Help Center/ Huawei Qiankun CloudService/ More Documents/ Device Alarm Handling/ V200 LSW Alarms/ ALM-3276800068 Address redirection attack notify
Updated on 2024-01-25 GMT+08:00

ALM-3276800068 Address redirection attack notify

Description

WLAN/4/STA_ADDRESS_REDIRCET_ATTACK:OID [OID] Address redirection attack notify.(APMAC=[OPAQUE],APMAC=[OPAQUE],RadioID=[INTEGER],StaMac=[OPAQUE],APName=[OCTET],StaAssocBssid=[OPAQUE],Ssid=[OCTET], APID=[INTEGER])

An address redirection attack was detected.

Attribute

Alarm ID

Alarm Severity

Alarm Type

3276800068

Warning

Equipment alarm

Parameters

Name

Meaning

OID

Indicates the MIB object ID of the alarm.

APMAC

Indicates the MAC address of an AP.

RadioID

Indicates the radio ID.

StaMac

Indicates the MAC address of a STA, which identifies the STA and functions as the index for querying information associated with the STA.

APName

Indicates the AP name.

StaAssocBssid

Indicates the BSSID associated with the STA.

Ssid

Indicates the SSID associated with the STA.

APID

Indicates the AP ID.

Impact on the System

STAs cannot go online.

Possible Causes

The AP received invalid WPI frames.

Procedure

  1. Check whether the MAC address of the STA is the same as that of the attack device.

    • If so, go to Step 2.
    • If not, go to Step 4.

  2. Run the sta-mac mac-address [ description description ] command to add the attack device's MAC address to the blacklist in the STA blacklist profile view.
  3. Check whether the alarm persists.

    • If so, go to Step 4.
    • If not, go to Step 5.

  4. Collect alarm messages, log messages, and configurations, and then contact the technical support personnel.
  5. End.

Related Information

None