Monitoring Sonicwall NSA 3500 in a High Availability setup

pepto

Interesting issue.

We have a Sonicwall nsa 3500 HA (high availability) setup at one of our offices.

What this means is that there are two sonicwalls connected together. However only one is active at a time for actual traffic and firewall duties. If one fails, then the other takes over

Each of the 3500's has its own IP address.

A third IP address is created by the sonicwall that is the default gateway IP address.

So:

• .1 is default gateway
• .2 is sonicwall A
• .3 is sonicwall B

NPM Discovery lists all three IP addresses as unknown - .1 can be monitored by ICMP for up/down - easy enough.

The problem is that I cannot monitor .2 or .3 for snmp or change machine type to sonicwall. I tried UDP but .2 or .3 did not show up in the list of devices to poll.

Has anyone else had this type of issue monitoring sonicwalls in the HA configuration?

I only have a week or so left on the trial and need to nail this down if we are going to purchase.

 

Thanks!

Pepto....

tjbradford

being that they are firewalls i'm guessing it's not something simple like a rule on them preventing anything from contacting them on the mentioned ip's equal to snmp traffic ? 

of course checking the community string is correct ? 

i know that most filewalls only accept requests and send logs to the address specified (security reasons) 

i'm not familiar with these model of firewalls but i know three other types that work as stated above so guess there is a good bet these will be the same. 

 

once you can snmp both then i expect there is a oid that will show if it's active or passive.