Thanks for your response, there actually isn't any VLAN or NAT going on to segregate the traffic. The reason the IP addresses are on separate NICs is only for statistics and metering (i.e. trending customer bandwidth vs. management bandwidth). The reason for this is that due to the nature of the services we provide, we are prone to being the target of DDoS attacks. I also would like to be able to specify the IP that SNMP listens on so that I can track in my database exactly which addresses I should be targeting. For some reason SNMP always just seems to pick up the first IP address on the first network card in the system. Any thoughts on that?
Main Topics
Browse All Topics





by: ShineOnPosted on 2009-10-01 at 04:55:07ID: 25467698
You have different subnets in order to segregate and properly direct the traffic to the appropriate NIC, correct? Not just VLANs or NAT redirection from an external router?
om/kb/3242 63
When you configured SNMP on this server using the SNMP service configuration dialog, did you configure security, and specify what host(s) to accept SNMP requests from? I would expect that it would listen on whatever address(es) that is/are in the subnet that the host(s) you specify is/are in. If you're doing traps, you can also specify your trap destination address(es) in that configuration tab of the SNMP control panel
I'd assume that if you want to truly segregate your traffic to a customer network and a management network, that the management network wouldn't be reachable by the default gateway associated to the customer network address(es) and would be in (a) different subnet(s) and/or vlan(s) that would not be reachable from the subnet(s)/vlan(s) associated to the client network(s), but would rather be directly accessible as part of the same subnet(s) and/or vlan(s) that the address(es) on the management network is/are in, and that would determine the listening address(es) of the service.
See this for info on configuring the SNMP service on 2003 server: http://support.microsoft.c