[mrtg] Re: MRTG and ISA server

Alvaro Luiz Maia Motta ALVAROLM at nec.com.br
Wed Oct 6 21:24:45 MEST 2004


Is the ISA server listening to udp packets on port 161?
netstat -an -p udp will show all the udp ports your box is listening.

If you find a line like the one below, and you're sure about the filters and
community name, then I would suggest you to reinstall snmp on your box.

UDP    0.0.0.0:161          *:*

HTH

-----Original Message-----
From: rglauser at areaofficeonaging.com 
[mailto:rglauser at areaofficeonaging.com] 
Sent: Wednesday, October 06, 2004 4:18 PM
To: garth.williams at acrodex.com; mrtg at list.ee.ethz.ch
Subject: [mrtg] Re: MRTG and ISA server


I have configured a packet filter allowing udp port 161 both 
ways on the ISA server and it made no difference.  

-----Original Message-----
From: Garth Williams [mailto:garth.williams at acrodex.com] 
Sent: Wednesday, October 06, 2004 12:41 PM
To: RL Glauser; mrtg at list.ee.ethz.ch
Subject: RE: [mrtg] Re: MRTG and ISA server

On ISA server, you need to configure a packet filter to allow 
UDP port 161 in and out from the internal network.

*

I tried running getif on the ISA server itself and there was no 
response at all. I suspect that it has to do with security 
settings within ISA itself, or perhaps MIB files that are incorrect.

*

Did you try to run getif (or any other snmp utility) on the 
same box (localhost or 127.0.0.1)? 

*

I have checked the SNMP service configuration. I have tested it 
with listed hosts and with "from any hosts." I have made sure 
that the xp firewall is disabled. The service is running on the 
ISA server and Getif does return some data but only identifies 
one of the three nic cards in the server. 

-----Original Message-----
From: mrtg-bounce at list.ee.ethz.ch [mailto:mrtg-bounce at list.ee.ethz.ch]
On Behalf Of William Owen
Sent: Wednesday, October 06, 2004 10:09 AM
To: mrtg at list.ee.ethz.ch
Subject: [mrtg] Re: MRTG and ISA server 

You might want to check your SNMP service configuration.  By 
default, Win2k and Win2k3 server will respond to only to hosts 
listed in the security tab (localhost by default).  If you have 
"from these hosts" selected, you MUST have your monitoring 
server listed.  Also, if you use a NetBIOS or DNS name here, 
your server must be able to resolve the name.  To alleviate 
both of these issues, you can use the "from any host" to test. 

-----Original Message-----
From: Garth Williams [mailto:garth.williams at acrodex.com]
Sent: Tuesday, October 05, 2004 5:55 PM
To: rglauser at areaofficeonaging.com; mrtg at list.ee.ethz.ch
Subject: [mrtg] Re: MRTG and ISA server 

http://www.loriotpro.com/Service&Support/How_to/InstallWXPAgent_EN.php 

* 

Neither mib walker is on a server. One is on W2K pro and the 
other XP. I am not aware of any way to place an ACL on the snmp 
service running on a server. 

* 

Is Solarwinds on another server than GetIf? 
If so, then perhaps the SNMP service on the target is set to 
allow SNMP access from the Getif server and not the SolarWindws service.


* 

Yes the solarwinds mib walker is polling on UDP port 161 and 
can successfully poll other serers. 

* 

Is your SNMP poll/walk/whatever from Solarwinds on the same UDP 
port as GetIf?  Or does it poll on another port?  Can you use 
Solarwindws to poll another server to verify settings? 

* 

I am having a problem setting up MRTG on ISA server 2000. <SNIP> 



--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi


--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi



More information about the mrtg mailing list