Network Management

last person joined: 22 hours ago 

Keep an informative eye on your network with IMC and AirWave network management solutions.
Expand all | Collapse all

Alert trigger based on failed wifi login attempts

Jump to Best Answer
This thread has been viewed 7 times
  • 1.  Alert trigger based on failed wifi login attempts

    Posted Oct 25, 2021 08:25 PM

    Airwave 8.2.7.1 with Aruba 7210 controllers on 6.5.4.6

    I'd like to setup an alert if there is a device that has more than 10 failed login attempts to the wifi.  I don't see a Trigger type that can define this type of alert in the version of Airwaves I'm using.  Are there other methods that can be used to create this alert?  I'm using WPA2-PSK and thinking something could be scripted from the authlog files but wanted to check with more experienced users first.

    Thanks!



    ------------------------------
    C
    ------------------------------


  • 2.  RE: Alert trigger based on failed wifi login attempts
    Best Answer

    Posted 30 days ago
    WPA2-PSK devices do not do a "login" perse.  There is a "multicast encryption mismatch" message in syslog whenever this happens, though:  https://community.arubanetworks.com/browse/articles/blogviewer?blogkey=27c07cb6-5ebe-41d0-a61d-92693ee3914c

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    ------------------------------



  • 3.  RE: Alert trigger based on failed wifi login attempts

    Posted 23 days ago
    Thank you!

    ------------------------------
    C
    ------------------------------