Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

ALLOW only SNMP through VPN

Hi All,

I need to block all ports but SNMP from our NOC to remote sites that are connected through VPN tunnels. To test this on a site, I had the firewall at the NOC's end setup as follows:

NOC/Any port -> SITE/161
NOC/Any port <- SITE/161

In words, any packet leaving NOC destined to a remote site must be destined TO port 161 and any packet destined to NOC from a remote site must be coming FROM port 161.

Everything BUT Network interface statistics seems to be working fine. Orion is getting all data about CPU, Memory and even Volumes but not Network Interfaces.

Any ideas or suggestions will be highly appreciated.

Thanks,
Vaibhav

Find more posts tagged with

Accepted answers

All comments

iunderwo

You don't say what kinds of devices you're connecting to, but it would be a good idea to make sure the software on them is up-to-date.

In addition to SNMP, you should also allow ICMP echo/echo reply to return.

// Ian Underwood - Network Engineering
// Boston Stock Exchange