Monitoring over Site to Site VPN

If we don't monitor it out of the box, you can use the Universal Device Poller to point at an OID you are interested and monitor that way.

Is there a document that shows how to use the Universal Device Poller?

Thanks,

Mark

I wonder if this is not just a configuration issue on the Cisco equipment (ACL's, NAT, etc.)? Can you ping the inside interfaces of the routers or pixes? If you can ping them, you should be able to monitor them.

I have a site-to-site vpn between a Pix 515E and a Sonicwall TZ190 (Orion is behind the Pix). I wasn't monitoring the TZ190 until I read this thread. Once I established that I could ping the inside interface of the TZ190, I remotely configured SNMP on the unit and the added the node to Orion. Everything's working as expected.

Jay

Thanks for your response.  I am able to see the remote 1800's now but not the Pix 501's.  We are not doing split tunneling so everything goes over the tunnel.   The only SNMP configuration I have in the Pix is:

snmp-server host inside 172.16.30.19
no snmp-server location
no snmp-server contact
snmp-server community xxxxxxx
snmp-server enable traps

It must be the ACL's.  I cannot ping the inside interface and the ACL's are:

access-list NONAT permit ip 10.21.0.0 255.255.0.0 any
access-list VPNHQ permit ip 10.21.0.0 255.255.0.0 any

Thanks again!

Mark

I recently had a problem similar to this, but it was an ACL problem on the LAN interface rather than VPN acl.  Check your LAN interface ACL and remove/add appropriate entries if applicable.

Hi Mark--

There is most definitely documentation that shows how to use the UnDP. Here it is:

http://www.solarwinds.com/support/Orion/docs/OrionAdministratorGuide.pdf

Spell out Universal Device Poller.

Hope this helps.

M

You should never monitor a WAN or LAN interface IP.

You should always use a Loopback IP on all your devices for polling, NTP, Tacacs & sending SNMP traps.

Then just make sure you advertise the loopback IP's into your S2S VPN tunnel.

Thanks everyone for the responses.    I looked at this document and used it as a reference.   SolarWinds will still not add these remote Pix 501's.   The only difference between the configuration in the link below and mine is that we are not doing split tunneling.   I have tried to add them but still it will not work.   

www.cisco.com/.../products_configuration_example09186a0080094469.shtml

There's a global command statement for the Pix...something like management-access inside which allows one-to-one with your Pix and the NMS like Orion. It works along with whatever you set for your IP Address Inside x.x.x.x y.y.y.y

Good luck!

Thanks for the response.  I tried adding the management-access command and still SolarWinds will not monitor these devices.  When I go to add them, it says device not responding.   I assume that means it is not seeing it as the community name I am using is configured properly in the Pix.