2-22
FAQ and Troubleshooting Guide for the CiscoWorks Wireless LAN Solution Engine
OL-8376-01
Chapter 2 Fault Descriptions
IDS (Intrusion Detection System) Faults
Radio Role must be
“roleScanner” to support
Frame Monitoring (was
x).
This fault is raised when a radio is
initially configured for Frame
Monitoring (where x is the integer
value of the SNMP OID
cd11IfStationRole from the
CISCO-DOT11-IF-MIB), but
then someone configures the
radio out of scanning-only mode.
As a side effect, this also disables
Frame Monitoring.
When this fault is cleared, the
following message displays:
Radio Role is “roleScanner” and
supports Frame Monitoring.
Radio Mgr > Frame
Monitoring
Review your network to determine
the action necessary to clear the fault
condition.
Although this situation might simply
be that an administrator no longer
needs to monitor or scan a portion of
their site any longer, it could also be
an intruder who has somehow gained
console access to a Scanning AP and
is attempting to “blind” IDS services
for a portion of a site.
TKIP Replay is detected The fault threshold set has been
exceeded.
When this fault is cleared, the
following message displays:
There is no TKIP Replay
detected.
IDS >
Manage IDS Settings
> General IDS
Settings >
TkipReplayClient
Verify that the fault threshold is set
correctly.
If the threshold is set correctly,
review your network to determine the
action necessary to clear the fault
condition.
TKIP LocalMICFailure is
detected
The fault threshold set has been
exceeded.
When this fault is cleared, the
following message displays:
There is no TKIP
LocalMICFailure detected.
IDS >
Manage IDS Settings
> General IDS
Settings >
TkipLocalMicFailure
Client
Verify that the fault threshold is set
correctly.
If the threshold is set correctly,
review your network to determine the
action necessary to clear the fault
condition.
Unexpected MIC while
MFP Disabled
This fault is raised against the AP
that is observed generating the
violation.
Not applicable. See Bad MIC while MFP enabled,
page 2-16).
Table 2-3 IDS Faults (continued)
Fault Description Explanation Related Setting Recommended Action