search

centreon / centreon-plugins

Collection of standard plugins to discover and gather cloud-to-edge metrics and status across your whole IT infrastructure.
https://www.centreon.com
Apache License 2.0
310 stars 273 forks source link

[network::cisco::firepower::fxos::snmp::plugin] - new mode VPN #3416

Closed joschi99 closed 2 years ago

joschi99 commented 2 years ago

It should be nice to monitor VPN tunnels on firepower.

The following VPN's are present on this snmp walk:

> show crypto isakmp sa

IKEv1 SAs:

   Active SA: 7

    Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)

Total IKE SA: 7

1   IKE Peer: 217.56.92.226

    Type    : L2L             Role    : initiator

    Rekey   : no              State   : MM_ACTIVE

2   IKE Peer: 81.118.252.158

    Type    : L2L             Role    : initiator

    Rekey   : no              State   : MM_ACTIVE

3   IKE Peer: 91.187.222.50

    Type    : L2L             Role    : initiator

    Rekey   : no              State   : MM_ACTIVE

4   IKE Peer: 194.79.56.228

    Type    : L2L             Role    : responder

    Rekey   : no              State   : MM_ACTIVE

5   IKE Peer: 62.97.49.211

    Type    : L2L             Role    : initiator

    Rekey   : no              State   : MM_ACTIVE

6   IKE Peer: 46.141.62.180

    Type    : L2L             Role    : responder

    Rekey   : no              State   : MM_ACTIVE

7   IKE Peer: 83.211.74.185

    Type    : user            Role    : initiator

    Rekey   : no              State   : MM_WAIT_MSG2
garnier-quentin commented 2 years ago

I don't find information about vpn in your mibs. But when i look the snmpwalk it seems you can use mode ipsec-tunnel from network/cisco/asa/snmp/plugin.

joschi99 commented 2 years ago

Strange, I need to investigate, because if you look the snmpwalk you can find for example the IP addresses from the VPN's. I will update you asap.

garnier-quentin commented 2 years ago

Try the asa plugin. It should work.

joschi99 commented 2 years ago

seems working

garnier-quentin commented 2 years ago

Thanks for the feedback!