| 12.7 |  | SNMP |
| 12.7.3 |  | Example of an SNMP through the PIX |

| This section will examine how to enable SNMP through the PIX Security Appliance so that network devices other than the PIX Security Appliance can be managed and monitored. As Figure and the following examples illustrate, the appropriate static and accesslist commands must be used:

- Traps Outside to Inside allows traps from outside host 192.168.0.19 to inside management system 10.0.0.11, use the following commands:

> > static (inside,outside) 192.168.0.10 10.0.0.11 netmask 255.255.255.255

> > access-list TRAPSIN permit udp host 192.168.0.19 host 192.168.0.10 eq snmptrap

> > access-group TRAPSIN in interface outside

- Traps Inside to Outside works in the absence of outbound access control lists ACLs, outbound traffic is allowed by default.
- Polling Outside to Inside allows polling from the NMS, outside host 192.168.0.19, to inside host 10.0.0.11, use the following configuration:

> > static (inside,outside) 192.168.0.10 10.0.0.11 netmask 255.255.255.255

> > access-list POLLIN permit udp host 192.168.0.19 host 192.168.0.10 eq snmp

> > access-group POLLIN in interface outside

- Polling Inside to Outside works in the absence of outbound ACLs, outbound traffic is allowed by default.