Monitoring

rajbps

Hi Guys,

Is there anything that can monitor things like openvpn site to site tunnels and restart them automatically if they stop and other services on pfsense like squid, snort, varnish and so on.

Also could it email a specific email address to let someone know that this service stopped and that it was restarted.

Cheers,

Raj

DigitalDeviant

Zabbix can do all of that.

rajbps

Do you have a how to pls.

I have a few site to site vpns on different subnets each.

All sites run pfsense.

If you could help that would be great as I been looking for something like that for a while.

Cheers,

Raj

DigitalDeviant

If you could get a Zabbix server up and running I could probably help you configure the hosts and the actions. Setting up the server is a little beyond my abilities to provide a walk through. The offer a prebuilt appliance install you could run in a VM or install pretty quickly on some old hardware http://www.zabbix.com/download.php

rajbps

Hi DigitalDeviant,

Just want to be sure the server will be in the main office and the zabbix clients will be installed on the remote locations. All running pfsense.
Linking the site to the main site, there is an openvpn site to site link, so each office comes back to the main site but none of them talk to each other.

So if the vpn link goes down due to the service stopping on the remote site and the link dies, how will that link start again.

is the agent clever and will it restart the link as during that time the server will not be able to contact the agent.

Looking forward for your answer on this one.

Cheers,

raj

DigitalDeviant

@rajbps:

Hi DigitalDeviant,

Just want to be sure the server will be in the main office and the zabbix clients will be installed on the remote locations. All running pfsense.
Linking the site to the main site, there is an openvpn site to site link, so each office comes back to the main site but none of them talk to each other.

So if the vpn link goes down due to the service stopping on the remote site and the link dies, how will that link start again.

is the agent clever and will it restart the link as during that time the server will not be able to contact the agent.

Looking forward for your answer on this one.

Cheers,

raj

I believe, in cases where the agent cannot contact the server, it's possible to run the Zabbix Proxy on the same machine. From there you can set the agent to run a custom command to run the start command as well as report that the link went down. Once the Zabbix server gets the information it can send out an email. You may need to give the Zabbix agent elevated permissions. I've never tried this and I don't have a test server to try it on.