OID reference
1.3.6.1.4.1.248.51.2.5.11
Allow incoming ICMP frames to the hmSec itself (router modes only): drop: default, ping: allow incoming ICMP echo request (required to answer ping), all: allow all incoming ICMP request to reach the TCP stack. Note: ICMP packets related to established connections are handled by the connection tracking. This setting is…
Identification
{1 3 6 1 4 1 248 51 2 5 11}
| Value | Name |
|---|---|
| 1 | drop |
| 2 | ping |
| 3 | all |
At least one MIB declaration places this object in a scalar group. A scalar instance uses the suffix .0.
snmpget [connection options] DEVICE .1.3.6.1.4.1.248.51.2.5.11.0
Replace the placeholders with your connection and authentication options. Available permissions and device support can differ from the MIB.
Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.
The displayed source records contain one distinct definition. Compare its source records.
hmSecFirewallICMPPolicy OBJECT-TYPE
SYNTAX INTEGER {
drop(1),
ping(2),
all(3)
}
ACCESS read-write
STATUS mandatory
DESCRIPTION
"Allow incoming ICMP frames to the hmSec itself (router modes only):
drop: default, ping: allow incoming ICMP echo request (required to
answer ping), all: allow all incoming ICMP request to reach the TCP
stack.
Note: ICMP packets related to established connections are handled
by the connection tracking. This setting is used for unrelated ICMP
traffic."
::= { hmSecFirewallExtended 11 }
Meaning
Identical descriptions are grouped. Different wording and device-specific notes are retained.
Allow incoming ICMP frames to the hmSec itself (router modes only): drop: default, ping: allow incoming ICMP echo request (required to answer ping), all: allow all incoming ICMP request to reach the TCP stack. Note: ICMP packets related to established connections are handled by the connection tracking. This setting is used for unrelated ICMP traffic.
Hirschmann MIB copies (LibreNMS/Observium Community)
Evidence
Matching descriptions are grouped; open a group to compare definitions and supporting files.
Status in source: mandatory.
Names: hmSecFirewallICMPPolicy
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"hmSecFirewallICMPPolicy",
"OBJECT-TYPE",
"SYNTAX",
"INTEGER",
"{",
"drop",
"(",
"1",
")",
",",
"ping",
"(",
"2",
")",
",",
"all",
"(",
"3",
")",
"}",
"ACCESS",
"read-write",
"STATUS",
"mandatory",
"DESCRIPTION",
"\"Allow incoming ICMP frames to the hmSec itself (router modes only): drop: default, ping: allow incoming ICMP echo request (required to answer ping), all: allow all incoming ICMP request to reach the TCP stack. Note: ICMP packets related to established connections are handled by the connection tracking. This setting is used for unrelated ICMP traffic.\"",
"::=",
"{",
"hmSecFirewallExtended",
"11",
"}"
],
"syntax_tree": [
[
"SimpleSyntax",
"INTEGER",
[
"enumSpec",
[
[
"drop",
1
],
[
"ping",
2
],
[
"all",
3
]
]
]
],
null,
[
"MaxAccessPart",
"read-write"
],
[
"Status",
"mandatory"
],
[
"DESCRIPTION",
"Allow incoming ICMP frames to the hmSec itself (router modes only): drop: default, ping: allow incoming ICMP echo request (required to answer ping), all: allow all incoming ICMP request to reach the TCP stack. Note: ICMP packets related to established connections are handled by the connection tracking. This setting is used for unrelated ICMP traffic."
],
null,
null,
null,
null
]
}Vendor MIB copy from the Observium Community archive. Hirschmann support.
Module: HmSecurityGateway-MIB
See published definition above
{'RFC-1212': ['OBJECT-TYPE'], 'RFC-1215': ['TRAP-TYPE'], 'SNMPv2-TC': ['RowStatus', 'TruthValue', 'MacAddress'], 'RFC1155-SMI': ['enterprises'], 'RFC1213-MIB': ['DisplayString']}Related source files and packages:
Registration
| OID | Name | Direct children | Descendants | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.248.51.2.5.1 | hmSecFirewallIPConntrackMax | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.2 | hmSecFirewallIPSynfloodLimitInt | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.3 | hmSecFirewallIPSynfloodLimitExt | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.4 | hmSecFirewallICMPLimitInt | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.5 | hmSecFirewallICMPLimitExt | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.6 | hmSecFirewallEnableConntrackFTP | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.7 | hmSecFirewallConntrackIRC | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.8 | hmSecFirewallConntrackPPTP | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.9 | hmSecFirewallARPLimitInt | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.10 | hmSecFirewallARPLimitExt | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.12 | hmSecFirewallConntrackH323 | 0 | 0 | |
| 1.3.6.1.4.1.248.51.2.5.13 | hmSecFirewallIpUncleanMatch | 0 | 0 |