Re: [nv-l] Netview through a firewall with NAT

[Leslie Clark <lclark@us.ibm.com>]

Of course it does. Firewalls you can make holes in to allow snmp and icmp to pass. However, if the things you are trying to monitor are natted, then the IP information in the payload doesn't match the address in the header, so snmp transactions become useless. To make it possible for Netview to manage NAT'd devices using SNMP, you need CNAT. Comprehensive Network Address Translater. It can do NATing, or it can do just the payload translation. It is fairly simple to set up for just payload translation. It is a Tivoli product, and not expensive the last I heard. 

Cordially,

Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
(248) 552-4968 Voicemail, Fax, Pager

"DePhillips, Frank" <fdephillips@McLeodUSA.com> Sent by: owner-nv-l-digest@lists.us.ibm.com 10/31/2003 03:25 PM Please respond to nv-l

To:        "'nv-l@lists.us.ibm.com'" <nv-l@lists.us.ibm.com>         cc:                 Subject:        [nv-l] Netview through a firewall with NAT

I have some devices on the external side of the firewall that need to be monitored.  My Netview machine has a NAT and can find the devices once placed in the seedfile, but after the first polling cycle they become unreachable.  Does Netview have problems working through a firewall or dealing with NAT?
 
Thanks
 
Frank DePhillips
NMS Engineer
McLeodUSA
(281) 465-1208

NOTICE: This electronic mail transmission may contain confidential information and is intended only for the person(s) named. Any use, copying or disclosure by any other person is strictly prohibited. If you have received this transmission in error, please notify the sender via e-mail.