CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA or CCSE One-Week Certification Training Courses with CPUG in Beautiful San Francisco!
    R70 CCSA Courses Starting (2010) 6/7, 7/12, 8/9, 10/11, 11/8, 12/6.  R70 CCSE Courses Starting (2010) 8/16.
2. CPUG CON 2010 EUROPE, the User Conference in Switzerland, September 20th-22nd, 2010!
3. Join Our CPUG Groups On LinkedIn and Facebook.  See Our Channel on YouTube.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Services
Register Projects FAQ Members List Social Groups Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 2009-06-09
Junior Member
 
Join Date: 2006-07-04
Posts: 14
Rep Power: 0
jeroen has an average reputation (10+)
Default monitor NGXR65HFA40 with SNMP trough VPN tunnel

Hi,

We have 2 NGXR65HFA40 firewalls in 2 locations. The two locations are connected via a VPN and all is working fine.
We now want to monitor the firewalls via SNMP. the monitoring server is in location A and can monitor the firewall that is in the same location. However monitoring the firewall in location B does not work. I can see the snmp traffic being encrypted and allowed in both firewalls but the FW in location B does not seem to be responding.
As a test, I have tried to monitor the FW in location B from a test monitoring server also in location B and this works. So the snmp config should be correct, the problem is just to be able to do it via the VPN.

Any help is much appreciated.

Rgds,

Jeroen
Reply With Quote
  #2 (permalink)  
Old 2009-06-09
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 2,481
Rep Power: 7
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: monitor NGXR65HFA40 with SNMP trough VPN tunnel

Is the SNMP being accepted by "B"?
Try the "inside" address of "B" and see if that works. It shouldn't make a difference but it might.
Reply With Quote
  #3 (permalink)  
Old 2009-06-10
Junior Member
 
Join Date: 2006-07-04
Posts: 14
Rep Power: 0
jeroen has an average reputation (10+)
Default Re: monitor NGXR65HFA40 with SNMP trough VPN tunnel

Hi,

Thanks for your answer. Indeed snmp is being accepted by the B side firewall.
I am trying the inside address, I have not tried the outside address yet.
Will give that a try now and report back.

Rgds,

Jeroen
Reply With Quote
  #4 (permalink)  
Old 2009-06-25
Senior Member
 
Join Date: 2008-03-15
Location: Mumbai
Posts: 108
Rep Power: 3
amol0009in_7 has an average reputation (10+)
Send a message via Yahoo to amol0009in_7
Default Re: monitor NGXR65HFA40 with SNMP trough VPN tunnel

Do you see any other logs , like spoofing ?

Have you seen whether you are getting return traffic on both firewalls ?
__________________
2007-CCNA | 2008-BCMSN(CCNP) | 2008 Dec-CCSA | 2009 Dec-CCIE_Written(next target)
Reply With Quote
Reply

Tags
snmp, vpn

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 23:37.


Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.5.1