Yes, you must be able to pass SNMP through your firewall for Netview
to be able to discover your external routers. I am not familiar with the
Cisco PIX so I cannot tell you if or how that is possible. But from you
describe, the routing is fine (you can ping) but Netview cannot get SNMP
due to the firewall filter.
>>> "Kirsten S, Campbell" <Kirsten.Campbell AT NAUTEC.CWPLC DOT COM>
08/25/98 03:26am >>>
I have a problem getting Netview to discover this new network outside
I can do MIB browse through Netview, and I can ping the routers, but I
cannot get Netview to discover the routers????!!!!!
I spoke to the people in US who have installed the Firewall (Cisco PIX),
and they have told me that they have disabled the SNMP function. My
argument is that I need this enabled. Can anyone verify this????
Thanks for your help, Kirsten
joel.gerber AT USAA DOT COM on 24-08-98 06:12:18 PM
Please respond to NV-L AT UCSBVM.ucsb DOT edu
To: NV-L AT UCSBVM.ucsb DOT edu
cc: (bcc: Kirsten Campbell/NAUTEC)
Subject: Re: NV V5 - Firewall/Routing table -Reply
We are also using NetView to manage devices that are external to our
firewall. As far as I know, NetView is not aware that address
is going on at all. It will only see the "real" IP addresses and networks.
You will need to define an address for your NetView server, as Hal
mentioned, so that the devices outside the firewall can communicate with
NetView box for things like sending traps, etc. The biggest problem we
implementing network management was that a lot of static routes had to
added. NetView needs a route to every IP subnet just so it can ping the
addresses on the router interfaces. The actual user traffic flowing
your firewall network only needs routes to get from one end to the other.
It does not need a route for every hop in between, so you will need to
more routes if you want NetView to be able to monitor every device and
From: Hal Dorsman [SMTP:DORSMANH AT SPH.HBOCVAN DOT COM]
Sent: Monday, August 24, 1998 11:41
To: NV-L AT UCSBVM.UCSB DOT EDU
Subject: NV V5 - Firewall/Routing table -Reply
Netview can handle external networks/hosts through a firewall just
Simply define a route on your Netview box to the external network
your firewall as the gateway. Define a translated address for your
Netview box on your firewall so it can be seen from the outside.
external router will have to have the address of your Netview
with your firewall as your gateway so your router will know how to
your internal Netview box. Add a rule in your firewall allowing
from your external networks to your translated address for your
Netview station. Add a rule allowing SNMP out from your Netview
your external networks.
You didn't say what firewall, but I am using Checkpoint Firewall-1
running Netview through it to monitor several remote frame-relay
sites. Works great.
Let me know if you have any problems.
Saint Patrick Hospital
Missoula, Montana, USA
>>> "Kirsten S, Campbell"
<Kirsten.Campbell AT NAUTEC.CWPLC DOT COM>
08/24/98 10:50am >>>
All (Could someone please send me an ACK if they receive this),
We are installing firewalls, and will now have to monitor
My question is: How do Netview cope with the routing tables,
are doing address translation in the Firewall??
Will Netview try and link "address translated"
the "real" objects, using the router table in the "address
Thanks for any help given.