SNMP over IPSec Tunnel

mettleradmin · ‎05-22-2003

I have configured a site-2-site VPN Tunnel using PIX'es... The VPN tunnel is working fine... the problem now is that, I want to monitor peer PIX by using SNMP... but it does not work.. the monitoring server is in inside interface of the other PIX.. how can I make that working?

m.rainer · ‎05-23-2003

Hi,

The PIX is not able to send its own traffic over an tunnel that is terminated on the pix itself! Neither SNMP, telnet, syslog... may work.

An IOS Router is able to do so....

Hope that helps.

Markus

mostiguy · ‎05-23-2003

If you are running pix os 6.3, you can use the new management-access command to designate the inside int as a mgmt access interface when you are using IPSec tunnels (you are) . This allows you to have telnet, https, SNMP, ping, PDM and SSH access to that interface.

management-access inside