Nokia Appliance Manger

[Fulvio]

Hi all,

I didn't know where to post this and decided on this section as Appliance Manager is a reporting software, which I am evaluating.

I have configured SNMP using voyager and can see the appliances (nokia ip380 IPSO 4) on Appliance Manager.

I have enabled SNMP on the firewalls cpconfig command, option 2, but I can't see the checkpoint application (CP NGX R60).

If I drill down one of the appliances at Checpoint details it says:
No Check Point Firewall found on appliance, or CP SNMPd extension is disabled.

To collect the SNMP info of the appliances I had to configure SNMP protocol to be part of myreadcommunity read community, but how do I do this with SNMP on the firewalls? Also the SNMP port for the appliances is 161 do I use a different port for firewalls?

How can I check that SNMPd is working properly on the firewalls?
I can see (using SmartViewTracker) collection of snmp information on the appliances but can't see any drop/accept regarding the firewalls.

Any help is much appriciated.

Fulvio

Anything else I should know about?

[northlandboy]

Nokia SNMPD should proxy through to the Check Point SNMPD.

Is the Check Point snmpd running? Is it listening on port 262?

What happens if you try querying it with snmpwalk on the firewall itself?

[cciesec2006]

Checkpoint snmpd runs on udp port 260, NOT 262.

[cciesec2006]

do this directly on the Nokia box and see if you get a responds:

snmpwalk -p 260 127.0.0.1 public .1.3.6.1.4.1.2620

do NOT forget to run cpconfig and activate the checkpoint snmpd daemon.
You have to perform "cpstop;cpstart" or even reboot for checkpoitn snmpd
daemon to tak effect.

[northlandboy]

Thanks for the correction.

You don't have to do a cpstop;cpstart though - after running cpconfig, you can just launch the snmpd without doing a restart. $CPDIR/bin/cpsnmpd -p 260, or something like that. Handy if you don't want to do a full restart.

[mmuessig]

Hi there,
i tried (and checked) all the things i found here!

If i try to start checkpiont snmpd via

snmpd -p 260 i get the following errormessage:

<host>[admin]# ps aux|grep snmp
root 1618 0.0 0.8 4172 4040 ?? Ss 2:48PM 0:02.15 /bin/snmpd -f
<host>[admin]# cpsnmpd -p 260
Couldn't find mib file
Mib not initialized. Exiting.
Bad object identifier: .1.3.6.1.6.3.3.1.3.0.0.0.0.1

Error installing initial noAuth/noPriv parties, exiting

<host>[admin]#


Any ideas?
Thanks in advance,
Markus Muessig