Andy and Pere,
Yeah. We have PIX MIBs. I have not yet gotten a PIX into MRTG (but I've
been busy with other stuff and have given it the time needed.).
Regarding:
> > Failover link - I would GUESS that it can be a slower speed. Connection
> > tables should be transfered across the link - not every data packet.
>
>That's my guess too.
No. The data that does get moved across the link needs the 100MB channel
as described in the documentation. It is time sensitive. I would not
recommend using a lower speed connection. I would not recommend putting
other devices on that segment (again as per the docs).
If you are real bored and have a sniffer you'll find bursts of TCP port 135
traffic on that segment.
Regards,
Brian
P.S. Cricket rocks but the amount of time effort to get it just right is
too much for me.
>Date: Thu, 21 Jun 2001 22:45:30 +0100 (BST)
>From: Pere Camps <[EMAIL PROTECTED]>
>To: "Lemke, Andy" <[EMAIL PROTECTED]>
>Cc: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>,
> [EMAIL PROTECTED]
>Subject: RE: Cisco PIX: questions
>
>Andy,
>
> > Reporting connections is possible with SNMP. I'm about to pursue that
> > myself soon. I plan to use snmpwalk / snmpget along with MRTG or rrdtool.
> > You can get the MIB from Cisco.
>
>My personal favourite is cricket. Quite a nice tool! Check it out if you
>have any complex stats needs.
>
> > Failover link - I would GUESS that it can be a slower speed. Connection
> > tables should be transfered across the link - not every data packet.
>
>That's my guess too.
>
> > I have gotten ssh to work with the PIX using DES. You need to ask for the
> > license for this though (and therefore re-load the IOS) and it is free
> > (regular 56 bit DES). The only ssh client I got to work with pure 56 bit
> > DES, however is called putty.exe (www.openssh.com - link to putty). I'm
> > pursuing 3DES at a cost.
>
>Well, at least is better than nothing.
>
>Thanks for your help,
>
>-- p.
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
