This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

SNMP open ports on the firewall

sroee1 over 15 years ago

HI,

i installed the Orion and the toolset behind a firewall, i need to open ports for the Orion, and for the Toolset, can you please assist with that ? what are the ports i need to open on my firewall in order to use all the featurs??

thanks

Roee

0 sroee1 over 15 years ago

can any one help with that?
thanks
Roee
Cancel
Vote Up 0 Vote Down

Cancel
0 kampmalm over 15 years ago in reply to sroee1

You need to open udp/161/snmp) from your Orion-server to all your devices, and udp/162(snmp-trap) from your devices to your Orion-server.
Then you also need to open for icmp in both directions.
For the toolset to work you need to open tcp/23(telnet) and/or tcp/22(ssh) from Orion-server to your devices.
Regards
Paul
Cancel
Vote Up 0 Vote Down

Cancel
0 sroee1 over 15 years ago in reply to kampmalm

thank you for your reply.
i opened the ports 161 and 162, but it is not working.the icmp is working well, it seems like the orion using differnt ports for snmp , and also the toolset- for every toll it is a different port.
the orion and the toolset are installed on the server that has ghost all firewall.
it is look like it is using other ports...like 4664 for gauge, 135,445,1053 and a lot more... is there a list of the ports i need to open ?
thnaks
ROee
Cancel
Vote Up 0 Vote Down

Cancel
0 BryanBecker over 15 years ago in reply to sroee1

SNMP is standard UDP161 (Read) and UDP162 (Trap). You rules should be :
permit udp <your orion server> <your devices being polled> eq snmp
That works for a stateful firewall....ACLs are a different story if you use a router. You need to create the reserse permit.
BB
Cancel
Vote Up 0 Vote Down

Cancel
0 Network_Guru over 15 years ago in reply to BryanBecker

Of course you require port 80 (or 443) opened to your Orion server from the Web clients access the Orion web page.
You also must open UDP 514 from your devices to Orion for Syslog.
DNS (UDP 53) might be another port required, if there is no DMC or DNS server in the same network as your server.
Where is your DB server located? You may require ports opened for that as well.
The other ports you are seeing are Windows ports which are not required.
Cancel
Vote Up 0 Vote Down

Cancel
0 troiken over 12 years ago in reply to Network_Guru

Currently I have a computer behind a FW that I asked to enable orion ip source, ip UDPremote host 161. The firewall shows hits, but the figure does not come debug snmprequest.
Cancel
Vote Up 0 Vote Down

Cancel
0 sshuang68 over 12 years ago in reply to Network_Guru

If you got NetFlow setup up you need to open that port too.
Cancel
Vote Up 0 Vote Down

Cancel
0 mark_wiggans over 12 years ago in reply to sshuang68

There is a document that lists what ports are used-

http://www.solarwinds.com/support/Orion/docs/SolarWindsPortRequirements.pdf
Cancel
Vote Up 0 Vote Down

Cancel
0 troiken over 12 years ago in reply to mark_wiggans

Active el ICMP y llega OK, pero SNMP sigue sin funcionar, tiene que ser bidireccional el permit?
Cancel
Vote Up 0 Vote Down

Cancel
0 troiken over 12 years ago in reply to troiken

Enable ICMP and arrives OK, but SNMP does not work, has to be bidirectional permit?
Cancel
Vote Up 0 Vote Down

Cancel