For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

brianokelly_119's avatar
brianokelly_119
Icon for Nimbostratus rankNimbostratus
Nov 18, 2010

Configuring snmpd to send responses out of different ports or addresses

 

 

In the following article:

 

 

 

http://support.f5.com/kb/en-us/archived_products/lc/manuals/product/bigip4_3ref/lc_snmp.html1035287

 

 

 

It states how to configure snmpd to send responses out of different ports using the "-p" option. We require the snmpd to send responses out of the traffic interface as oppose to the mgmt interface. When we run this command"

 

 

 

snmpd -p 161,tcp:161@192.168.2.2

 

 

 

It does not respond to queries on the 192.168.2.2 interface but does on the mgmt interface and from localhost. Has anyone had issues with this before?

 

management
monitoring

3 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Nov 18, 2010
    Hi Brian,

     

     

    Which version are you running?

     

     

    Aaron
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Nov 18, 2010
    In 10.x, you can configure a TMM route and then the traffic should be sent out the corresponding interface from a suitable self IP on the egress VLAN.

     

     

    You can do this using the GUI under Network | Routes or with the 'b route' or 'tmsh create net route' commands.

     

     

     

    SOL3669: Overview of management interface routing

     

    http://support.f5.com/kb/en-us/solutions/public/3000/600/sol3669.html?sr=11241741

     

     

    Outbound administrative connections

     

     

    Outbound connections sent from BIG-IP by administrative applications (SNMP, SMTP, SSH, NTP, etc.) are processed by the Linux operating system. These connections may use either the management address or a self-IP address as the source address. The BIG-IP compares the destinaton address to the routing table to determine the interface through which BIG-IP routes the traffic.

     

     

    Note: This behavior applies only to unsolicited outbound traffic: traffic that is not in response to a request originated by a remote host. A response to a request originated by a remote host will be returned to the last MAC address traversed by the inbound request.

     

     

     

    Aaron