All MIBs › ZTE-AN-SECURITY-L3-MIB › zxAnSecL3IpSrcRouteCheckEn
zxAnSecL3IpSrcRouteCheckEn
Module: ZTE-AN-SECURITY-L3-MIB
OID (symbolic): ZTE-AN-SECURITY-L3-MIB::zxAnSecL3IpSrcRouteCheckEn
OID (numeric): 1.3.6.1.4.1.3902.1082.70.37.2.2.1.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: Enable/disable IP source route check function. When this object is set to enabled(1), the received packets with IP source route option will be dropped.
What is zxAnSecL3IpSrcRouteCheckEn?
This read-write flag enables or disables a check that drops any received packet carrying the IP source-route option, a mechanism historically abused to bypass normal routing-based security controls. Admins enable it to block source-routing-based attacks or reconnaissance without needing upstream filtering. For example, setting zxAnSecL3IpSrcRouteCheckEn to enabled(1) causes the device to discard any packet that specifies its own routing path via the IP source-route option.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.37.2.2.1.2 snmpwalk -v2c -c public <target> ZTE-AN-SECURITY-L3-MIB::zxAnSecL3IpSrcRouteCheckEn
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.3902.1082.70.37.2.2.1.2.1 snmpget -v2c -c public <target> ZTE-AN-SECURITY-L3-MIB::zxAnSecL3IpSrcRouteCheckEn.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.3902.1082.70.37.2.2.1.2.1 i <value>
Start monitoring ZTE access-network platforms with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the ZTE-AN-SECURITY-L3-MIB::zxAnSecL3IpSrcRouteCheckEn OID value, configure state conditions and alerts, and monitor any ZTE access-network platforms from a single console.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.3902 | zte | DPI-MIB |
| 1.3.6.1.4.1.3902.1082 | zxAccessNode | ZTE-AN-SMI |
| 1.3.6.1.4.1.3902.1082.70 | zxAnServiceSecurity | ZTE-AN-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.3902.1082.70.37 | zxAnSecurityL3Mib | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2 | zxAnSecL3Objects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.2 | zxAnSecL3IpObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.2.1 | zxAnSecL3IpGlobalObjects | ZTE-AN-SECURITY-L3-MIB |
| 1.3.6.1.4.1.3902.1082.70.37.2.2.1.2 | zxAnSecL3IpSrcRouteCheckEn | ZTE-AN-SECURITY-L3-MIB |