check_netscreen_vpn

Project Notes

Check is done through SNMP and can use the "VPN monitor" capacity. Usage: -H (--hostname) Hostname to query - (required) -C (--community) SNMP read community (defaults to public, used with SNMP v1 and v2c -v (--snmp_version) 1 for SNMP v1 (default) 2 for SNMP v2c SNMP v2c will use get_bulk for less overhead if monitoring with -d -p (--port) SNMP port (default 161) -n (--tunnemname) Tunnel name to monitor - (required) -l (--list) List possible tunnel names -t (--tunnelstate) Tunnel state for specified tunnel name -1 (--phase1state) Phase 1 state for specified tunnel name -2 (--phase2state) Phase 2 state for specified tunnel name -V (--version) Plugin version -h (--help) usage help Example: List possible tunnels: #check_netscreen_vpn -H 10.1.1.23 -C securalis -n "somevpn" -l Displays: Found interface: VPN_home Found interface: VPN_partner Found interface: VPN_test Check availability of a tunnel if we are using vpnmonitor options: #check_netscreen_vpn -H 10.1.1.23 -C securalis -n "VPN_home" -t Displays: OK: Tunnel UP Check phase 1 and phase 2 of a tunnel: #check_netscreen_vpn -H 10.1.1.23 -C securalis -n "VPN_home" -12 Displays: OK: (P1 OK) (P2 OK)