Firewall Rule needed for SNMP collection?

Question

I am trying to poll the XG210 via SNMP and I cannot seem to get it to work. I have enabled the SNMP agent on the XG, added a community, and also ACL allow for SNMP on the LAN zone, but when I attempt to poll it says the port is closed. Do I have to also create a firewall rule to allow? The SNMP scan source is on the same LAN as the XG. Thanks in advance.

This thread was automatically locked due to age.

Aditya Patel · Accepted Answer

Hi Bill, 
 The SNMP does not require the rule in XG only in Cyberoam OS. The option of SNMP is enabled from the device access as per the screen shot below. 
 If the ACL rule is added and denied the port 161 then you may create an ACL rule to allow it on top of the others, otherwise, is it not needed.

Bill Roland · Answer

For reasons I cannot explain, it suddenly just began working on its own several days after I had given up on it. I actually wasn't thinking anything else about it but noticed I was getting interface metrics from it in the network monitor I was using. Go figure....

Rafal Dabrowski · Answer

Hi, 
 To SNMP work need to be created a firewall rule for example: 
 ANY LAN->ANY LAN service SNMP , more information below; 
 For me it works, i hope for you too. 
 Thanks 
 Create firewall rule to allow SNMP traffic 
 
 Navigate to Firewall > Rule > IPv4 Rule. 
 Click Add . 
 Complete the form as follows:
 
 Name: Give the rule a name. 
 Zone: Select the zone (e.g., LAN) where the SNMP server resides. 
 Network / Host: Select the SNMP server. 
 Services: Select SNMP. 
 Schedule: Select All the time. 
 Action: Select Accept. 
 Destination: Select either Local or Any Host

Click OK . 
 
 References: kb.cyberoam.com/default.asp