Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Monitor Servers through NAT

I'm searching for ideas or people who have done this. We're looking at the possibility of monitoring servers that exist on an internal foreign network. Has anyone successfully monitored node statistics through a firewall on a server that doesn't have a direct external IP? If so, how were you able to accomplish this? I'm thinking our only option may be a proxy of sorts that forwards information over to Orion in some fashion...or if I can use trap messages to track statistics. I know other systems use an agent-based design, but I also know this doesn't really exist for SNMP. As you can tell, I'm just trying to at least brainstorm possible options.

I appreciate any help you're able to provide. Thank you.

Find more posts tagged with

network_performance_monitor

SNMP

nat

Accepted answers

All comments

markvl

Jason,

We are monitoring 100+ routers and switches which have a fixed NAT address. So each device is pingable and SNMP-pollable from inside our management network through its NAT address.

The only problem we ran into is that doing a discovery of multiple devices (IP range) didn't work. Adding a single node at the time went OK. TechSupport are aware of this problem and gave us a bypass.

As far as I can tell there are no issues with the monitoring itself. All statistics are collected and reported normally.

Hope this helps,

Mark

Edit: I overlooked the trap part. I have no idea of Orion can handle traps with a NAT address in the header being different from the address in the payload, so unfortunately I can't help you there.

aLTeReGo

We handled the problem by configuring a site-to-site VPN with the edge devices doing NAT. This allowed us to break the NAT and poll the devices behind the NAT directly. It's worked very well for us.

jason.clark

Thanks for the replies. We've explored the VPN option a bit. We're looking for the simplest option, for obvious reasons, but I think this might be the route to go. I appreciate the responses; let me know if anyone has any other ideas. Thanks.