05-07-2019 01:26 AM - edited 02-21-2020 09:38 PM
Hi!
We have IPSec tunnel between two sites and I want to monitor the Site B ASA Interface and I have configured the snmp on cisco Asa. The issue is that I dont have any management interface and I tried snmp on both inside and outside for testing but I can see the request coming to Cisco Asa on port 161 "Build inobut UDP connection" for Otuside ...
All the interested traffic is allowed between two sites.
Monitoring server--- Site A IPSEC ------------------------ Site B IPsec Oustside Cisco Asa interface to be monitored.
I am using Inside interface to snmp pull. Inside interface contains the IPaddress 192.168.1.25.
Any help with this?
Thanks
05-07-2019 02:17 AM
Hi there,
Have you specified the snmp server on the ASA:
! snmp-server host OUTSIDE 192.168.1.25 community <community_string> !
cheers,
Seb.
05-07-2019 04:37 AM - edited 05-07-2019 04:39 AM
192.168.1.25 is Cisco ASA inside IP
I have this command
snmp-server host outside 10.120.1.2 community xxxx
10.120.1.2 is my monitoring server which is located on site A
I even tried from my machine with IP 10.120.1.40 and run the visual snmp but getting Request Time out
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide