In my experience, pix firewalls respond to only limited
snmp queries. If you check the object info you might see
that the oid is something odd like 1.3.6.1.4.1.0, ie no vendor
digit. So it responds to enough snmp to let Netview know that
it is snmp-capable but that's it. It won't tell you about the
interface table, address table, etc. I suspect that you will need
to configure the pix to allow snmp traffic to flow to and from your
management station, if you are using it for your default gateway.
Cordially,
Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
(248) 552-4968 Voicemail, Fax, Pager
---------------------- Forwarded by Leslie Clark/Southfield/IBM on 05/20/99
10:04 PM ---------------------------
Hal Dorsman <hdorsman@BLACKFOOT.NET> on 05/20/99 02:40:39 PM
Please respond to Discussion of IBM NetView and POLYCENTER Manager on NetView
<NV-L@UCSBVM.UCSB.EDU>
To: NV-L@UCSBVM.UCSB.EDU
cc: (bcc: Leslie Clark/Southfield/IBM)
Subject: isRouter/isIPRouter
I have just started up a new implementation of Netview 5.1 on AIX 4.3.
The site is firewalled by a Cisco PIX. Upon autodiscovery Netview
found the PIX, but is came up as isRouter=false, and isIPRouter=false.
Apparently, because of this, Netview is not looking any further for any
routes beyond the PIX. The PIX is routing fine, I can ping and telnet
through it, the inside interface of the PIX is my default gateway on my
Netview station. Can anybody tell me what parameter Netview is looking
at to determine router=false, and how can I tell Netview that the PIX is
in fact a router, and that I want to manage the external networks?
Thanks.
Hal
Hal Dorsman
Data Network Engineer
Blackfoot Telephone Cooperative
Missoula, Montana, USA
hdorsman@blackfoot.net
(406) 541-5151
|