Monitor a remote "policy based" VPN status
-
Hello all, I am hoping someone can assist me with a issue that I would like to solve. I am using NetXMS to monitor various devices and networks. One network has an EdgeRouter Pro router / firewall that I am monitoring. This firewall has a VPN to a remote network that I would like to alert on if the VPN is not up. However, since it is a policy based VPN there is no interface to monitor.
The Edgerouter is basically a linux box that I can SSH into, so is there a way to run a script that I could run CLI commands via SSH to parse information to see if the tunnel is up, or possibly even force a ping / or initiate the vpn to retry? I have not done any scripting with NetXMS so I am not familiar with where to start.
Thank you all for your assistance on this matter.
-
Do you have an agent inside that edgerouters network?
Is there an IP upstream of that VPN connection that will respond to a ping?If the answer is yes to those two questions, you can setup an Icmp Target on that agent and collect the icmp data as a table dci.
- Make sure ping subagent is configured in the agents config file.
- add an icmp target to an address on the other side of the vpn connection.
- RESTART the agent
- Run configuration poll on node
- Create table dci from agent table
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login