[solved] SNMP error - PIX

[montecristo]

Hi,

I'm trying to poll usage stats on a Pix firewall. Here's my setup:

Cacti Server --- Pix 1 --- WAN --- Pix 2

Pix 2 is the device I'm having problems with. It's a Pix 515E running version 7.2. I'm polling the WAN interface. I'm already polling Pix 1 without any issues (LAN interface).

For the purpose of this test, on Pix 1 I'm allowing all traffic from the Cacti Server to Pix 2. The Cacti server is allowed to poll the WAN interface on Pix 2.

Here are the symptoms:
- When accessing the Pix2 Device menu on the Cacti admin page, I get an SNMP error message 1 time out of 3 (approximately). The rest of the time, I get incomplete SNMP information (location is missing etc...)
- When running a "SNMP-Interface statistics" verbose query, I get "+ Executing SNMP walk for list of indexes @ '.1.3.6.1.2.1.2.2.1.1' + No SNMP data returned".
- When running the exact same SNMP query with Paessler SNMP Tester 3.2, the SNMP query returns the expected result without any problem
- I sniffed the problematic SNMP query with wireshark. The Cacti server generates a series of ICMP errors when the SNMP walk is perfeormed by Cacti: "Destination Unreachable (Port Unreachable)" for port 161.

Here are the versions I'm running:
- I used the windows installer
- Windows Server 2003 Standard Edition SP2
- Cacti 0.8.7e
- NET-SNMP version: 5.5
- RRDTool 1.2.x

Any suggestions are welcome.

Thx

K.

[mcutting]

Does changing the SNMP timeout for this particular host produce any workable result ?

[montecristo]

Wow. You got it on the first shot I've been working on and off on this issue for while now.
I changed the SNMP timeout from 500 to 1000 and the problem disappeared.

A million thanks.

Best,

K.

[mcutting]

Not a problem