[mrtg] Re: PIX

[Joseph Pierini]

With the kindest of regards, I disagree. I have MRTG monitoring all my Cisco
PIX firewalls via the outside interface. Add the following line to your PIX
config:

snmp-server host outside xxx.xxx.xxx.xxx

where xxx.xxx.xxx.xxx is the IP address of your MRTG server. Ensure that
your allow SNMP through the firewall protecting your MRTG server.

Joseph Pierini


-----Original Message-----
From: Keith E Johnson [mailto:kj at sunclipse.com] 
Sent: Friday, June 18, 2004 10:44 AM
To: 'FabioAlKas at aol.com'; 'mrtg at list.ee.ethz.ch'
Subject: [mrtg] Re: PIX


The PIX will not respond to requests on the outside interface unless they
are encrypted. SNMP & telnet need to be encapsulated in an IPsec tunnel. But
ssh will work without the IPsec tunnel since it is already encrypted.

Keith Johnson 
LAN Administrator 
Amcor Sunclipse North America 
6600 Valley View Street, Buena Park, CA 90620 
Voice: 714.562.6179 Fax: 714.562.2036 
Email: keith.johnson at sunclipse.com 

-----Original Message-----
From: FabioAlKas at aol.com [mailto:FabioAlKas at aol.com] 
Sent: Friday, June 18, 2004 10:30 AM
To: mrtg at list.ee.ethz.ch
Subject: [mrtg] PIX

Hi..guys,
I´m trying to setup the MRTG to get information from the PIX firewall, and 
the pix is configured for snmp, the host ip is correct on pix, and public
string 
too.

But i still got the error no response received.

I´m trying to connect through the outside interface, and the ACL have a 
permit line for snmp.

Any help will be apprecieted.

Thanks and Best Regards

================================================
Fabio Al kas
ICNET Network Coordinator
Infrastructure & IT 
Ph.:55 11 2191 5902
Mobile: 55 11 9229 7981 
America OnLine - Brazil

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi