Fawad:
It appears to be that the firewall is blocking port 161 UDP
from server 1 to the router.... Have you checked on that?
Anyway, you must be certain that the fw lets port 161 to go and to come
fbetween the server 1 and the router. It is recommened that you also let
port UDP 162 (traps) pass from the router to server 1.
You say that nmdemandpoll succeeds, and that is not false
because it could ping the router.... but it couldn't reach it by SNMP (watch
nmdemandpoll output closely and it should say SNMP timed out or something
like that"). The proof is that it didn't recognize it as a Cisco Router, as the
server 2 did. The ovobjprint you show says that. Server2 does not have any
problem due to being on the same subnet.
I'm pretty sure that is a Firewall issue, the proof is that
(when using the correct community) snmpwalk/snmpget does not respond. At least
you know the ports to tell to the fw people....(161,162)...
Regards,
Federico
Vidal IBM Certified Deployment
Professional Tecsystem S.R.L. e-mail:
fvidal AT tecsystem.com DOT ar Tel: (5411)-4814-2770
ext. 120
Netview 7.1.3 on AIX 4.3.3
Nmdemandpoll and ping are successful from the
Netview server (server1) to a router, but snmpwalk fails. Router is behind a
firewall. All snmp parameters are set correctly on the router, including the
access list. Another Netview server (server2) sitting on the same subnet as
the router is able to snmpwalk the router fine.
Ovobjprint on the router from server1 shows (among
other things):
14 OVW Maps Exists 1
15 OVW Maps Managed 1
57 SNMPAgent Unset(0)
82 IP Status Normal(2)
85 isIPRouter FALSE
112 vendor Unset(0)
124 isNode TRUE 126 isComputer TRUE 127 isConnector FALSE 128 isBridge FALSE 129 isRouter FALSE
[notice the SNMP Agent Unset(0) and isRouter FALSE
fields]
Ovobjprint on the router from server2 shows (among
other things):
14 OVW Maps Exists 1
15 OVW Maps Managed 1
57 SNMPAgent Cisco
Router(3) 82 IP Status
Normal(2) 85 isIPRouter
TRUE 112 vendor cisco
Systems(12) 124 isNode
TRUE 126 isComputer
TRUE 127 isConnector
TRUE 128 isBridge
FALSE 129 isRouter
TRUE
Before I go jumping on the firewall people, is
there something I can try to ensure it is a firewall issue?
Cheers,
Fawad Qureshi RSIS - DNE 410-965-4413
|