topic Re: SNMP Polling of FWSM Passive Mate in Network Security

SNMP Polling of FWSM Passive Mate

bradleyordner — Mon, 11 Mar 2019 17:23:23 GMT

Hi,

We have two 6513's with a FWSM in each. They are currently in Active Passive Mode so they share the same config. Is there anyway to poll the passive mate via SNMP for Serial number etc?

Thanks

Re: SNMP Polling of FWSM Passive Mate

Jennifer Halim — Fri, 19 Mar 2010 03:40:35 GMT

The standby FWSM normally has ip address as well. You should be able to poll the standby FWSM if you can poll the active FWSM for the same information.

Re: SNMP Polling of FWSM Passive Mate

bradleyordner — Fri, 19 Mar 2010 03:54:49 GMT

Hi,

Thanks for the reply. The standby shares the same outside address that we use for polling on the active unit?

Brad

Re: SNMP Polling of FWSM Passive Mate

Jennifer Halim — Fri, 19 Mar 2010 04:34:29 GMT

There should be different ip address assigned to the standby fwsm.

If you do: "sh run interface", from the output, you should see 2 ip addresses per interface. The second ip address would be the one assigned to the standby fwsm.

For example:

interface vlan 10

ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2

In the above case, 1.1.1.2 is the standby ip address.

Re: SNMP Polling of FWSM Passive Mate

bradleyordner — Fri, 19 Mar 2010 04:55:07 GMT

ok so i will have to break the failover config first and apply -

Active Unit - 10.0.0.101 255.255.255.0 standby 10.0.0.100

Standby Unit - 10.0.0.102. 255.255.255.0 standby 10.0.0.100

Is the standby like a virtual interface?

Thanks

Brad

Re: SNMP Polling of FWSM Passive Mate

Jennifer Halim — Fri, 19 Mar 2010 04:59:16 GMT

No, no..

For FWSM failover Active/Standby configuration, there will only be 2 ip addresses per interface, 1 active ip address and 1 standby ip address.

Configuration just needs to be configured on the active fwsm, and it will be automatically replicated to the standby fwsm if failover is configured.

Here is the failover documentation on FWSM for your reference:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/fail_f.html

Re: SNMP Polling of FWSM Passive Mate

bradleyordner — Fri, 19 Mar 2010 05:06:20 GMT

ah yes i just got it after reading a second time ha ha.

Thanks for your help looks good now.

Brad

Re: SNMP Polling of FWSM Passive Mate

Jennifer Halim — Fri, 19 Mar 2010 05:08:23 GMT

Cheers. Thanks for your update.