Trying to figure out the Zabbix Server/Proxy with Remote Agent connection
Hello Everyone,
After doing a lot of research I finally got around to deploying a Zabbix Server on Debian 11 frontend (standalone VM in ESXi) then another VM with the Zabbix Proxy on Debian 11 as well.
I am running everything active right now.. I have a few internal Agents installed, pointing at the proxy, things work just fine. It seems all my configuration is good between server/proxy/agents etc..
Here is where I am having a hard time understanding how this process works and if its possible with this configuration. Or if I need to deploy a proxy at each customer site and have each proxy point back at the main zabbix server.
My end goal is to have my Zabbix Server and Zabbix Proxy located in my NOC (Datacenter) then have all my remote customer sites with agents point at the proxy. In theory this seems like it should work but I can't get it to work.
I setup a remote Windows Agent, opened ports 10050-10051 on my firewall with a VIP/Public IP to > IP of Internal Proxy.. Configured the agents to use the Public IP of the Proxy..
I keep getting this error in the zabbix log on the agent side.(Firewall is configured properly and proxy is listening on the proper ports)
4688:20220119:125657.386 active check configuration update from [X.X.X.X:10051] started to fail (cannot connect to [[X.X.X.X]:10051]: (null)) - IP Redacted
Is this type of configuration possible? If so, how do I get it to work properly? Is there some special way to create the firewall policy? This is behind a Fortigate 60E i believe it is..
Also from the Zabbix server side, how exactly would I configure the remote host? What IP would I use for the remote host? Obviously the internal IP of that host on the remote network isn't available from the zabbix server. So I am also a bit confused how to properly set that up to have the zabbix server actually see that in the UI...
If I do need to deploy a proxy at each location, what needs to be opened on the Server side firewall? Just the two ports so the proxy can communicate?
Thanks for any help.. Been smashing my head against the wall trying to figure out how to get this working!
After doing a lot of research I finally got around to deploying a Zabbix Server on Debian 11 frontend (standalone VM in ESXi) then another VM with the Zabbix Proxy on Debian 11 as well.
I am running everything active right now.. I have a few internal Agents installed, pointing at the proxy, things work just fine. It seems all my configuration is good between server/proxy/agents etc..
Here is where I am having a hard time understanding how this process works and if its possible with this configuration. Or if I need to deploy a proxy at each customer site and have each proxy point back at the main zabbix server.
My end goal is to have my Zabbix Server and Zabbix Proxy located in my NOC (Datacenter) then have all my remote customer sites with agents point at the proxy. In theory this seems like it should work but I can't get it to work.
I setup a remote Windows Agent, opened ports 10050-10051 on my firewall with a VIP/Public IP to > IP of Internal Proxy.. Configured the agents to use the Public IP of the Proxy..
I keep getting this error in the zabbix log on the agent side.(Firewall is configured properly and proxy is listening on the proper ports)
4688:20220119:125657.386 active check configuration update from [X.X.X.X:10051] started to fail (cannot connect to [[X.X.X.X]:10051]: (null)) - IP Redacted
Is this type of configuration possible? If so, how do I get it to work properly? Is there some special way to create the firewall policy? This is behind a Fortigate 60E i believe it is..
Also from the Zabbix server side, how exactly would I configure the remote host? What IP would I use for the remote host? Obviously the internal IP of that host on the remote network isn't available from the zabbix server. So I am also a bit confused how to properly set that up to have the zabbix server actually see that in the UI...
If I do need to deploy a proxy at each location, what needs to be opened on the Server side firewall? Just the two ports so the proxy can communicate?
Thanks for any help.. Been smashing my head against the wall trying to figure out how to get this working!
Comment