SNMP polling on external interface

[gsvarney]

Hello,

I have a PA-500 deployed in a K12 school district.  Our Educational Service District (ESD) uses Intermapper to keep track of outages and issues for districts in the area.  Since I have moved to the PA they have not been able to get results from our firewall.  I have set up policies and other switches do report back to polling.  However, the external interface doesn't.  I have looked at the Management Interface Settings as that is where polling is allowed.  However, the IP in there is the local IP we use for management.  If I set this IP to the external address, then I'll no longer be able to access the device to manage it, correct?  The ESD is able to poll the inside interface (a different IP than the Management Interface).  How can I set this up so that the EXTERNAL interface will respond to polling?

Thanks.

[mharding · Accepted solution]

I think you need to create an Interface Management profile that allows SNMP, and then apply it to the external interface. Then you can setup a security policy to allow SNMP to that interface. (That's how I've had to allow ping on our external interfaces in the past.)

There's also an option under Service Route Configuration where you can move SNMP to another interface instead of using the management interface.