With the kindest of regards, I disagree. I have MRTG monitoring all my Cisco
PIX firewalls via the outside interface. Add the following line to your PIX
config:

snmp-server host outside xxx.xxx.xxx.xxx

where xxx.xxx.xxx.xxx is the IP address of your MRTG server. Ensure that
your allow SNMP through the firewall protecting your MRTG server.

Joseph Pierini


-----Original Message-----
From: Keith E Johnson [mailto:[EMAIL PROTECTED] 
Sent: Friday, June 18, 2004 10:44 AM
To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'
Subject: [mrtg] Re: PIX


The PIX will not respond to requests on the outside interface unless they
are encrypted. SNMP & telnet need to be encapsulated in an IPsec tunnel. But
ssh will work without the IPsec tunnel since it is already encrypted.

Keith Johnson 
LAN Administrator 
Amcor Sunclipse North America 
6600 Valley View Street, Buena Park, CA 90620 
Voice: 714.562.6179 Fax: 714.562.2036 
Email: [EMAIL PROTECTED] 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Friday, June 18, 2004 10:30 AM
To: [EMAIL PROTECTED]
Subject: [mrtg] PIX

Hi..guys,
I´m trying to setup the MRTG to get information from the PIX firewall, and 
the pix is configured for snmp, the host ip is correct on pix, and public
string 
too.

But i still got the error no response received.

I´m trying to connect through the outside interface, and the ACL have a 
permit line for snmp.

Any help will be apprecieted.

Thanks and Best Regards

================================================
Fabio Al kas
ICNET Network Coordinator
Infrastructure & IT 
Ph.:55 11 2191 5902
Mobile: 55 11 9229 7981 
America OnLine - Brazil

--
Unsubscribe mailto:[EMAIL PROTECTED]
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:[EMAIL PROTECTED]
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:[EMAIL PROTECTED]
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

Reply via email to