All MIBs › NAT › cfDenyReadPublic
cfDenyReadPublic
Module: NAT
OID (symbolic): NAT::cfDenyReadPublic
OID (numeric): 1.3.6.1.4.1.86.2.1.5
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
What is cfDenyReadPublic?
The source MIB carries no DESCRIPTION, so this reading leans on the object's name, its off(0)/on(1) enumeration, and the inline comment 'deny standard read'. Setting it to on(1) blocks any manager presenting the standard/public community string from reading the device at all, forcing use of the enterprise or higher community strings. An admin would enable this to harden a device against casual SNMP scans using the well-known 'public' string.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.86.2.1.5 snmpwalk -v2c -c public <target> NAT::cfDenyReadPublic
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.86.2.1.5.1 snmpget -v2c -c public <target> NAT::cfDenyReadPublic.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.86.2.1.5.1 i <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> cfDenyReadPublic.1
Start monitoring NAT-capable router/firewall (vendor unspecified) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the NAT::cfDenyReadPublic OID value, configure state conditions and alerts, and monitor any NAT-capable router/firewall (vendor unspecified) from a single console.
OID Breakdown
Upper-level ancestors (7 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.86 | nat | CMU-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.86.2 | natmib | NAT |
| 1.3.6.1.4.1.86.2.1 | configuration | NAT |
| 1.3.6.1.4.1.86.2.1.5 | cfDenyReadPublic | NAT |