(E-Mail Removed) (Luiz Lima) wrote in message news:<(E-Mail Removed). com>...
> I need help to figure out a way to connect to a device which is
> located behind a firewall. The firewall is connected to the Internet
> and the LAN is made up of private IPs.
>
> I need to access a wireless AP (RoamAbout AP 2000) using SNMP from the
> Internet, but the AP has a private IP address.
>
> The firewall is a RedHat 9 Linux box, which is running its own snmpd,
> needed to monitor ethernet and ppp bandwitdth utilization.
>
> Is there a way to access the AP? Perhaps using snmpd to redirect
> specific packets? Or else redirecting ports using xinetd or iptables?
>
> I'm not really an expert in SNMP, so any help is more than welcome.
>
> Thanks a lot.
>
> Luiz LIma
Don't know if you've found your answer yet, but assuming you have
access to the firewall, you should be able to determine the type of
mapping between the NAT private address of the wireless AP and the
public address the world sees, including how the UDP port is being
mapped. SNMP normally uses UDP port 161 (this is the default for the
Roamabouts). Your iptables configuration should tell you that.
Assuming that the UDP port mapped for SNMP is the same, or even if it
is different, you need to look at the iptables configuration to see if
it can pass SNMP requests through the firewall on that port from the
public internet. If the UDP port mapping is something different than
port 161, you should be able to tune your SNMP management station to
query on a port other than 161.
With all of those pieces in place, you should be able to engage SNMP
queries across the firewall to the AP.
Clarke Morledge
Network Engineering
College of William and Mary