Zabbix Proxy to Zabbix Server

[stevefxp]

Hello all,

I have a Zabbix proxy and main Zabbix server, separated by a VPN connection. I can ping each from the other side with no issues. I can also setup a passive connection from the proxy to server. When I change it to an active connection it fails.

Is there something to getting an active connection over a VPN? Is there something different between passive and active connections that i am missing?

Thanks,
Steve

[solution]

Check Firewall and ports:

Passive Mode
ZaabixServerIP --> vpn --> ZabbixProxyIP:10051

Active Mode:
ZabbixProxyIP --> von --> ZabbixServerIP:10051

And the mode must be set to:
proxy conf file

https://www.zabbix.com/documentation/6.4/en/manual/appendix/config/zabbix_proxy#proxymode

and in Administration --> Proxy

Wellington

[stevefxp]

So I checked the ports and it seems 10050 is open both ways but 10051 is not open either way. Now I do not set anything in the firewall about these ports, so why would 10050 be open and 10051 not be open. That is the new question.

[solution]

Questions about Zabbix ports, this is the link:

https://www.zabbix.com/documentation/6.4/en/manual/installation/requirements?hl=Default%2Cport%2Cdefault%2CPort#default-port-numbers

Wellington

[stevefxp]

Ok so I cleaned a few things up...

Let me provide some additional information on my setup. I have site A and Site B, which are connected via a VPN connection. Site A has the main Zabbix server and site B has a Zabbix proxy and other devices reporting to the proxy. The Zabbix proxy also has a Zabbix agent, so its doing double duty. I have tested connecting to the Zabbix main server from the proxy, by port(10050/10051) and pinged the main server by FQDN. All come up successful. When I setup communications from the proxy to the main server I can do so in passive mode. When I change to active mode it fails saying that cannot send proxy data to server at "FQDN": proxy "FQDN" not found. I double checked the proxy settings on the main Zabbix server and its set to the FQDN of the proxy and set to active.

I really do not know if/what I am doing wrong. Anyone got a thought on this?

Steve

[irontmp]

The key difference is active mode requires the proxy to initiate connection to the server on port 10051, while passive mode is the reverse. Your VPN may allow one direction but block the other. Test from the proxy with telnet or nc to the server on port 10051 to confirm that specific direction works, similar to this you should also check zabbix_server.conf that ListenIP isn't bound to a local interface the VPN traffic won't hit, and confirm the Server= line in zabbix_proxy.conf points to the correct VPN reachable IP. Check the proxy log for the specific error as it will tell you exactly what is failing.