Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Setting Ping Packet Size in Unicenter

Status
Not open for further replies.

duckman001

IS-IT--Management
Jan 29, 2002
14
0
0
US
Hi. We have a DSM pinging boxes on the other side of a firewall. For security, the firewall has a max allowable ICMP packet size of 65 Bytes. If I ping the remote IPs from the DSM box using just a cmd prompt, it sends the default 32 byte packets and I get a standard reply. However, the DSM is pinging with 84 byte packets, so they're being dropped by the firewall (naturally setting off alarms). I've looked everywhere for a setting or config file (including PingIP.atp and IP.atp) but can't find anything that sets the ICMP packet size used by TND. Making changes to the firewall is an extreme last resort. Anybody have any ideas?
 
just curious, but are you using a fw rule allowing TNG DSM ICMP TCP Port 7771?
 
do you have another DSM inside your DMZ? Ours resides in the DMZ along with the machines it monitors. You may already know this but it acts as a DSM proxy with the internal DSM which has the CORe. We have a firewall rule between these two for SQL ports and others as well.

The internal DSM nevers polls what's out in the DMZ (firewall side). Only the proxy DSM does that. Which I guess is why we aren't confronted with the issue like yours.
 
Yes, that would make sense. To clarify, in our case the DSM resides in the DMZ, and the managed nodes being pinged reside in the clients internal address space. I wonder if your solution might not be how we should doing things, but a simple peon like me doesn't have much say in the architecture. It would be nice if TND had a simple method for adjusting packet size (you can adjust just about anything else). Can you point me to any good documentation for setting up a DSM proxy and getting it to forward everything back across a firewall? Thanks for your feedback.
 
i used the firewall section that came from the unicenter implementation cd - version 3 of that cd.

good luck.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top