<![CDATA[Monitor a remote "policy based" VPN status]]>Hello all, I am hoping someone can assist me with a issue that I would like to solve.  I am using NetXMS to monitor various devices and networks.  One network has an EdgeRouter Pro router / firewall that I am monitoring.  This firewall has a VPN to a remote network that I would like to alert on if the VPN is not up.  However, since it is a policy based VPN there is no interface to monitor.

The Edgerouter is basically a linux box that I can SSH into, so is there a way to run a script that I could run CLI commands via SSH to parse information to see if the tunnel is up, or possibly even force a ping / or initiate the vpn to retry?  I have not done any scripting with NetXMS so I am not familiar with where to start.

Thank you all for your assistance on this matter.

]]>https://forum.netxms.org/topic/6641/monitor-a-remote-policy-based-vpn-statusRSS for NodeFri, 13 Nov 2026 07:30:32 GMTMon, 10 Aug 2020 16:26:06 GMT60<![CDATA[Reply to Monitor a remote "policy based" VPN status on Mon, 10 Aug 2020 19:33:40 GMT]]>Do you have an agent inside that edgerouters network?
Is there an IP upstream of that VPN connection that will respond to a ping?

If the answer is yes to those two questions, you can setup an Icmp Target on that agent and collect the icmp data as a table dci.

  1. Make sure ping subagent is configured in the agents config file.
  2. add an icmp target to an address on the other side of the vpn connection.
  3. RESTART the agent
  4. Run configuration poll on node
  5. Create table dci from agent table
]]>https://forum.netxms.org/post/28396https://forum.netxms.org/post/28396Mon, 10 Aug 2020 19:33:40 GMT