All MIBs › CISCOSB-SECURITY-SUITE › rlSecuritySuiteReservedMartianAddresses
rlSecuritySuiteReservedMartianAddresses
Module: CISCOSB-SECURITY-SUITE
OID (symbolic): CISCOSB-SECURITY-SUITE::rlSecuritySuiteReservedMartianAddresses
OID (numeric): 1.3.6.1.4.1.9.6.1.101.120.4
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-write
Description: This scalar globally enables/disables discarding of the IP well-known addresses described below: ------------------------------------------------------------------------------- | Address block | Present use |------------------------------------------------------------------------------- |0.0.0.0/8 | Addresses in this block refer to source hosts |(except 0.0.0.0/32 | on 'this' network. | as source address) | |------------------------------------------------------------------------------ |127.0.0.0/8 | This block is assigned for use as the Internet host loop-back address. |----------------------------------------------------------------------------------------------------- |192.0.2.0/24 | This block is assigned as 'TEST-NET' | | for use in documentation and example code. |--------------------------------------------------------------------------- |224.0.0.0/4 as source. | This block, formerly known as the Class D address space, | | is allocated for use in IPv4 multicast address assignments. |------------------------------------------------------------------------------------------- |240.0.0.0/4 | |(except 255.255.255.255/32 | This block, formerly known as the Class E address space, is reserved. | as destination address) | |-------------------------------------------------------------------------------------------------------
What is rlSecuritySuiteReservedMartianAddresses?
This read-write TruthValue globally enables or disables discarding of traffic sourced from reserved 'martian' address blocks such as 0.0.0.0/8, 127.0.0.0/8, and 192.0.2.0/24. Admins care because enabling it drops obviously spoofed or invalid source addresses before they're ever treated as legitimate traffic. For example, an admin enables this on a border switch so packets falsely claiming to originate from the loopback range 127.0.0.0/8 get dropped instead of being processed.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.6.1.101.120.4 snmpwalk -v2c -c public <target> CISCOSB-SECURITY-SUITE::rlSecuritySuiteReservedMartianAddresses
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.6.1.101.120.4.1 snmpget -v2c -c public <target> CISCOSB-SECURITY-SUITE::rlSecuritySuiteReservedMartianAddresses.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.9.6.1.101.120.4.1 s <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> rlSecuritySuiteReservedMartianAddresses.1
Start monitoring Cisco Small Business switch/router with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCOSB-SECURITY-SUITE::rlSecuritySuiteReservedMartianAddresses OID value, configure state conditions and alerts, and monitor any Cisco Small Business switch/router from a single console.
OID Breakdown
Upper-level ancestors (11 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.6 | otherEnterprises | CISCO-SMI |
| 1.3.6.1.4.1.9.6.1 | ciscoSB | CISCO-SMI |
| 1.3.6.1.4.1.9.6.1.101 | switch001 | CISCOSB-MIB |
| 1.3.6.1.4.1.9.6.1.101.120 | rlSecuritySuiteMib | CISCOSB-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.6.1.101.120.4 | rlSecuritySuiteReservedMartianAddresses | CISCOSB-SECURITY-SUITE |