«

Hi

I have big problems trying to get SNMP info through a PIX firewall.

At our LAN segment, I have setup a Linux/MRTG PC, which I want to read info
from our Internet router,
placed at the external interface of our PIX:
When I try to connect to the router from the MRTG PC, I got nothing.
I have no problems getting info from switches etc., as long as they are
placed at
the same network as the MRTG PC.

What am I doing wrong ?

snmp-server host inside 192.168.15.208 poll



"Brian P." <> wrote in message
news:Xns96AD893B53854nospamthankscom@208.49.80.188 ...
> Hi
>
> I have big problems trying to get SNMP info through a PIX firewall.
>
> At our LAN segment, I have setup a Linux/MRTG PC, which I want to read
> info
> from our Internet router,
> placed at the external interface of our PIX:
> When I try to connect to the router from the MRTG PC, I got nothing.
> I have no problems getting info from switches etc., as long as they are
> placed at
> the same network as the MRTG PC.
>
> What am I doing wrong ?
>

access-list outbound permit tcp host 192.168.15.208 any
snmp-server host inside 192.168.15.208 poll

sorry forgot one-line

where 192.168.15.208 is your inside MRTG PC



"Brian P." <> wrote in message
news:Xns96AD893B53854nospamthankscom@208.49.80.188 ...
> Hi
>
> I have big problems trying to get SNMP info through a PIX firewall.
>
> At our LAN segment, I have setup a Linux/MRTG PC, which I want to read
> info
> from our Internet router,
> placed at the external interface of our PIX:
> When I try to connect to the router from the MRTG PC, I got nothing.
> I have no problems getting info from switches etc., as long as they are
> placed at
> the same network as the MRTG PC.
>
> What am I doing wrong ?
>

I would suspect that you have permitted the inside IP address to poll,
but the PIX is translating it to a public IP address. If possible, map
your graphing server to an open IP address and allow this in your list.

Wil
my 3¢


Brian P. wrote:
> Hi
>
> I have big problems trying to get SNMP info through a PIX firewall.
>
> At our LAN segment, I have setup a Linux/MRTG PC, which I want to read info
> from our Internet router,
> placed at the external interface of our PIX:
> When I try to connect to the router from the MRTG PC, I got nothing.
> I have no problems getting info from switches etc., as long as they are
> placed at
> the same network as the MRTG PC.
>
> What am I doing wrong ?
>