WCS Alarms

krishanmistry — Sat, 03 Jul 2021 23:24:40 GMT

We have deployed Wireless in a few offices as a proof of concept and we have started to get the following alarm at one site:

The AP '00:1f:ca:2e:59:a0' with protocol '802.11b/g' on Controller '#.#.##.#' received a message with a large NAV field and all traffic on the channel has been suspended. This is most likely a malicious denial of service attack.

The above is continually being reported on a couple (but not all) APs at this office.

In addition do you have any info/comment on the following:

Â· Big NAV Attack detected.

Â· Auth/De-auth floods i.e. "IDS 'Auth flood' Signature attack detected".

Â· Assoc/Deassoc flood i.e. "IDS 'Assoc flood' Signature attack detected".

Many Thanks

Re: WCS Alarms

carenas123 — Tue, 09 Sep 2008 15:27:30 GMT

Here is the URL for the Alarms and Events for the WCS. Following guide will help you for the Events and Alarms :

http://www.cisco.com/en/US/docs/wireless/wcs/4.1/configuration/guide/wcsevent.html

topic Re: WCS Alarms in Wireless

WCS Alarms

Re: WCS Alarms