also... just for curosity sake, what is the ip/subnet configured oninterface??
Main Topics
Browse All TopicsHi all,
I am trying to add a new SNMP host to a PIX so that I can use MRTG (or others) to monitor the volume of traffic.
What happens is as follows:
fw01(config)# snmp-server host inside 192.168.1.199 poll community public
Error : IP and subnetmask form invalid pair indicating broadcast or network address
If I try it with a different IP address (from same /24 subnet), it works, eg:
fw01(config)# snmp-server host inside 192.168.1.20 poll community public
This works fine.
The subnet I am trying to add the polling server from is a remote subnet, so it isn't listed on any of the interfaces of the PIX. Why would I get the error from one IP address and not another ??
Just out of interest I tried 192.168.1.200 and that failed as well (same error as above), but if I try .198 or .201 they both work. This suggests to me that the PIX is doing something strange with the subnetting and deciding that the IP address is invalid, but I can't see how/why it would do this.
I'd prefer not to have to change the IP address of the monitoring PC I have setup just for this PIX.
Version of PIX is 7.0.4 and its a 515E.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Yes, there are proper routes to the subnet in question. I can ping the device I am trying to add as an SNMP host.
Interfaces looks like this:
interface Ethernet0
nameif outside
security-level 0
ip address x.y.242.50 255.255.255.248
!
interface Ethernet1
nameif inside
security-level 100
ip address 10.154.132.2 255.255.255.248
!
interface Ethernet2
shutdown
nameif intf2
security-level 4
no ip address
route outside 0.0.0.0 0.0.0.0 x.y.242.49 1
route inside 192.168.100.0 255.255.255.0 10.154.132.1 1
route inside 10.0.0.0 255.0.0.0 10.154.132.1 1
route inside 192.168.1.0 255.255.255.0 10.154.132.1 1
I've found this is a known bug:
http://www.cisco.com/cgi-b
and will follow the suggestions of either upgrading or changing the IP address of the SNMP server.
Business Accounts
Answer for Membership
by: charan_jeetsinghPosted on 2007-05-08 at 01:45:02ID: 19048338
well there doesnt seems to be anything wrong with the command. Are you having proper routes for your remote subnet?