[nv-l] SNMP Traps via Cisco VRF

[Christian Frantsen <cfrantse@csc.com>]

Hi!

I have a Cisco based VPNsetup where
the routers use the global routing table to route IPSEC traffic and a customer
routing table (VRF) to handle the unencrypted traffic. 
Now I have to send SNMP traps from the
customer VRF to my Netview server, this is accomplished by configuring
the router with the following:

snmp-server hosts x.x.x.x vrf customer-vrf
community

So far this works, but all traps I get
to my netview server are malformed. Here is an example of a TTY trap, (1.1.1.1
= agent, 2.2.2.2 = Netview server)

Notice that the Netview servers IP is
inserted where the agent IP should be (along with a big bunch of crap :-))
and there looks to be some numbers missing in the OID string.
1.1.1.1.50528 > 2.2.2.2.162:  C=xxxxxxxx
Trap(35)  .1.3.6.1.4.1.9 [inetaddr len!=4]2.2.2.2.0.162.99.117.115.116.110.101.116
enterpriseSpecific[specific-trap(1)!=0] 475917428[|snmp]

This is the correct version of the same
trap
1.1.1.1.55799 > 2.2.2.2.162:  C=xxxxxxxx
Trap(35)  .1.3.6.1.4.1.9 1.1.1.1 enterpriseSpecific[specific-trap(1)!=0]
2585148274 .1.3=[|snmp]

IOS version is 12.3(6), so it's quite
new.

I searched Cisco's site but haven't
found anything useful yet.
Has anyone worked with a similar setup
and gotten this to work?


Christian Frantsen
Network Engineering Services
CSC Sweden, Jonkoping

----------------------------------------------------------------------------------------
This is a PRIVATE message. If you are not the intended recipient, please
delete without copying and kindly advise us by e-mail of the mistake in
delivery. NOTE: Regardless of content, this e-mail shall not operate to
bind CSC to any order or other contract unless pursuant to explicit written
agreement or government initiative expressly permitting the use of e-mail
for such purpose.
----------------------------------------------------------------------------------------