Monitor through a jump server (It´s posible)

[RodrigoLZ]

Hi People, first sorry if my english is not so good.

I´m today managing a local server with some host being monitored by snmp conection between my Zabbix Server and the host (Left gteen hosts)

Well, today i´m facing a new chalenge, where from another client I need to remotly monitor some devices, but saddly i don´t have direct IP/SNMP connection with the host.

The only connection possible its a "jump server" where i can connect from Zabbix by ssh connection, and from the jump server I can retrieve snmp information.

OBS: I can´t install Proxy or anything on this jump server by any means.

So i was wondering if there is a way to from the Zabbix server retrieve the information from the red host making a script to connect by ssh connection to the jump server and from there run a specific snmpget command to a final host(depending of what its needed to retrieve)

Im not sure if this method its posible or if exist. And if, what will be the name of it? since i was looking all around the internet without anything similar.

Please let me thank in advance if any take the time to help me out.

With best regards

[LenR]

Maybe this: https://www.qcnetwork.com/vince/doc/...sh_tunnel.html But it may require permanent stunnel processes on both ends.

You would probably have to create all your own items, but you should be able to issue "ssh jump-server snmpget ...." and get snmp items one by one over ssh.

[tim.mooney]

I agree with what LenR said, about both possibilities. If you aren't allowed to run multiple port-forwarded ssh sessions on the jump server, the first suggestion probably won't work.

If you have to use the second option, keep in mind that the overhead from setting up a new ssh connection for each 'snmpget' you need to issue on the jump box will be a factor. Zabbix passive checks have a default time limit (5 seconds, I think) so if the snmpget also takes a little while to return results, you may have some checks time out. It's possible that using ssh connection sharing might be something you want to investigate, in that case.

PS: Your English is fine. Everything you wrote was very clear and understandable.

[LenR]

Another variation would be to run a script (cron) to do snmpget then use zabbix_sender to push the items, that gets around the Zabbix timeout limit.

There just aren't always technical solutions to corporate policies :-)