Nokia Network Voyager for IPSO 4.0 Reference Guide 253Using the Check Point MIBYou must use the Check Point version of the Check Point MIB (CP-MIB) text file in $FWDIR/lib/snmp of your network management tool. Do not use the CheckPoint-MIB.txt included inreleases before Nokia IPSO 3.7.Whenever IPSO SNMPd is started or restarted, it searches for the CheckPoint-MIB.txt. Thefollowing is an example of a message you may see as a result of the search:IP650 [admin]# Jan 31 12:17:19 IP650 [LOG_ERR] snmpd: Cannot find module(CheckPoint-MIB) : At line 1 in (none)You can ignore this message.Any SNMP requests to the CP-MIB when the Check Point SNMPd (CP-SNMPd) is not runningtime out. (The IPSO SNMPd does not respond.)The SNMP Proxy support is hard-coded to work only with the CP-SNMPd. It is not a genericproxy that you can use for accessing other MIBs. If you change the following defaultconfigurations, the SNMP Proxy for the CP-MIB does not work: CP-SNMPd must continue to run on port 260. CP-SNMPd must continue to accept SNMPv1 and have a read community set to “public.” CP-SNMPd must continue to be accessible through “localhost” on the Nokia IPSO device.The SNMP Proxy is not a trap proxy and only proxies SNMP Get and SNMP GetNext requests.When simultaneous SNMP queries arrive, the SNMP Proxy returns valid values to only onerequest.Because Nokia IPSO uses a proxy to support the Check Point MIB, reference the Check Pointdocumentation for any limitations of the CP-SNMPd.Using cpsnmp_startYou must run the cpsnmp_start script to make sure that CP-SNMPd is running on Check Pointversions NG FP1, FP2, and FP3. You do this by first enabling the IPSO SNMPd from NokiaNetwork Voyager and then enabling the CP-SNMPd by using /bin/cpsnmp_start on thecommand line.NoteWhenever you use the cprestart or cpstop;cpstart commands, you must run thecpsnmp_start script to restart the CP-SNMPd when you are using NG FP3.NoteUsing FloodGate with Check Point NG FP1, FP2, and FP3 causes SNMP query operationsto fail, even on non-FloodGate CheckPoint MIB objects. You must restart the CP-SNMPd tohave SNMP query operations. On NG FP2, just disabling FloodGate might not enable
