SNMP to the VPN

Question

i have 2 firewall one in HO and another in the branch . and a PRTG server in the HO . i allwo any to any for all network including vpn . 
 vpn is using site to site ipsec and every thing is working fine. 
 in enabled snmp agnet on the branch office vpn interface and it work fine i can get snmp traffic using a prtg in the branch site . but when i try to get the same snmp traffic using the prtg in the HO site i couldnot . 
 so how can i enable this ? as i said all service network every thing is allowed .

lferrara · Answer

Momx, 
 by defailt SNMP is only available on LAN and in fact it works. In order to get it working through VPN link: 
 
 add SNMP Community and specify the remote Server SNMP 
 connect to XG console and type: system ipsec_route add host "remote SNMP Server" tunnelname "IPSec tunnelname" 
 Execute this command always from console: set advanced-firewall sys-traffic-nat add destination "remote SNMP Server" snatip "XG Lan IP" 
 
 Remove the quota (") .

MayurMakvana · Answer

Hi, 
 Greetings, 
 Make sure that you have disconnected/connected the tunnel after executing the commands executed. 
 If it still does not work, get to the CLI of the BO and take below tcpdumps: 
 tcpdump 'host (SNMP server IP) -s0 
 Then try SNMP walk or try getting the request from the server to trap the messages from the BO. 
 
 -Mayur Makvana

MayurMakvana · Answer

Hi, 
 Greeting, 
 I have just checked and found that it is marked as a BUG with defect ID 5780. As of now connecting the SNMP server to the LAN zone would resolve the issue. 
 
 -Mayur Makvana

MayurMakvana · Answer

Hi All, 
 
 The Bug ID is resolved in latest version. Kindly get the device upgraded and report to support if still does not work.

sachingurung · Answer

Hi, 
 It is reported as a bug and the reference ID are: 
 
 NC-21469 
 NC-16090 
 
 No ETA for the fix. Customers can follow up with these reference ID with support. 
 Thanks