SIM SNMP trap issue

[Don Bitters]

I have HP SIM setup and fully working across public IP's remotely monitoring 100 servers in different locations not connected via any VPN's. I have WBEM working correctly with WMI and the WMI Pegasis Mapper by opening 5989.
I have half HP servers and half Dell servers and my objective is to use one management console to do the job.

I have the HP management page being linked and displayed properly under each server as well as the Dell server administrator by opening 2381 and 1311.

I am doing ping identification on 5989 instead of port 80 by changing the globalprops which works fine.

I have udp 161 open to get the SNMP status and all the hp agents report their status changes back fine. The Dells do not report their SNMP status back, but I am assuming that is because HP does not walk the Dell mibs. I have the new dell mibs all installed and working correctly and I can verify all event configs of each trap from the SNMP trap settings page. This required editing out the comments in the dell mibs because of incompatible comment marks.

I have 50004 to 50005 open on the HP SIM for return status as well as udp ports 161 and 162.

I can receive SNMP traps that show up in the events tap for any local servers and all servers connected through VPN’s. I can not however receive any SNMP traps outside of the VPN publicly. The traps are not being blocked by our firewall that I can tell, and I also enabled all access rules both ways from our LAN into another LAN and vice versa but restricted to our public IPS’s.

The local server name is obviously different than the public reported server name to separate the internet displayed domain name and the locally displayed domain name. I think HP SIM might only accept traps from the same name the traps are sent to as the local server FQDN. I do have the option “Accept unregistered events” selected in the event filter settings.

So my question is, what possibly could be preventing the snmp traps from working over the internet between firewalls when no blocks or errors are reported and when all ports are open both ways limited by public ip’s. Again this works perfectly fine over VPN’s and the local LAN.

Thanks for the help.

[Rob Buxton]

I've not got a solution, but you could try using one of the SNMP Receiver programs and install that on the HPSIM server and possibly other servers in the chain.
They're quite simple and just report a trap has been received. It's been a while since I last used one in any testing so I can't recall the details.
It may be that HPSIM is receiving the traps but cannot determine which device they're for.
If that utility doesn't pick up anything then you'd need to start trying to look up the chain to see what may be blocking them.
And I know that looking through some of the logs generated is no task for the faint of heart!

[Don Bitters]

Thanks, Someone sent me the answer, and I included it below as an FYI for you if you ever need it. This does fix the problem oddly enough I would this it would be the opposite.

If you are having problems receiving traps from servers that are accessed via NAT modify the globalsettings.props file

AllowAltIpForTrap=enabled --> disabled

and restart the SIM service

[Don Bitters]

Thanks, Someone sent me the answer, and I included it below as an FYI for you if you ever need it. This does fix the problem oddly enough, I would think that it would be the opposite.

If you are having problems receiving traps from servers that are accessed via NAT modify the globalsettings.props file

AllowAltIpForTrap=enabled --> disabled

and restart the SIM service

[Don Bitters]

Duplicate discussion and solution to original problem is above.