What are the SNMP traps sent when spoofing is detected.

Aruba Employee
Aruba Employee

This article applies to all Aruba Mobility Controllers running version 6.x and above.

In Aruba OS, we have the option to detect ip and arp spoofing. And based on the spoofing detected, controller will send out SNMP trigger.

Below are the triggers sent out:

IPv4 Spoofing:

wlsxNIpSpoofingDetected is the trap sent when ipv4 spoofing is detected. 

ARP Spoofing:

(Aruba3400) #show snmp trap-queue | include a4:4e:31:7e:ea:fc
2014-09-16 11:10:03 Station a4:4e:31:7e:ea:fc is black listed because 11.


rtaImage (6).png



IPv6 Spoofing:

(CTRL-E) #show snmp trap-queue | include 02:9e:3f:20:cd:c7
2014-09-29 19:05:52 Station 02:9e:3f:20:cd:c7 is black listed because 8.



Version history
Revision #:
1 of 1
Last update:
‎11-04-2014 04:25 PM
Updated by:
Labels (1)
Search Airheads
Showing results for 
Search instead for 
Did you mean: