|
hi there! be sure that in netmon.seed the firewall is SNMP managed only. also you have to be sure that the other two addresses are not polled hope this help Sincerely Yours / al Dvs.
NetView 7.1.3 with Fixpack 3 on Solaris 8 system. I am trying to monitor a firewall for status. The firewall is a gauntlet firewall-1 running on a solaris box using netSNMP 5.1.1 as its agent. SNMP has been opened between NetView and the firewall and snmpwalk runs correctly. The firewall has 3 interfaces only 1 of which is accessible from the NetView system. I place the firewall as unmanaged and then I manage it. The following shows up in the trapd.log file: 1095384180 7 Fri Sep 17 11:23:00 2004 firewall_name I Node managed. 1095384180 4 Fri Sep 17 11:23:00 2004 firewall_name N SNMP Address Changed to "10.10.10.142" 1095384180 7 Fri Sep 17 11:23:00 2004 firewall_name I Interface qfe1 managed. 1095384180 7 Fri Sep 17 11:23:00 2004 firewall_name I Interface eri0 managed. 1095384180 7 Fri Sep 17 11:23:00 2004 firewall_name I Interface qfe0 managed. 1095384188 4 Fri Sep 17 11:23:08 2004 firewall_name N SNMP Address Changed to "192.168.96.172" 1095384188 3 Fri Sep 17 11:23:08 2004 firewall_name N Interface eri0 down. 1095384188 3 Fri Sep 17 11:23:08 2004 firewall_name N Interface qfe1 down. 1095384188 3 Fri Sep 17 11:23:08 2004 firewall_name N Interface qfe0 down. 1095384188 3 Fri Sep 17 11:23:08 2004 firewall_name N Router Down. I have already set the flag in netmon.conf to ignore the SNMP address coming from the firewall. The 10.10 address is the one reachable by netview. The firewall has (2) 192.168 addresses that is not reachable at all. What happens is that everytime I manage the router, it automatically becomes down in NetView even though I can reach it via SNMP. Also, a funny thing is that in the next poll cycle, NetView will see that the firewall is up and will then proceed to bring the whole router up. Then the next poll cycle happens and I think NetView then detects that the 10.10 interface is down again and will mark the whole router as so. I am reasonably certain that the problem lies in the SNMP agent as I am monitoring several firewalls this way and most of them work. I am hesitant to forward this to Tivoli support as it might be an SNMP agent problem and NetView is only working as expected. Take note that I do not manage the firewalls directly and their is another firewall team responsible for them. Any ideas would be much appreciated. cheers, Chaz Vidal EDS Australia |