VPN 3030 on Ciscoworks

[sachinraja]

Hi guys,

Have a quick query.. I have enabled SNMP on the VPN 3030. I have to map this now to ciscoworks and another network mgt station that i have (netsmaart). I'm not able to query the VPN box through SNMP. I had tried through solarwinds too, but SNMP doesnt work.

Anything else I have to do on the VPN 3030 ?

Raj

[sstudsdahl]

You need to also add the IP addresses of the systems that will be doing SNMP queries/sets to the Acces Control List under Administration > Access Rights > Access Control List. When you add the IP address to the list, you also have to specify a group membership for the address. The group membership defines how much access is allowed from that IP address. Here is a link to the default group values and to what level of access each group is allowed.

http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/4_1/admonbk/access.htm#20841

Steve

[sachinraja]

Hi Steve,

I have already done this. i have also upgraded the cisocview package updater for vpn concentrator. still not able to query the concentrator on snmp through ciscoview or any other software. am also not able to telnet the vpn box.

Raj

[sstudsdahl · Accepted solution]

Raj,

The other thing to look at would be what filters are defined on the VPN3000 interfaces. There are two deault filters called Public and Private that are associated to the physical interfaces within the concentrator. These filters can be modified or even replaced to allow specific types of communication to the concentrator itself. You can find out what filter is applied to the interaces by looking at Configuration > Interfaces and then selecting the appropriate interface that you are trying to query.

If you are also having problems telneting into the concentrator, it sounds like a filter is blocking the access, assuming of course telnet is enabled. :)

Steve

[sachinraja]

Hi steve,

I think i missed this out.. let me check this and let you know..

Thanks

Raj