What are the SNMP traps sent when spoofing is detected.

Aruba Employee

This article applies to all Aruba Mobility Controllers running version 6.x and above.

In Aruba OS, we have the option to detect ip and arp spoofing. And based on the spoofing detected, controller will send out SNMP trigger.

Below are the triggers sent out:

IPv4 Spoofing:
============

wlsxNIpSpoofingDetected is the trap sent when ipv4 spoofing is detected. 


ARP Spoofing:
===========

(Aruba3400) #show snmp trap-queue | include a4:4e:31:7e:ea:fc
 
2014-09-16 11:10:03 Station a4:4e:31:7e:ea:fc is black listed because 11.

 

rtaImage (6).png

 

 

IPv6 Spoofing:
===========

(CTRL-E) #show snmp trap-queue | include 02:9e:3f:20:cd:c7
 
2014-09-29 19:05:52 Station 02:9e:3f:20:cd:c7 is black listed because 8.

 

rtaImage.jpg

Version history
Revision #:
1 of 1
Last update:
‎11-04-2014 04:25 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: