All MIBs › CISCO-UNIFIED-FIREWALL-MIB › cufwL2GlobalEnableStealthMode
cufwL2GlobalEnableStealthMode
Module: CISCO-UNIFIED-FIREWALL-MIB
OID (symbolic): CISCO-UNIFIED-FIREWALL-MIB::cufwL2GlobalEnableStealthMode
OID (numeric): 1.3.6.1.4.1.9.9.491.1.6.1.1
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-only
Description: The value indicates if the firewall is operating in transparent (layer 2) mode or not.
When operating in transparent mode, the firewall operates as a bridge while performing firewalling functions.
What is cufwL2GlobalEnableStealthMode?
This read-only TruthValue reports whether the firewall is currently operating in transparent, layer-2, bridging mode rather than routed mode. An admin checks this to confirm the fundamental deployment mode of the device, since transparent-mode firewalls act as bridges while still enforcing firewall policy. Knowing this value is true would tell an admin to interpret the accompanying L2-specific ARP and bridging counters as directly relevant to how this device is forwarding traffic.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.6.1.1 snmpwalk -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwL2GlobalEnableStealthMode
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.6.1.1.1 snmpget -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwL2GlobalEnableStealthMode.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> cufwL2GlobalEnableStealthMode.1
Start monitoring Cisco ASA firewalls / IOS zone-based firewall devices with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-UNIFIED-FIREWALL-MIB::cufwL2GlobalEnableStealthMode OID value, configure state conditions and alerts, and monitor any Cisco ASA firewalls / IOS zone-based firewall devices from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.491 | ciscoUnifiedFirewallMIB | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1 | ciscoUnifiedFirewallMIBObjects | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.6 | cuFwL2FwGrp | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.6.1 | cufwL2FwGlobals | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.6.1.1 | cufwL2GlobalEnableStealthMode | CISCO-UNIFIED-FIREWALL-MIB |