Industry Forums > Wireless Service Providers > Setting up SNMP on routeros

reply to Killa200

Re: Setting up SNMP on routeros

nope, all i get is "SNMP Walk Results for......" and no data

Just for giggles a little bit ago i also setup a vpn into this network and tried connecting up to snmp server with a local address, which also failed,

Starting to wonder if snmp is really running even though it says it is. Or if there is some sort of firewall rule i am missing.

Are you blocking port 161 / 162 UDP?

Have you tried version 2 of snmp?

Can you ping the device?

Tried versions 1 and 2 in cacti and both pull in an snmp error (assuming because it is having issues connecting).

I can ping the device, both its public ip address, and the local address through the vpn, and i can also get the its services through the public like telnet / ssh and web box.

Here is my firewall and nat rules, i don't see anything that could be causing an issue:

/ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=input action=drop src-address=61.129.64.137 
 
 1   ;;; drop ssh brute forcers
     chain=input action=drop protocol=tcp src-address-list=ssh_blacklist 
     dst-port=22 
 
 2   chain=input action=add-src-to-address-list connection-state=new 
     protocol=tcp src-address-list=ssh_stage3 address-list=ssh_blacklist 
     address-list-timeout=1w3d dst-port=22 
 
 3   chain=input action=add-src-to-address-list connection-state=new 
     protocol=tcp src-address-list=ssh_stage2 address-list=ssh_stage3 
     address-list-timeout=1m dst-port=22 
 
 4   chain=input action=add-src-to-address-list connection-state=new 
     protocol=tcp src-address-list=ssh_stage1 address-list=ssh_stage2 
     address-list-timeout=1m dst-port=22 
 
 5   chain=input action=add-src-to-address-list connection-state=new 
     protocol=tcp address-list=ssh_stage1 address-list-timeout=1m 
     dst-port=22 
 
 6   chain=input action=drop src-address=202.117.56.29 
 
 7   chain=input action=drop src-address=207.218.247.7 
 

/ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; masq AP
     chain=srcnat action=masquerade src-address=10.10.0.0/16 
     out-interface=WAN 
 
 1   chain=dstnat action=dst-nat to-addresses=10.10.11.2 
     dst-address=12.XXX.XXX.243 
 
 2   chain=srcnat action=src-nat to-addresses=12.XXX.XXX.243 
     src-address=10.10.11.2 
 

Edit: NVM..