SNMP proxy agent? forward snmp requests

nagiossnmp

We have a nagios server and I would add snmp requests for our Linksys/Cisco RVS4000s. They are connected via ipsec tunnels. Problem is that the RVS4000's do not seem to support SNMP over the WAN interface, only the LAN. Even going through a vpn tunnel.

Is there any can of small agent I can install on a server on the remote LAN to proxy requests from the nagios server to the router? That way the requests come from the LAN

Best Answer

I think you might need to install another Nagios server in that particular LAN and set up a distributed server.

The function of a distributed server is to actively perform checks all the services you define for a "cluster" of hosts. I use the term "cluster" loosely - it basically just mean an arbitrary group of hosts on your network. Depending on your network layout, you may have several cluters at one physical location, or each cluster may be separated by a WAN, its own firewall, etc. The important thing to remember to that for each cluster of hosts (however you define that), there is one distributed server that runs Nagios and monitors the services on the hosts in the cluster. A distributed server is usually a bare-bones installation of Nagios. It doesn't have to have the web interface installed, send out notifications, run event handler scripts, or do anything other than execute service checks if you don't want it to.

Related Solutions

Router – Monitoring router bandwidth usage via Nagios and SNMP

I did this with a cron script, stores current value in a temp file then next time uses it to calculate bandwidth utilization since last run.

#!/bin/bash

email_address=""
router_ip=""

# 80% BANDWIDTH [ (384000bps) 48,000Bps ] - 20% = 38,400 Bps
alertBW="76800"

lastBWFile="/var/log/ciscoGW.log"
lastBW=`cat $lastBWFile | awk '{print$2}'`
lastTime=`cat $lastBWFile | awk '{print$1}'`

curBW=` snmpget  -c snmap_name -v 1 $router_ip IF-MIB::ifOutOctets.2  | awk '{print$4}'`

let diffBW=$curBW-$lastBW
#echo "Diff BW: $diffBW"
timeNow=`date +%s`
let diffTime=$timeNow-$lastTime
let alertBW=$alertBW*$diffTime

echo "$timeNow $curBW" > $lastBWFile

if [ $diffBW -gt $alertBW ]; then
#       echo "Over limit!"
        echo "Bandwith used over $diffTime seconds: $diffBW" | mail -s "BANDWIDTH OVER LIMIT!!!!" $email_address
fi

Since I was more interested in actual peaks I've since moved to using rrdtool:

#start 15 minutes ago
#end 5 minutes ago since rrdtool queries every 5 minutes 
rrdtool fetch $FROM MAX -s -900 -e -300

Monitoring IPSEC traffic on Cisco ASA

The ASA does indeed support SNMP monitoring of IPSEC tunnels. It doesn't look like cacti has the required templates installed by default. These links may be helpful:

Cacti • View topic - Cisco ASA/PIX VPN Statistics
Cacti • View topic - Cisco ASA templates - YMMV
http://docs.cacti.net/usertemplate:host:cisco:asa_55xx

To a lesser extent, maybe this post: Cacti • View topic - [HOWTO] Add new MIB Variables to Cacti

Best Answer

Related Solutions

Router – Monitoring router bandwidth usage via Nagios and SNMP

Monitoring IPSEC traffic on Cisco ASA

Related Topic