Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Server Monitoring via SNMP in NAT is not working

Hi All,

I have one server which need to be monitor by 2 different monitoring system. I have compile net-SNMP 5.5 and configured which work fine with Solarwinds (internal monitoring system in same LAN). To allow same server for monitoring in our business partner monitoring system, we have configured the site to site VPN and NAT the IP address. They are using Negios for monitoring and we are not able to monitor the server in their system. All the applications are working fine over site to site VPN which is tested by our security team, except SNMP monitoring. Any Idea, if we missed any configuration? Does SNMP work with NAT?

Any help is greatly appreciated.

Find more posts tagged with

Accepted answers

All comments

aLTeReGo

SNMP does work across NAT. In the example below no configuration changes are necessary for "NAT Firewall #1" to Poll anything that's directly accessible beyond it. However, since there is no route between 10.1.1.10 and 192.168.0.15 without going through another hide NAT firewall (NAT Firewall #2) a Port Address Translation rule must be created on "NAT Firewall #2" that allows SNMP traffic from the external interface of "NAT Firewall #1" 9.8.7.6, to be routed to the device you want monitored "192.168.0.15".

Orion Server	->	NAT Firewall #1	->	Internet	->	NAT Firewall #2	->	Monitored Device
10.1.1.10		10.1.1.1 inside interface 9.8.7.6 outside interface				4.3.2.1 outside interface 192.168.0.1 inside interface		192.168.0.15

This is just normal routing stuff and not at all specific to Orion or SNMP.

Bsulli

When you say the apps are working fine across the vpn I'm assuming running apps installed on the server you want to poll. Depending on how your customer has their snmp on the server configured it may be set to only allow certain ip addresses or ip ranges to query it. The customer would need to let you know. You can also use Nmap across the Nat to see if the snmp port is open to your polling server. If you see the port open but can't snmp poll it then probably the server isn't allowing queries from your ip address.