All MIBs › ZTE-AN-SECURITY-L3-MIB › zxAnSecL3IpSrcDstIpAddrCheckEn
zxAnSecL3IpSrcDstIpAddrCheckEn
Module: ZTE-AN-SECURITY-L3-MIB
OID (symbolic): ZTE-AN-SECURITY-L3-MIB::zxAnSecL3IpSrcDstIpAddrCheckEn
OID (numeric): 1.3.6.1.4.1.3902.1082.70.37.2.2.1.1
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enable/disable source and destination IP address check function. When this object is set to enabled(1), the source and destination IP address of the received packets will be checked, if both addresses are the same, the packets will be dropped.
What is zxAnSecL3IpSrcDstIpAddrCheckEn?
This read-write flag enables or disables a Layer 3 security check that compares each received packet's source and destination IP addresses, dropping the packet if the two addresses are identical - a classic land-attack signature. Admins enable it to protect the access node from land-style spoofed packets without needing an external firewall rule. For example, setting zxAnSecL3IpSrcDstIpAddrCheckEn to enabled(1) causes the device to silently drop any packet crafted with matching source and destination addresses.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.37.2.2.1.1 snmpwalk -v2c -c public <target> ZTE-AN-SECURITY-L3-MIB::zxAnSecL3IpSrcDstIpAddrCheckEn
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.37.2.2.1.1.1 snmpget -v2c -c public <target> ZTE-AN-SECURITY-L3-MIB::zxAnSecL3IpSrcDstIpAddrCheckEn.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.3902.1082.70.37.2.2.1.1.1 i <value>
Start monitoring ZTE access-network platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ZTE-AN-SECURITY-L3-MIB::zxAnSecL3IpSrcDstIpAddrCheckEn OID value, configure state conditions and alerts, and monitor any ZTE access-network platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.3902 | zte | DPI-MIB |
| 1.3.6.1.4.1.3902.1082 | zxAccessNode | ZTE-AN-SMI |
| 1.3.6.1.4.1.3902.1082.70 | zxAnServiceSecurity | ZTE-AN-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.3902.1082.70.37 | zxAnSecurityL3Mib | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2 | zxAnSecL3Objects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.2 | zxAnSecL3IpObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.2.1 | zxAnSecL3IpGlobalObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.2.1.1 | zxAnSecL3IpSrcDstIpAddrCheckEn | ZTE-AN-SECURITY-L3-MIB |