I have a central SNMP server (Solar Winds Orion Network performance monitor) installed in my co-location and it's able to retrieve SNMP data from a Linux server in the branch site (after port forwarding udp 161 to that linux box and configuring snmp on that) .... Now there are other devices in that branch network (PCs, print servers, etc) and I want all that SNMP data on my main server in the co-location ! How can I achieve that ?
What I'm thinking is that all devices should send their SNMP data (or traps) to this linux server on the branch site which is already talking to my main SNMP server .... And then my SNMP server should be able to retrieve the data for all my SNMP clients .... ?????? Is this practically possible !
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
uetian 1707 : I guess you misunderstood the question; you gave me generic info tht i already know ...
c01000100: Yes, I tried port forwarding rules on the router but here is a funny behavior i observed with Orion Net. Performance monitor ... It detects only one device at a time (the last one i search thru discovery) .. Say, if I defined a port forwarding rule for 2 servers in that network, It would detect only one of those two (and always detects the last one) ... It would stop monitoring the first one as soon as I monitor any other server in that network ..
noci: Absolutely right, but ive a DMVPN tunnel architecture setup that only supports a few handful of cisco branch sites i have ... Majority of the branches are still on billion/draytek routers ... I could setup IpSec but then for 200 branches, it would be a total mess of the configuration on my VPN Hub Router ...
you will have to do some configuration over all anyway..., make it simple and network, only in that way you wont configure a lot of things that need to be undone (or are nearly impossible te replace) later on.
Consider 200+ * Nequipment special cases to be configered against tunneling where you need 200+ tunnels and a straight forward routable network.
The configuration is on access routers at remote sites as well as in your central monitor equipment. (& Documentation).
Hi Noci,
going back to the port forwarding thing you mentioned, thats what am trying to implements...Now this is the way its currently setup
Wireless Access Point <----> Linux Server (PXE) <----> Router <----> Internet
Am interested in monitoring Wireless access point .... Now I've defined port forwarding rule on router to forward any traffic on port 5961 to port 1611 of Linux Server and right now trying to define a port forwarding rule (using ip tables) to forward traffic of UDP 1161 on Linux Server to port 161 of Wireless access point ... In other words, Double port forwarding rules ....
It works fine if I do single port forwarding from Router to Linux and then can monitor the Linux Server but I want to monitor the wireless access point....
I'm looking for a port forwarding rule on this Linux server that would forward all traffic on port 1161 to port 161 to WAP...using iptables ?
All on one line...
---8<---
iptables -t nat -A PREROUTING -i {internetethadapter} -o {ethernetadaptertoWAP} -p udp --dport 1161 -j DNAT --to-destination {WAPaddress}:161
iptables -t nat -A PREROUTING -i {internetethadapter} -o {ethernetadaptertoWAP} -p tcp --dport 1161 -j DNAT --to-destination {WAPaddress}:161
---8<---
You have to fill in the specifics of the items between {..} marks.
You at least need the udp rule, and maybe sometimes the tcp rule.
Also you need to filter for traffic that originates from your central office. 4-lines:
---8<---
iptables -t filter -A FORWARD -p udp -s {yourcentralIP} -o {WAPaddress} --dport 161 -j ACCEPT
iptables -t filter -A FORWARD -p udp --dport 161 -j DROP
iptables t filter -A FORWARD -p tcp -s {yourcentralIP} -o {WAPaddress} --dport 161 -j ACCEPT
iptables -t filter -A FORWARD -p tcp --dport 161 -j DROP
---8<---
ip_forward needs to be enabled:
(1 line)
---8<---
echo "1" >/proc/sys/net/ipv4/ip_forw
---8<---
Mostly there is some sysfs file that sets thisup
that depends, if you want to experiment just on the console. You might need a rulenumber after the chanin (INPUT,FORWARD...) name to add them to the right spot.
if you are satisfied with its working you need to add them to the iptables start file.
The location of that file differs from distro to distro.
CENTOS/RHEL parks it in /etc/sysconfig/iptables
Gentoo in /var/lib/iptables/rules-sa
The script that relalises the tables is mostly called: /etc/init.d/iptables
in that script is a iptables-restore <'somefile' , somefile is the iptables configuration.
Business Accounts
Answer for Membership
by: uetian1707Posted on 2009-08-18 at 23:04:02ID: 25129940
Hi,
While monitoring your infrastructure using SNMP protocol there are two methods.
1- Using SNMP Queries
2- Using SNMP Traps
Using SNMP queries, your Orion NPM can query all the servers/printers or any other devices which support SNMP and are accessible to your NPM Server. For traps you can configure all the devices to send any significant event to your NPM.