Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

SNMP on Internet Router

My company is using a Cisco 2811 as our Primary Internet Router and looking for a way to monitor it. Currently all traffic to this device is firewalled and SNMP is denied/blocked. Even after configuring a good community string and applying ACL's to restrict access to this device; my company's security group still has concerns, stating that this is a major vulnerability. Their recomendation is to use SNMPv3 (Not supported by Solarwinds) making it not a viable option.

We have been working on an idea of using a VPN tunnel for access to the router. We would create a tunnel from an existing VPN Concentrator to the 2811. Then route just admin and SNMP traffic through the tunnel from Solarwinds.

Has anyone ever had any experiences with doing something similar? Or have any other ideas or suggestion?

Find more posts tagged with

Accepted answers

All comments

2020

I've heard mention of SNMP v3 being supported in Orion 8....when that happens to be released though, who knows.

DannyMc

quote:Originally posted by bnoone
We have been working on an idea of using a VPN tunnel for access to the router. We would create a tunnel from an existing VPN Concentrator to the 2811. Then route just admin and SNMP traffic through the tunnel from Solarwinds.

When I first read your post I was going to recommend the same thing. I monitor several remote sites but they all have LAN-to-LAN VPN connections back to the site where Orion resides. This would probably be your easiest and most secure method that I can think of.

pmartrvr

If you have access to a Perl programmer, ask them to build you an SNMP to SNMPv3 relay. We wrote a quick perl program to accept SNMP queries on the inside network and relay the queries to the SNMPv3 host. We just created subinterfaces with internal IP's in a 1-1 relationship with the external IP to be monitored, and the relay uses information about which subint the request was received on to determine where to relay it. This was a quick and dirty answer - a more elegant application should be able to be written.