SNMP over SSH

1. Producer: The Server which you want to Monitor running net-snmp

2. Proxy: Accessible to Both to Monitoring Server (MS) and to the Producer. Proxy machine will be in local network of MS.

3. MS: Monitoring Server

socat should be installed on

Scenario:

I want to monitor my Personal System from MS. I have setup Firewall to access my system. In that Only port 22 is open. You cannot access SNMP running on my personal system directly. So I have setup one Proxy Machine i.e. ABC which is accessible to MS and you can access my machine from ABC also.

Proxy Machine: ABC  10.0.0.1


On Proxy Machine:

ssh -f -N root@<PRODUCER IP> -L 6004:localhost:6004


Start TCP to UDP socat on Producer:

socat -d -d -d  -lffoo.log TCP4-LISTEN:6004,fork UDP4:localhost:161


Start UDP to TCP socat on Proxy:

socat -d -d -d -lffoo.log UDP4-LISTEN:161,fork TCP:localhost:6004


Test by running snmpwalk on Proxy Machine:

snmpwalk -v1 -c public localhost