Network Management

 View Only
last person joined: 14 hours ago 

Keep an informative eye on your network with HPE Aruba Networking network management solutions
Back to discussions
Expand all | Collapse all

Alert trigger based on failed wifi login attempts

This thread has been viewed 14 times

  • 1.  Alert trigger based on failed wifi login attempts

    Posted Oct 25, 2021 08:25 PM

    Airwave 8.2.7.1 with Aruba 7210 controllers on 6.5.4.6

    I'd like to setup an alert if there is a device that has more than 10 failed login attempts to the wifi.  I don't see a Trigger type that can define this type of alert in the version of Airwaves I'm using.  Are there other methods that can be used to create this alert?  I'm using WPA2-PSK and thinking something could be scripted from the authlog files but wanted to check with more experienced users first.

    Thanks!



    ------------------------------
    C
    ------------------------------


  • 2.  RE: Alert trigger based on failed wifi login attempts
    Best Answer

    EMPLOYEE
    Posted Oct 27, 2021 11:19 AM
    WPA2-PSK devices do not do a "login" perse.  There is a "multicast encryption mismatch" message in syslog whenever this happens, though:  https://community.arubanetworks.com/browse/articles/blogviewer?blogkey=27c07cb6-5ebe-41d0-a61d-92693ee3914c

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    ------------------------------

    Original Message


  • 3.  RE: Alert trigger based on failed wifi login attempts

    Posted Nov 03, 2021 02:29 PM
    Thank you!

    ------------------------------
    C
    ------------------------------

    Original Message