ALM-303046740 The AP Security Level Was Lowered by Attacks

Description

WLAN/4/STA_SECURITY_CLASS_LOW_ATTACK: OID [oid] Low safelevel attack notify.(APMAC=[OPAQUE],APMAC=[OPAQUE],RadioID=[INTEGER],StaMac=[OPAQUE],APName=[OCTET],StaAssocBssid=[OPAQUE],Ssid=[OCTET], APID=[INTEGER])

The AP security level was lowered by attacks.

Attribute

Alarm ID	Alarm Severity	Alarm Type
303046740	Warning	equipmentAlarm

Parameters

Name	Meaning
OID	Indicates the MIB object ID of the alarm.
APMAC	Indicates the MAC address of an AP.
RadioID	Indicates the radio ID.
StaMac	Indicates the MAC address of a STA, which identifies the STA and functions as the index for querying information associated with the STA.
APName	Indicates the AP name.
StaAssocBssid	Indicates the BSSID associated with the STA.
Ssid	Indicates the SSID associated with the STA.
APID	Indicates the AP ID.

Impact on the System

STAs cannot go online.

Possible Causes

The AP received key negotiation response packets with incorrect WIEASUE.

Procedure

Check whether the MAC address of the STA is the same as that of the attack device.
- If so, go to Step 2.
- If not, go to Step 4.
Run the sta-mac mac-address [ description description ] command to add the attack device's MAC address to the blacklist in the STA blacklist profile view.
Check whether the alarm persists.
- If so, go to Step 4.
- If not, go to Step 5.
Collect alarm messages, log messages, and configurations, and then contact the technical support personnel.
End.