×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Contact US

*
*
*
*

Thanks. We have received your request and will respond promptly.

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Setting Ping Packet Size in Unicenter

thread17-544910

Setting Ping Packet Size in Unicenter

Setting Ping Packet Size in Unicenter

(OP)
Hi. We have a DSM pinging boxes on the other side of a firewall. For security, the firewall has a max allowable ICMP packet size of 65 Bytes. If I ping the remote IPs from the DSM box using just a cmd prompt, it sends the default 32 byte packets and I get a standard reply. However, the DSM is pinging with 84 byte packets, so they're being dropped by the firewall (naturally setting off alarms). I've looked everywhere for a setting or config file (including PingIP.atp and IP.atp) but can't find anything that sets the ICMP packet size used by TND. Making changes to the firewall is an extreme last resort. Anybody have any ideas?

RE: Setting Ping Packet Size in Unicenter

just curious, but are you using a fw rule allowing TNG DSM ICMP TCP Port 7771?

RE: Setting Ping Packet Size in Unicenter

(OP)
Yes we are.

RE: Setting Ping Packet Size in Unicenter

do you have another DSM inside your DMZ?  Ours resides in the DMZ along with the machines it monitors.  You may already know this but it acts as a DSM proxy with the internal DSM which has the CORe.  We have a firewall rule between these two for SQL ports and others as well.

The internal DSM nevers polls what's out in the DMZ (firewall side).  Only the proxy DSM does that.  Which I guess is why we aren't confronted with the issue like yours.

RE: Setting Ping Packet Size in Unicenter

(OP)
Yes, that would make sense. To clarify, in our case the DSM resides in the DMZ, and the managed nodes being pinged reside in the clients internal address space. I wonder if your solution might not be how we should doing things, but a simple peon like me doesn't have much say in the architecture. It would be nice if TND had a simple method for adjusting packet size (you can adjust just about anything else). Can you point me to any good documentation for setting up a DSM proxy and getting it to forward everything back across a firewall? Thanks for your feedback.

RE: Setting Ping Packet Size in Unicenter

i used the firewall section that came from the unicenter implementation cd - version 3 of that cd.

good luck.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login
Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close