Hi,
Problem:
-------------
Sending Informs (using the snmpNotificationMIB, and snmpTargetMIB) does
not work when firewall is active.
[Version: Net-Snmp-5.3.1, Linux , PPC]
Analysis:
-------------
Before an inform is sent, an automatic engineID probe is sent to the
manager-station,
because of the firewall blocking unknown incoming UDP port,
the probe response is not received, and the inform is not sent.
Possible solutions:
-----------------------------
Two solutions are considered:
1) Send the probe from a fixed port,
so that we can configure the fire-wall to not block this port.
2) Disable the probe.
Instead we can use the remote engineID which is already present in
the USM user entry ( the user used for sending the inform)
I tend to go for the second solution, if the probe is unnecessary, it's
better to not use it at all.
Do you agree?
Advise for Solution:
----------------------------
We need to insert the remote engineID from the User which is associated
with the current TargetMIB entry.
I think that it sohuld be done in get_target_sessions() where we copy
the securityName from the snmpTargetParamsTable.
We just set the (thissess.securityEngineID appropriatly) and
(thissess.isAuthoritative to false),
that should work, right?
thanks,
Erez.
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
