[mrtg] Re: Cisco PIX 515E

[Alan Rader]

I may try that this weekend.  We have an alternate T1 with a PIX on it
and it is working for me.  The differences are:

Works on my 515
Can't get snmp info on my 525.
Since the 525 is our main firewall, it is more secure.  So it may just
be an issue with finding out what ACLs and such may be preventing snmp
traffic, but I don't see any denying snmp on the side.

I will try the reboot first though.


-----Original Message-----
From: Rich Adamson [mailto:radamson at routers.com] 
Sent: Friday, September 19, 2003 6:28 PM
To: Alan Rader
Subject: Re: [mrtg] Re: Cisco PIX 515E



> The community string is correct and it does not start with a 
> non-alphanumeric symbol.  The ip is correct and I can ping it from the

> server that is running mrtg.  The PIX is on the same switched local 
> LAN as the server.  I have tried using Getif 2.3 with no luck from the

> mrtg server.  I have the PIX setup to use a syslog server and am 
> logging warnings and have not seen any snmp errors.  I am not sure if 
> warnings may be too high though.  I have not tried a sniffer yet.

We've seen some versions of PIX software that require a reboot after
implementing snmp and syslogging. I've not attempted to identify which
specific version, but I'd suggest reboot the PIX and test again.




--------------------------------------------
ATTENTION:  This message and all attachments are PRIVATE, and may contain
information that is CONFIDENTIAL and PRIVILEGED.  
If you received this message in error, please notify the sender by reply 
e-mail and delete the message immediately.

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi