If you are unable to modify the firewall as Leslie indicates, you can use a
seedfile to force Netview to find a router on the other side, which should
then discover the remainder of the network. The map will show disconnected
subnets, but at least you'll be managing the network.
-----Original Message-----
From: Discussion of IBM NetView and POLYCENTER Manager on NetView
[mailto:NV-L@UCSBVM.UCSB.EDU]On Behalf Of Leslie Clark
Sent: Thursday, May 20, 1999 10:08 PM
To: NV-L@UCSBVM.UCSB.EDU
Subject: Re: isRouter/isIPRouter
In my experience, pix firewalls respond to only limited
snmp queries. If you check the object info you might see
that the oid is something odd like 1.3.6.1.4.1.0, ie no vendor
digit. So it responds to enough snmp to let Netview know that
it is snmp-capable but that's it. It won't tell you about the
interface table, address table, etc. I suspect that you will need
to configure the pix to allow snmp traffic to flow to and from your
management station, if you are using it for your default gateway.
Cordially,
Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
(248) 552-4968 Voicemail, Fax, Pager
---------------------- Forwarded by Leslie Clark/Southfield/IBM on 05/20/99
10:04 PM ---------------------------
Hal Dorsman <hdorsman@BLACKFOOT.NET> on 05/20/99 02:40:39 PM
Please respond to Discussion of IBM NetView and POLYCENTER Manager on
NetView
<NV-L@UCSBVM.UCSB.EDU>
To: NV-L@UCSBVM.UCSB.EDU
cc: (bcc: Leslie Clark/Southfield/IBM)
Subject: isRouter/isIPRouter
I have just started up a new implementation of Netview 5.1 on AIX 4.3.
The site is firewalled by a Cisco PIX. Upon autodiscovery Netview
found the PIX, but is came up as isRouter=false, and isIPRouter=false.
Apparently, because of this, Netview is not looking any further for any
routes beyond the PIX. The PIX is routing fine, I can ping and telnet
through it, the inside interface of the PIX is my default gateway on my
Netview station. Can anybody tell me what parameter Netview is looking
at to determine router=false, and how can I tell Netview that the PIX is
in fact a router, and that I want to manage the external networks?
Thanks.
Hal
Hal Dorsman
Data Network Engineer
Blackfoot Telephone Cooperative
Missoula, Montana, USA
hdorsman@blackfoot.net
(406) 541-5151
|