nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

PIX SNMP Issues

charlesdf22

We are running 6.3(3) on several PIX 515E's and can't seem to monitor them with SNMP. Ethereal is showing packets going back and forth without issue. We are running the latest and greatest version of Orion with all the hotfixes. Any ideas?

Thanks in Advance.

Find more posts tagged with

Accepted answers

All comments

jainsworth

What are your symptoms? Can you see the device at all? In order to enable snmp on a pix, you have to enable the community, and tell it what host on what interface. For instance, to set snmp string abc123 and have server server1 read it (server1 is located on the 'inside' interface), you would do the following in enable mode:

snmp-server host inside server1 community abc123

This would assume that server1 is named in the pix, otherwise you could just use the ipaddress. I am currently monitoring 2 PIX515s, but have upgraded them to 7.1(2), but have monitored using the old PIX version.

kindbro

Did you recently upgrade to Orion 8.2? If so, your firewalls were all converted to SNMP V2, and I think the PIX only supports SNMP V1. You will find that if you change one of your firewalls to SNMP V1 it fixes the problem.

link for you reference

Bret

charlesdf22

Here's what I have in the PIX.

snmp-server host inside 192.168.1.1
snmp-server host inside 192.168.2.2
snmp-server location 1
snmp-server contact 2
snmp-server community STRING
no snmp-server enable traps

It doesn't like the commands you provided.

I've also tried to make it v1 and v2 to no avail. Ping is the only thing that seems to work

SamuelB

I have a PIX 515E that is running 6.3(4) and I am able to monitor the interfaces via snmp. I am sure that it also worked when I was running 6.3(3). My snmp configuration is very similar to yours. To ask the obvious, do you have an acl configured on the PIX that might be blocking these requests?

BakerD

Here's what I have in the PIX.
snmp-server host inside 192.168.1.1
snmp-server host inside 192.168.2.2
snmp-server location 1
snmp-server contact 2
snmp-server community STRING
no snmp-server enable traps
It doesn't like the commands you provided.
I've also tried to make it v1 and v2 to no avail. Ping is the only thing that seems to work

We don't have the 515 model so not sure if this would be the same, but here is what we have

snmp-server host inside (your server ip) poll

afarmer

I have a PIX version 6.3(4) and got SNMP v1 to work also. Here is what I typed to enable it:

snmp-server host inside 192.168.1.1
snmp-server community MyCommunity

Replace the 192.168.1.1 with the IP address of server that Orion is running on. Replace MyCommunity with an SNMP community that you wish to use. You might have to get the version 6.3(4) of code if yours will not take the commands. Hope this helps.

lasher

Just use one line much easier to keep track of what has access to what.

snmp-server host inside x.x.x.x poll community string

Poll is equal to read only. With it done this way you can remove the snmp-server community MyCommunity and snmp-server host inside x.x.x.x lines. This also allows you to define different communities with different access per ip addresses or networks.

rkawell

I am having the same issue... I see packets both ways, yet Orion cannot SNMP V1 or V2 to the PIX. Here is my config...

snmp-server host inside 1.1.1.1 poll
snmp-server location colo
snmp-server contact Helpdesk
snmp-server community 123456
snmp-server enable traps

in the packet capture I see Orion poll for the sysobjectid and the sysname with the correct community string. I also see the PIX return with the sysobjectid of snmpv2-SMI::enterprises.9.1.417 and also the object identifier 2:1.3.6.1.2.1.1.5.0

Does anyone know the fix for this?

kindbro

Now that you guys are mentionig it. I am having problems adding my firewalls to Orion. I have over 500 firewalls added now, and since the upgrade I can not add a new one. It worked before the patches and now it does not. If support can jump on this it would be appreciated. If I try to add a new node using SNMP V1 it timesout saying that my community string ***** is not being detected. I hope we can get an answer.

Bret

mark_wiggans

There is a hotifix for this-

ftp.solarwinds.net/.../Orion8.1Hotfixes.zip

You will have to paste this URL into your browser-

kindbro

Mark, is this a hot fix for the PIX problem and will I have any problems?

mark_wiggans

When you open the Zip look at the README for Hotfix 3 which is in folder 2-

You should not have any trouble- many customers have applied the Hotfixes without incident.