topic ASA SNMP failure in Network Security

ASA SNMP failure

sistemaspcsnet — Mon, 11 Mar 2019 23:26:14 GMT

Hello we have two ASA (ASA2) with 8.3 version and ASA 7.2 (ASA1) , we have SNMP service active on ASA2 with 8.3 ASA version.

Usually we do SNMP request from devices behind NAT on the ASA1 to the ASA2 SNMP service , two weeks ago suddenly we could not do request from devices behind NAT.

We check process (Sh process) from ASA2 and SNMP is running, we run "no snmp server" , and we reconfigure it on ASA2, ACLs to access SNMP seems well, and shun table seems ok too, to finish we check with packet tracer from ASA1 to ASA2 in ASA2 wizard and it seems well.

We check SNMP UDP request from ASA1 to ASA2 in ASA1 wizard with packet tracer and it seems OK.

Are there any automatic traffic rule ACL on ASA to protect to from multiple request ?

Any idea ?

Thanks

ASA SNMP failure

Shone_Aleksey — Wed, 04 Jul 2012 13:35:49 GMT

Please, attach configuration files to topic.

Your snmp-client on host that sits behind inside interface of ASA1 and you monitor ASA2 state? Snmp-client don't recieve response from ASA2? What wiresharck displays on host, when requests happen? Does any packed recieved/transmitted?

ASA SNMP failure

sistemaspcsnet — Thu, 05 Jul 2012 06:31:01 GMT

Hello, we do a packet trace in the two ASA1 and ASA2 on outside interface which is the interface where we have SNMP configuration.

We can see SNMP packets going out from ASA1 in the outside interface to ASA2 , but we can see incomming packets in ASA2 in the outside interface.

They are connected Internet, we don´t know what is between ASA1 an ASA2 (internet routers)

Thanks

ASA SNMP failure

Shone_Aleksey — Thu, 05 Jul 2012 12:09:32 GMT

Ок

Maybe ISP filter your SNMP-packets, if you don't recieving they on ASA2's outside interface.

ASA SNMP failure

sistemaspcsnet — Fri, 06 Jul 2012 08:12:56 GMT

May be .... it is unusual with our ISP, but, may be some IPS or something like this ... I´m going to contact

ASA SNMP failure

sistemaspcsnet — Fri, 06 Jul 2012 08:27:08 GMT

Ok, they say that there is not any problem :S. I dont have more ideas about this :S.

Only restart ASA2, may be SNMP service isn´t working propertly.