Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

SNMP-Test connectivityFailure / Proxyproblem?

Hey,

got a little Problem with the SNMP-Test connectivityFailure on our IronPorts C370 & M670 and  URL. All our Webtraffic has to be transportet over a Proxy-Server. Updates on the Ironport works, proxy ist configured, just the SNMP-Test fails. Is it possible that the SNMP-Test doesn`t use the proxy by design or any other ideas? Test-URL is http://downloads.ironport.com

Regards

Claudius Ruecker

Everyone's tags (5)
3 REPLIES
Cisco Employee

SNMP-Test connectivityFailure / Proxyproblem?

Hi,

The trap for connectivityFailure has a standard to use http://downloads.ironport.com which is not obvious.

Start  with SNMP disabled, then use snmpconfig to enable the agent, and select  the option to enable all traps. Because trap connectivityFailure is  enabled, every 5 to 7 seconds (not configurable) the management  interface (by default) will try to connect to downloads.ironport.com on  port 80 (configurable).  It will then try an HTTP GET request, and it  will expect a response code between 200 and 300.  If fail, then trap.  That's the only test for this trap. The interval is not configurable,  but the path is. Let's say alerts should be sent when the appliance  cannot connect somewhere, but the firewall is blocking the management  port from opening port 80 at downloads.ironport.com. Or the appliance is  supposed to use the configured proxy and connectivityFailure trap  should be sent if proxy is not reachable. The URL should be changed.

1. Assuming all traps are enabled, use snmpconfig to ENABLE trap #3 connectivityFailure in the list

AGAIN, or disable it and re-enable it, it makes no difference.

2. An extra question will pop up every time it is set to ENABLE i(except when ALL traps are enabled):

         What URL would you like to check for connectivity failure?

         [http://downloads.ironport.com]>

3. Enter a local URL, for example http://example.com:8080

ConnectivityFailure  traps can be easily simulated by using dnsconfig and entering a  non-working DNS server (lookups for downloads.ironport.com will fail,  traps will be sent every 5-7 seconds.)

New Member

SNMP-Test connectivityFailure / Proxyproblem?

Hey Enrico,

thx for your answear.

The Problem is not that i don`t know how to enable this test.

DNS works fine, otherwise Updatefunktion shouldn`t be possible

The Problem seems that the Ironport doesn`t use the Proxy Server for the test. I just want to know if this snmp-test uses the configured Proxyserver?

Cisco Employee

SNMP-Test connectivityFailure / Proxyproblem?

Hi Claudius,

it is correct that the IronPort does not use the proxy for: connectivityFailure. If you want to use the proxy follow the instructions provided.

-Enrico

1933
Views
0
Helpful
3
Replies
CreatePlease login to create content