Monitor Watchguard IPSEC VPN

[GDT]

Hello,
I need to monitor a dozen of IPSEC VPNs managed by a Watchguard appliance. I've successfully added SNMP (v3) configuration and imported MIBs for Watchguard, so I can test SNMP with commands like this:

snmpwalk -v 3 -l authPriv -u xxxx -a MD5 -A yyyy -x DES -X zzzz -c public xxx.xxx.xxx.xxx 1.3.6.1.4.1.3097.6.5.1.2.1.20.1

and it works, I used these links for reference

https://www.watchguard.com/help/docs/fireware/12/en-US/Content/en-US/basicadmin/snmp_mibs_details_c.html

https://www.watchguard.com/help/docs/help-center/en-US/Content/Integration-Guides/General/Zabbix.html

What should I do to implement monitoring of these VPNs? Any experience?

[asapgemini]

Hello,

I have more than 20 Watchguard devices, and I want to monitor the status of the VPN tunnels. When a tunnel goes down, I'd like to receive an email notification. I'm relatively new to Zabbix and trying to learn.

Here's a list of everything I've tried with the MIB file of Watchguard:

1. wgIpsecTunnelNum: This OID represents the total number of entries in the wgIpsecTunnelTable. The OID is 1.3.6.1.4.1.3097.6.5.1.1. Initially, I thought this would be a straightforward and logical method. However, when I try the command snmpwalk -v 1 -c xxx xxx.xxx.xxx.xxx 1.3.6.1.4.1.3097.6.5.1.1, it returns the total number of tunnels on a Firebox. The problem arises because the number of tunnels varies across different Fireboxes. For instance, if I set a trigger to alert when the tunnel count is less than 6, it might not be applicable to all Fireboxes due to differing tunnel counts. Additionally, this command only helps monitor one Firebox at a time.
2. wgIpsecTunnelID: This OID represents the running index of each tunnel. The OID is 1.3.6.1.4.1.3097.6.5.1.2.1.1. When I execute snmpwalk -v 1 -c xxx xxx.xxx.xxx.xxx 1.3.6.1.4.1.3097.6.5.1.2.1.1, it returns all the up tunnels perfectly. However, there's an issue with indexing. If a tunnel with index 0 goes down, the subsequent tunnels shift up in index. This creates a problem because Zabbix might lose track of the OID, especially if the last indexed tunnel goes down.

So, I'm looking for guidance on how to set up an SNMP trigger that can effectively monitor all VPN tunnels across multiple Watchguard Fireboxes and notify me when a tunnel goes down.

I want to know if you find a way to achieve this because i'm on a same kind of problem soo if you can help that will be great thanks

[stanton79]

maybe it can be useful

https://www.zabbix.com/documentation/current/en/manual/config/items/itemtypes/snmp/dynamicindex