SNMP and Pix internals interfaces

[f.andreozzi]

Hi Community,

We got a Pix firewall 535 (6.0.1) with three internal interfaces, and the naming convention used for the interfaces is: 'inside' for the Management LAN, 'monitor-BE' for the Monitoring-Back-End LAN and 'NSM' for the Monitoring LAN.

Via SNMP we can only manage the interface called 'inside', but we also need to manage the NSM interface.

Is it possible and how to manage also this one, without changing our naming convention?

Thanks for helping

[gsatchivi]

As soon as you enable SNMP on the PIX and your monitoring server has all the PIX MIB's loaded in it, the device will snmpwalk the PIX and it should return all relevant info including the state of all interfaces. If your management device uses ping to check interface state, only the local interface will respond to ping, as the pix does not allow you to ping any other interface a device is not directly attached to. What sort of management tool are you using?