[mrtg] Re: Cisco PIX 515E

Fri Sep 19 22:55:02 MEST 2003

You might be able to tell what is wrong (from the PIX's perspective) by
enabling syslog, and looking at the entries regarding the traffic coming
from your MRTG machine.

If you have constant syslogs, you might find it easier to load a syslog
server on your workstation, and add it as a second syslog destination, for
troubleshooting purposes. I do this quite alot when troubleshooting with
the PIX. I run it long enough to capture what I need, then turn it off
until I need it again. Just remember to remove the second destination when
you are finished!

Jim Witherell
Network Specialist                        --Live Intentionally--
IBM @ AK Steel Corp
513.425.3483

                      "Peter P. Benac"                                                                                           
                      <ppbenac at emacolet        To:       <mrtg at list.ee.ethz.ch>                                                  
                      .com>                    cc:                                                                               
                      Sent by:                 Subject:  [mrtg] Re: Cisco PIX 515E                                               
                      mrtg-bounce at list.                                                                                          
                      ee.ethz.ch                                                                                                 

                      09/19/2003 03:54                                                                                           
                      PM                                                                                                         

OK  I assume that "community" is correct? Does the community string start
with a non-alphanumeric symbol? This is a known bug with Cisco Equipment.
The first character in the community string has to be [A-Za-z0-9]. Is the
IP
correct and is pingable from the MRTG Workstation?

Are there any Frame-Relay links between the work station and the PIX? If
there are increasing the timeout may help.

Do you have a program that can do an snmpwalk to the PIX? If so, does it
work? OR Do you have a sniffer attached to the PIX and if so does it show
the SNMP requests getting to the PIX?

Regards,
Pete
----
Peter P. Benac, CCNA
Emacolet Networking Services, Inc
Providing Systems and Network Consulting, Training, Web Hosting Services
Phone: 919-847-1740 or 866-701-2345
Web: http://www.emacolet.com
Need quick reliable Systems or Network Management advice visit
http://www.nmsusers.org

To have principles...
             First have courage.. With principles comes integrity!!!

> -----Original Message-----
> From: mrtg-bounce at list.ee.ethz.ch
> [mailto:mrtg-bounce at list.ee.ethz.ch] On Behalf Of Alan Rader
> Sent: Friday, September 19, 2003 15:32
> To: mrtg at list.ee.ethz.ch
> Subject: [mrtg] Re: Cisco PIX 515E
>
>
>
> Yes, I think I have done that part correctly.
>
> Snmp-server host inside <mrtg server> poll
> Snmp-server community <mycommunity>
>
>
[snipped]

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi