All MIBs › CHECKPOINT-MIB-2 › icmpOutAddrMaskReps
icmpOutAddrMaskReps
Module: CHECKPOINT-MIB-2
OID (symbolic): CHECKPOINT-MIB-2::icmpOutAddrMaskReps
OID (numeric): 1.3.6.1.2.1.5.26
Node type: OBJECT-TYPE
Type: Counter
Access: read-only
Description: The number of ICMP Address Mask Reply messages sent.
What is icmpOutAddrMaskReps?
Counts ICMP Address Mask Reply messages sent by the device, how many mask requests addressed to it the gateway answered. A nonzero value here specifically means the gateway is willing to disclose its subnet mask to whoever asks over ICMP, which a hardening review would flag on an internet-facing interface as an unnecessary information leak worth filtering. Example: finding icmpOutAddrMaskReps incrementing in response to probes from the external interface is the kind of finding that leads a hardening checklist to explicitly block address-mask requests inbound.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.2.1.5.26 snmpwalk -v2c -c public <target> CHECKPOINT-MIB-2::icmpOutAddrMaskReps
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.2.1.5.26.1 snmpget -v2c -c public <target> CHECKPOINT-MIB-2::icmpOutAddrMaskReps.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB-2::icmpOutAddrMaskReps OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (6 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.2 | mgmt | AXON-MIB |
| 1.3.6.1.2.1 | mib_2 | AXON-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.2.1.5 | icmp | CHECKPOINT-MIB-2 |
| 1.3.6.1.2.1.5.26 | icmpOutAddrMaskReps | CHECKPOINT-MIB-2 |