ALM-3276800065 The STA Was Attacked by Replay Attacks

Description

WLAN/4/STA_REPLAY_ATTACK:OID [OID] Station repititive attack notify.(APMAC=[OPAQUE],APMAC=[OPAQUE],RadioID=[INTEGER],StaMac=[OPAQUE],APName=[OCTET],StaAssocBssid=[OPAQUE],Ssid=[OCTET], APID=[INTEGER])

The STA was attacked by replay attacks.

Attribute

Alarm ID	Alarm Severity	Alarm Type
3276800065	Warning	Equipment alarm

Parameters

Name	Meaning
OID	Indicates the MIB object ID of the alarm.
APMAC	Indicates the MAC address of an AP.
RadioID	Indicates the radio ID.
StaMac	Indicates the MAC address of a STA, which identifies the STA and functions as the index for querying information associated with the STA.
APName	Indicates the AP name.
StaAssocBssid	Indicates the BSSID associated with the STA.
Ssid	Indicates the SSID associated with the STA.
APID	Indicates the AP ID.

Impact on the System

STAs cannot go online.

Possible Causes

The AP received unauthorized AE questions.

Procedure

Check whether the MAC address of the STA is the same as that of the attack device.
- If so, go to Step 2.
- If not, go to Step 4.
Run the sta-mac mac-address [ description description ] command to add the attack device's MAC address to the blacklist in the STA blacklist profile view.
Check whether the alarm persists.
- If so, go to Step 4.
- If not, go to Step 5.
Collect alarm messages, log messages, and configurations, and then contact the technical support personnel.
End.