SNMP through VPN?
wolfgang at lonien.de
Thu Dec 1 13:20:35 CET 2005
I have an issue, and I think it's because of my linited knowledge of
iptables. The scenario:
I want to set up monitoring using SNMP. I *can* do this from linuxbox1
to linuxbox2 and vice versa, but not from linuxbox1 to router2 (internal
interface) or from linuxbox2 to router1 (internal interface). All other
services like ICMP or TCP (ssh) work in both directions, as do SNMP
requests from the internal side to the internal interfaces of the routers.
In the firewall rules of router1, I added:
iptables -I forwarding_rule -p all -s 10.a.b.0/24 -d 192.168.x.0/24 -j
iptables -I forwarding_rule -p all -s 192.168.x.0/24 -d 10.a.b.0/24 -j
to allow all traffic in both directions. I tried the same with input and
output and as the interface ipsec+, but still no luck. I can SNMP-query
devices *behind* the routers, but not the routers themselves.
What am I doing wrong?
wjl aka Wolfgang Lonien
Key ID 0x728D9BD0 - public key available at wwwkeys.de.pgp.net
'94 Honda NTV still running on fuel -
everything else here proudly runs Debian GNU/Linux
More information about the netfilter