Hello everybody,
I'm trying to monitor some IPSec tunnels on my sonicwall NSA endpoint.
To do so, I used dynamic indices since the only way to identify each tunnel is by name.
For example the decrypt byte count for Tunnel1 I can get from
.1.3.6.1.4.1.8741.1.3.2.1.1.1.11["index",".1.3.6.1.4.1.8741.1.3.2.1.1.1.14","Tunnel 1"]
Now, the problem is that the sonicwall only exposes connected tunnels through those OIDs. Ie. if Tunnel1 is down, the dynamic index fails as Tunnel1 doesn't exist in the tree.
So, two questions here:
a) Is there a way for the item to not switch to the "Not Supported" status if the dynamic index fails? Maybe a default value on fail or something?
b) Is it possible to monitor the status of the VPN by checking for the existance of the value in the tree? (or generally, can I have a trigger go off when an OID is not found?)
Thanks.
ps. I'm running zabbix 1.8.2 on debian stable if it makes any difference.
I'm trying to monitor some IPSec tunnels on my sonicwall NSA endpoint.
To do so, I used dynamic indices since the only way to identify each tunnel is by name.
For example the decrypt byte count for Tunnel1 I can get from
.1.3.6.1.4.1.8741.1.3.2.1.1.1.11["index",".1.3.6.1.4.1.8741.1.3.2.1.1.1.14","Tunnel 1"]
Now, the problem is that the sonicwall only exposes connected tunnels through those OIDs. Ie. if Tunnel1 is down, the dynamic index fails as Tunnel1 doesn't exist in the tree.
So, two questions here:
a) Is there a way for the item to not switch to the "Not Supported" status if the dynamic index fails? Maybe a default value on fail or something?
b) Is it possible to monitor the status of the VPN by checking for the existance of the value in the tree? (or generally, can I have a trigger go off when an OID is not found?)
Thanks.
ps. I'm running zabbix 1.8.2 on debian stable if it makes any difference.