monitor ASA5505 over site 2 site VPN tunnel

[jeroenhermans]

Hi,

We have a site to site VPN between a checkpoint and a asa5505. Everything is working fine. We would now like to monitor the asa5505 from our monitoring server which is behind the checkpoint.

I have configured the snmp community. When I check the log on the asa, I can see the request coming in from the monitoring machine and it is not being blocked. However, it is not working.

How can I fix/troubleshoot this issue?

Thanks in advance,

Jeroen

[Brandon Buffin]

Could be a routing issue. Can you ping the monitoring server from the ASA?

Brandon

[jeroenhermans]

Hi,

Thanks for your reply. I cannot ping the monitoring server from the ASA. But I don't think it is related as I cannot ping anythng from the ASA, or anything that is behnd the asa cannot ping anything that is on the internet.I beleive this to be a seperate issue as the asa by default does not allow ping.

I can also not telnet or ssh to the asa via the vpn tunnel, this is probably the same issue as the snmp one.

Rgds,

Jeroen

[Brandon Buffin]

Is the monitoring server on a subnet that the ASA has a route to? Can you allow pings temporarily to test connectivity?

Brandon