998593) 23 days, 22:59:45.93
  SNMPv2-MIB::snmpTrapOID.0 = OID: WS-TRAP-MIB::wsTrapWirelessStationTkipCounterMeasures

Start monitoring Symbol Technologies wireless switches with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the WS-TRAP-MIB::wsTrapWirelessStationTkipCounterMeasures OID value, configure state conditions and alerts, and monitor any Symbol Technologies wireless switches from a single console.

OID Breakdown

Upper-level ancestors (9 from the standard OID tree / other modules)

Numeric OID	Name	Module
1	iso	LANART-AGENT
1.3	org	AirPair-MIB
1.3.6	dod	AirPair-MIB
1.3.6.1	internet	AirPair-MIB
1.3.6.1.4	private	AirPair-MIB
1.3.6.1.4.1	enterprises	AirPair-MIB
1.3.6.1.4.1.388	symbol	SYMBOL-DSSS-ENTERPRISE-PRIVATE-MIB
1.3.6.1.4.1.388.14	ws	WS-SMI
1.3.6.1.4.1.388.14.5	wsTrap	WS-SMI

Numeric OID	Name	Module
1.3.6.1.4.1.388.14.5.1	wsTrapMIB	WS-TRAP-MIB
1.3.6.1.4.1.388.14.5.1.7	wsTrapWireless	WS-TRAP-MIB
1.3.6.1.4.1.388.14.5.1.7.1	wsTrapWirelessStation	WS-TRAP-MIB
1.3.6.1.4.1.388.14.5.1.7.1.24	wsTrapWirelessStationTkipCounterMeasures	WS-TRAP-MIB

WS-TRAP-MIB :: wsTrapWirelessStationTkipCounterMeasures

wsTrapWirelessStationTkipCounterMeasures

Module

This MIB depends on