topic Re: SNMP Traps in Cluster Mode in Firewall and Security Management

SNMP Traps in Cluster Mode

Ralf_Schwendner — Mon, 01 Mar 2021 13:01:33 GMT

Hi CheckMates!

We have 2 R80.10 Security Gateways in HA Mode and now want to configure SNMP Traps for these 2 Gateways (for such things as monitoring RAID Status etc.).

Generally it works but we discovered on our Network Monitoring System (that receives the SNMP Traps) that both Gateways send Traps with the virtual Cluster IP as source IP.

Is it possible that the 2 Gateways use their physical IP as source IP for SNMP Traps and not the virtual cluster IP so that our Network Monitoring System can distinguish the trap origin?

Thank you for your ideas...

Re: SNMP Traps in Cluster Mode

S_E_ — Wed, 17 Mar 2021 08:28:08 GMT

hi, I do not see this issue on R80.30 HA cluster.

Just a guess, is a static No NAT rule an option?

Regards

Re: SNMP Traps in Cluster Mode

StephS — Wed, 17 Mar 2021 19:26:01 GMT

Hi,

I don't think this would solve the problem as this is not a NAT issue, rather a cluster feature. The question is if it is possible to set exceptions for the cluster VIP address. I don't know such option.

Regards

Steph

Re: SNMP Traps in Cluster Mode

Vincent_Bacher — Thu, 18 Mar 2021 05:40:29 GMT

You may have a look at sk34180 (Outgoing connections from cluster members are sent with cluster Virtual IP address instead of member's Physical IP address)