TMG7800 SNMP support - Revision history

Luc Morissette at 20:26, 15 February 2011

2011-02-15T20:26:51Z

Luc Morissette: minor

2011-02-15T20:26:31Z

minor

Cboulanger: /* Requirements */

2011-02-02T18:38:30Z

Requirements

Cboulanger: /* Configuring iptables */

2011-02-02T18:29:30Z

Configuring iptables

Cboulanger: /* Configuring iptables */

2011-02-02T18:29:14Z

Configuring iptables

Cboulanger: /* Collect information about your TMG */

2011-02-02T18:27:56Z

Collect information about your TMG

Cboulanger: /* Collect information about your TMG */

2011-02-02T18:27:05Z

Collect information about your TMG

Cboulanger: /* Installing iptables */

2011-02-02T18:24:50Z

Installing iptables

Cboulanger: /* Installing net-snmp-utils (optional) */

2011-02-02T18:18:01Z

Installing net-snmp-utils (optional)

Cboulanger: /* Installing net-snmp-utils (optional) */

2011-02-02T18:16:02Z

Installing net-snmp-utils (optional)

@@ Line 33: / Line 33: @@
 #If your management interface has direct Internet access, install <code>net-snmp-utils</code>: \<br>
-<pre><code>yum install net-snmp-utils</code>
+<pre>yum install net-snmp-utils
 </pre>
 *If your TMG is not connected to the Internet and CentOs5 is used, the <code>net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-5.3.2.2-9.el5.x86_64.rpm</code> and <code>lm_sensors-2.10.7-9.el5.x86_64.rpm</code> packages must be downloaded from the [http://repo.telcobridges.com/centos/5.5/os/x86_64/CentOS/ the CentOs mirror distribution packages site], uploaded to the TMG and installed using <code></code><br>
 <pre>yum localinstall net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm net-snmp-5.3.2.2-9.el5.x86_64.rpm lm_sensors-2.10.7-9.el5.x86_64.rpm</pre>
@@ Line 42: / Line 42: @@
 <pre>Status -&gt; Adapters -&gt; Licensed Features -&gt; search for SNMP
 </pre>
 If it does not appear, contact TelcoBridges support group<br>
 == Enabling IP forwarding  ==

@@ Line 1: / Line 1: @@
 This article explains how to configure <code>iptables</code> in order to seamlessly forward [[SNMP]] traffic from the TMG's management interface to the adapter and the other way around. This allows an external equipment to request SNMP information from the adapter by querying the TMG management interface's IP address.
 In order to achieve most of the instructions in this article, you will need to login as <code>root</code> on your TMG (or an account with superuser privileges).
-== Requirements ==
+== Requirements  ==
 The release installed on the target system must be one of the following:
 *2.3.36 RC1 or later 2.3.x releases
-*2.4.28 RC1 or later 2.4.x releases
+*2.3.36 RC1 or later 2.3.x releases
 *2.5.10 RC1 or later 2.5.x releases
-The target unit is a TMG5800 or TMG7800. See [[TMG SNMP support]] for TMG800 and TMG3200.
+The target unit is a TMG5800 or TMG7800. See [[TMG SNMP support]] for TMG800 and TMG3200. Your license must allow the use of SNMP on the adapter.
 Your license must allow the use of SNMP on the adapter.
 == Collect information about your TMG  ==
@@ Line 24: / Line 24: @@
 A typical TMG setup will have the following configuration. This configuration will be used in the following instructions; replace the corresponding settings with your own.
 *Management interface IP: <code>DHCP</code>
 *Internal Linux IP: <code>172.31.1.2</code>
 *Internal adapter IP: <code>172.31.1.1</code>
@@ Line 32: / Line 32: @@
 To know if <code>net-snmp-utils</code> is already installed, invoke <code>snmpget</code> on the command line of your TMG Linux host. The <code>snmpget</code> tool is used on the TMG to verify if the SNMP feature is available and working from the adapter.
-#If your management interface has direct Internet access, install <code>net-snmp-utils</code>: <code>yum install net-snmp-utils</code>
+#If your management interface has direct Internet access, install <code>net-snmp-utils</code>: \<br>
-#If your TMG is not connected to the Internet and CentOs5 is used, the <code>net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-5.3.2.2-9.el5.x86_64.rpm</code> and <code>lm_sensors-2.10.7-9.el5.x86_64.rpm</code> packages must be downloaded from the [http://repo.telcobridges.com/centos/5.5/os/x86_64/CentOS/ the CentOs mirror distribution packages site], uploaded to the TMG and installed using <code></code><br>
+<pre><code>yum install net-snmp-utils</code>
 <pre>yum localinstall net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm net-snmp-5.3.2.2-9.el5.x86_64.rpm lm_sensors-2.10.7-9.el5.x86_64.rpm</pre>
-&nbsp;&nbsp;&nbsp;&nbsp; 4. Test SNMP: <code></code><br>
+*Test SNMP: <code></code><br>
 <pre>snmpget -d -v 1 -c public 172.31.1.1 SNMPv2-MIB::sysUpTime.0</pre>
 If this command does not work, check the Web portal to see if the unit has the SNMP license
 <pre>Status -&gt; Adapters -&gt; Licensed Features -&gt; search for SNMP
 </pre>
 If it does not appear, contact TelcoBridges support group<br>
 == Enabling IP forwarding  ==
@@ Line 50: / Line 52: @@
 '''NOTE''': A reboot is required to activate this setting. It is possible to enable it immediately by setting the contents of <code>/proc/sys/net/ipv4/ip_forward</code> to <code>1</code>. For example: <code></code>
 <pre>echo 1 &gt; /proc/sys/net/ipv4/ip_forward</pre>
-−
 == Configuring iptables  ==
@@ Line 68: / Line 69: @@
 Permanently save the rules by using
 <pre>service iptables save</pre>
 If everything worked, SNMP requests should be answered from the TMG's management interface.
-== References ==
+== References  ==
 *[http://en.wikipedia.org/wiki/Iptables Wikipedia's iptables article]
-*[http://www.netfilter.org/ Official iptables website]
+*[http://en.wikipedia.org/wiki/Iptables Wikipedia's iptables article]
 *<code>man iptables</code>

@@ Line 10: / Line 10: @@
 *2.5.10 RC1 or later 2.5.x releases
-The target unit is a TMG5800 or TMG7800.
+The target unit is a TMG5800 or TMG7800. See [[TMG SNMP support]] for TMG800 and TMG3200.
 Your license must allow the use of SNMP on the adapter.

@@ Line 57: / Line 57: @@
    iptables -t nat -A PREROUTING -p udp -i mgmt0 --dport 161 -j DNAT --to-destination 172.31.1.1
-   iptables -t nat -A POSTROUTING -p udp -o eth0 --dport 161 -j MASQUERADE
+   iptables -t nat -A POSTROUTING -p udp -o int0 --dport 161 -j MASQUERADE
 '''OR''' input the following lines if you are not using DHCP and want to use SNAT instead of MASQUERADE:
    iptables -t nat -A PREROUTING -p udp -i mgmt0 --dport 161 -j DNAT --to-destination 172.31.1.1
-   iptables -t nat -A POSTROUTING -p udp -o eth0 --dport 161 -j SNAT --to-source 172.31.1.2
+   iptables -t nat -A POSTROUTING -p udp -o int0 --dport 161 -j SNAT --to-source 172.31.1.2
 Consult the added rules by using <code></code>

@@ Line 56: / Line 56: @@
 Input the following lines at the command line:
-   iptables -t nat -A PREROUTING -p udp -i eth0 --dport 161 -j DNAT --to-destination 172.31.1.1
+   iptables -t nat -A PREROUTING -p udp -i mgmt0 --dport 161 -j DNAT --to-destination 172.31.1.1
-   iptables -t nat -A POSTROUTING -p udp -o eth1 --dport 161 -j MASQUERADE
+   iptables -t nat -A POSTROUTING -p udp -o eth0 --dport 161 -j MASQUERADE
 '''OR''' input the following lines if you are not using DHCP and want to use SNAT instead of MASQUERADE:
-   iptables -t nat -A PREROUTING -p udp -i eth0 --dport 161 -j DNAT --to-destination 172.31.1.1
+   iptables -t nat -A PREROUTING -p udp -i mgmt0 --dport 161 -j DNAT --to-destination 172.31.1.1
-   iptables -t nat -A POSTROUTING -p udp -o eth1 --dport 161 -j SNAT --to-source 172.31.1.2
+   iptables -t nat -A POSTROUTING -p udp -o eth0 --dport 161 -j SNAT --to-source 172.31.1.2
 Consult the added rules by using <code></code>

@@ Line 19: / Line 19: @@
 #The IP address of the TMG's management interface (can be obtained using <code>ifconfig mgmt0</code>). If you are using DHCP, it is not needed.
 #The IP addresses of both the Linux host and the adapter on the internal interface:
-##The host IP address can be obtained using <code>ifconfig eth0</code>.
+##The host IP address can be obtained using <code>ifconfig int0</code>.
 ##The adapter ''host'' IP address can be obtained by opening a shell to the adapter and using <code>print_net</code>.