openvpn-monitor for pfSense OpenVPN

sehep75559

Hi Guys,

anyone have any success with the https://github.com/furlongm/openvpn-monitor/?

with the effects of the corona virus and work from home initiated by several businesses, I've been trying to setup a monitoring tool for openvpn, I am able to monitor thru logs using the NPS/Radius logs and the Openvpn syslogs however I find interesting to use the above openvpn-monitor, however I am stuck on the setting up the 'management 127.0.0.1 5555' part on the pfsense side.

Appreciate if anyone could help.

Thanks!

JKnott

@sehep75559 said in openvpn-monitor for pfSense OpenVPN:

with the effects of the corona virus

Make sure your antivirus software is up to date.

Pippin

Look in the server config file, it uses a unix socket.

sehep75559

hi mate, apologies, can you please elaborate. i'm still at lost regarding this.. thanks!

Gertjan

@sehep75559
What @Pippin said was all I needed to see how this Management works.

Actually, the OpenVPN server widget present on the pfSense dashboard uses it already !!
So, no need to set something like :

@sehep75559 said in openvpn-monitor for pfSense OpenVPN:

'management 127.0.0.1 5555'

it would break the widget.

Check for your in the OpenVPN server config file.
It is here : /var/etc/openvpn/serverx.conf where x is the OpenVPN server number.

You will find a line like :

management /var/etc/openvpn/server1.sock unix

So, it is a socket.

Open a (SSH) console and :

telnet /var/etc/openvpn/server1.sock unix

Type

status

and have a look at the OpenVPN for the entire Management console doc - just for kicks for learning how stuff is done.

According to https://github.com/furlongm/openvpn-monitor/blob/master/openvpn-monitor.py#L642 this tool should accepts unix sockets, so edit your "openvpn-monitor.conf" file, add something like
socket /var/etc/openvpn/server1.sock

See also https://github.com/furlongm/openvpn-monitor/issues ... which tells me that this project is somewhat abandoned.
You should probably edit the openvpn-monitor.py to make it work with (unix) sockets.
Here : https://github.com/furlongm/openvpn-monitor/blob/ed346321ec2dbd3298ca52e5f6cd30407f3e343a/openvpn-monitor.py#L242

Pippin

For information:
https://github.com/OpenVPN/openvpn/blob/master/doc/management-notes.txt