Zabbix for secure network

[divya751]

We have firewall between zabbix server and zabbix agents. We cannot open firewall connection between Server & Agent so that sever contact agent because zabbix-server is in less secured network and zabbix-agents are running on servers in high secured network.
How could I configure zabbix so that agent can send data to server instead of server asking from agent?

[Alberto Freire]

HI,

Search for 'Zabbix active agent check', this will help you.


Cheers!

[divya751]

HI,

Search for 'Zabbix active agent check', this will help you.


Cheers!

Thanks Alberto. Could you please suggest any documentation for How to configure active checks at server and agents? I am using Zabbix 2.2.

[neogan]

More information about Zabbix active checks please have a look here https://www.zabbix.com/documentation...#active_checks

[divya751]

To implement the Active checks I have followe3d the below mentioned steps:
Configure the agentd with:
a. Hostname=Name of the Agentserver
b. ServerActive=ip of the zabbix server
c. Server=127.0.0.1

With this, in Zabbix server GUI, Configured the host with IP 0.0.0.0, no DNS, Zabbix agent port 10050 and with the name of the agent in Hostname.
I made tepmplate and the Items with "Type" to "Zabbix Agent (active)"
Still it is not working. What I am missing. Do I have to do some configuration on server side also?

[tatapoum]

- configure the active checks related parameters inthe agent configuration file.
- change the "zabbix agent" item type to "zabbix agent (active)"
- open port 10051 from agent to server.
- restart your agent.

[divya751]

- configure the active checks related parameters inthe agent configuration file.
- change the "zabbix agent" item type to "zabbix agent (active)"
- open port 10051 from agent to server.
- restart your agent.

Thanks for quick response Tatapoum.
I am configuring below mentioned parameter in the agentd profile:
a. Hostname=Name of the Agentserver
b. ServerActive=ip of the zabbix server
c. Server=127.0.0.1
Are they right or am I missing some other parameter?

[tatapoum]

That should be enough on the client. The "server" parameter isn't necessary.
You can also set the agent to be active only :
DisableActive=0
DisablePassive=1

[divya751]

That should be enough on the client. The "server" parameter isn't necessary.
You can also set the agent to be active only :
DisableActive=0
DisablePassive=1

I am working on Zabbix version 2.2 and there is not parameter like DisableActive and DisablePassive under agentd configuration profile.
Do I have to add these parameter manually in the agentd profile?

[tatapoum]

https://www.zabbix.com/wiki/howto/config/activehost

[divya751]

https://www.zabbix.com/wiki/howto/config/activehost

Thanks Tatapoum for link but I have used the same link for configuring Zabbix active agent check initially but as I mention I am not finding the parameter DisableActive and Disable Passive in the agentd profile. Can I add it manually?
I am using zabbix agent version 2.2.4.

[Alberto Freire]

Well...

I did some testings and it working for me, see how I did:

Side agent (only agent), runing on CentOS:
{
zabbix_agentd.conf

Server=127.0.0.1
ListenIP=0.0.0.0
StartAgents=2
ServerActive=177.xx.xx.2
Hostname=Virtex-Canto
}

Follows prints...