All MIBs › CROUTE-MIB › ipGlobalsICMPErrMsgEnable
ipGlobalsICMPErrMsgEnable
Module: CROUTE-MIB
OID (symbolic): CROUTE-MIB::ipGlobalsICMPErrMsgEnable
OID (numeric): 1.3.6.1.4.1.81.31.1.1.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Whenever to send ICMP messages such as Destination Unreachable, etc.
What is ipGlobalsICMPErrMsgEnable?
This read-write enumerated integer controls whether the device sends ICMP error messages such as Destination Unreachable. An admin disables this in security-sensitive environments to reduce information leakage to potential attackers probing the network, at the cost of losing helpful diagnostic feedback for legitimate troubleshooting. For example, disabling this on an edge router prevents it from confirming to an external scanner which internal hosts or ports are unreachable.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.81.31.1.1.2 snmpwalk -v2c -c public <target> CROUTE-MIB::ipGlobalsICMPErrMsgEnable
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.81.31.1.1.2.1 snmpget -v2c -c public <target> CROUTE-MIB::ipGlobalsICMPErrMsgEnable.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.81.31.1.1.2.1 i <value>
Start monitoring Layer 3 switch platform (vendor unclear, BOOTP/RIP) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CROUTE-MIB::ipGlobalsICMPErrMsgEnable OID value, configure state conditions and alerts, and monitor any Layer 3 switch platform (vendor unclear, BOOTP/RIP) from a single console.
OID Breakdown
Upper-level ancestors (7 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.81 | lannet | GEN-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.81.31 | croute | CROUTE-MIB |
| 1.3.6.1.4.1.81.31.1 | ipRoute | CROUTE-MIB |
| 1.3.6.1.4.1.81.31.1.1 | ipGlobals | CROUTE-MIB |
| 1.3.6.1.4.1.81.31.1.1.2 | ipGlobalsICMPErrMsgEnable | CROUTE-MIB |