Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Anyone worked out a Nagios test for pfSense CARP status?

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    3 Posts 3 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      whitwye
      last edited by

      If not, and you know where to look on the CLI to check that, I can put together a plugin to watch that. We need it here.

      Thanks!

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        The Status > CARP page looks at output from ifconfig:

        xn1: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
        options=3 <rxcsum,txcsum>ether f2:92:fa:6a:32:79
        hwaddr f2:92:fa:6a:32:79
        inet6 fe80::f092:faff:fe6a:3279%xn1 prefixlen 64 scopeid 0x6
        inet6 2001:dead:beef:7fff::12 prefixlen 64
        inet6 2001:dead:beef:7fff::11 prefixlen 64 vhid 238
        inet 172.25.228.18 netmask 0xffffff00 broadcast 172.25.228.255
        inet 172.25.228.17 netmask 0xffffff00 broadcast 172.25.228.255 vhid 228
        inet 172.25.228.140 netmask 0xffffffff broadcast 172.25.228.140 vhid 228
        inet 172.25.228.65 netmask 0xffffffff broadcast 172.25.228.65 vhid 228
        inet 172.25.228.66 netmask 0xffffffff broadcast 172.25.228.66 vhid 228
        inet 172.25.228.67 netmask 0xffffffff broadcast 172.25.228.67 vhid 228
        nd6 options=21 <performnud,auto_linklocal>media: Ethernet manual
        status: active
        carp: MASTER vhid 228 advbase 1 advskew 0
        carp: MASTER vhid 238 advbase 1 advskew 0

        xn1: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
        ether d2:a1:91:e7:2b:cb
        hwaddr d2:a1:91:e7:2b:cb
        inet6 fe80::d0a1:91ff:fee7:2bcb%xn1 prefixlen 64 scopeid 0x6
        inet6 2001:dead:beef:7fff::13 prefixlen 64
        inet6 2001:dead:beef:7fff::11 prefixlen 64 vhid 238
        inet 172.25.228.19 netmask 0xffffff00 broadcast 172.25.228.255
        inet 172.25.228.140 netmask 0xffffffff broadcast 172.25.228.140 vhid 228
        inet 172.25.228.65 netmask 0xffffffff broadcast 172.25.228.65 vhid 228
        inet 172.25.228.66 netmask 0xffffffff broadcast 172.25.228.66 vhid 228
        inet 172.25.228.67 netmask 0xffffffff broadcast 172.25.228.67 vhid 228
        inet 172.25.228.17 netmask 0xffffff00 broadcast 172.25.228.255 vhid 228
        nd6 options=21 <performnud,auto_linklocal>media: Ethernet manual
        status: active
        carp: BACKUP vhid 228 advbase 1 advskew 100
        carp: BACKUP vhid 238 advbase 1 advskew 100</performnud,auto_linklocal></up,broadcast,running,promisc,simplex,multicast></performnud,auto_linklocal></rxcsum,txcsum></up,broadcast,running,promisc,simplex,multicast>

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • D
          darkfader
          last edited by

          @whitwye:

          If not, and you know where to look on the CLI to check that, I can put together a plugin to watch that. We need it here.

          Thanks!

          I got a few for Check_MK you can adopt.
          Basically, neither CARP nor uCARP give good monitoring interfaces.

          This is what I used, and also some time had adopted for pfSense (I think)
          https://github.com/FlorianHeigl/nagios/tree/master/check_mk/ucarp_status

          The main thought behind this is to monitor the initial role of both nodes and then compare that.

          pfSense firewalls

          • a few in VMWare
          • a Nokia IP530
          • ServGate SG300
          • Atom Cluster
          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.