Help on Active Checking behind NAT/Firewall

[ViennaAustria]

I'm installing Zabbix. Great software!

It works to all clients with external IP address. But I can't monitor clients with internal (NAT-ed) IP. Of course it works, as soon as I forward 10051/tcp to the internal host. But that is inappropriate for several clients.

I read about the "active checks" and tried to implement them. But I'm too stupid, obviously. On the client I set DisablePassive=1 and DisableActive=0 and looked into the debug log. The result is, that the client does

refresh_active_checks('zabbix.***.at',10051)

and received

Got [{
"response":"success",
"data":[
        {
                "key":"vfs.dev.read[sda,sectors]",
                "delay":"60",
                "lastlogsize":"0",
                "mtime":"0"},
        {
                "key":"vfs.dev.write[sda,sectors]",
                "delay":"60",
                "lastlogsize":"0",
                "mtime":"0"}]}]

But none of this information is of interest to me. The 10+ data fields I successfully monitor on the other hosts is not in the list - so it's not sent to the Zabbix server - so I can't monitor it.

What do I do wrong?

Also these hosts are shown with a red "Z" status - "no route to host". Of course it is correct, that there's no route to a host behind a NAT-ed network. But Zabbix is receiving data from it and should show some green light somewhere (I would expect).

Please help!

[eskytthe]

(I suppose that you can connect to the zabbix server on tcp port 10051 from the agent server, and your items is of type “active agent”)

You may have seen this link?:
http://www.zabbix.com/wiki/howto/config/activehost

It is important that the hostname in config file at agent server and at zabbix server is absolute the same (case etc.).

Hope this help.
BR
Erik

[ViennaAustria]

your items is of type “active agent”

THAT was the problem! I haven't changed the items to active. Only sda read&write have been set to active (why ever). Now all data is coming in. Great!

I also changed the IP address to 0.0.0.0 and re-created some entries. However, the "Z" status of all active clients remains red with "no route to host". But I can live with that.

Hope this help.

A lot!!!

Thank you!