monitoring remote windows machines over vpn

[Greg Pangrazio]

Is the tunnel always active or are you building the tunnel every time?

I am monitoring about 200 hosts all windows using standard tcp and
icmp checks (not nsca).  If the tunnel gets torn down between checks i
often miss the first check as the tunnel is renegotiated.  There are
two choices, you can change your nagios config so that it requires
more checks to fail or turn ISAKMP keepalives on the tunnels.  Not all
VPNs will support this.  I know that Nortel Contivity VPN appliances
have a memory leak that if ISAKMP keepalives are on the box will
eventually run out of memory.

I use three checks before marking the host down.  The first check is
at 5 min the others at 1 min.  This seems to reduce my false positives
as the VPNs usually have a lifetime of tens of minutes.

Greg Pangrazio




On Mon, Sep 6, 2010 at 9:59 AM, Stefan Fuhrmann
<stefan at fuhrmann.homedns.org> wrote:
> Hello all,
>
> Im running nagios 3.2 on ubuntu server 10.04 and want to monitor win 2003/
> 2008 over  vpn connections. I do a host check:
> check_ping -H $HOSTADDRESS$ -w 3000.0,80% -c 5000.0,100% -p 30 -t 60
>
> I get often a host check time out but when I have a look all is running well
>
> also I do a check_nt with nsclient++ and having also errors :
>  could not fetch information
> but service is running.
>
> There are hours all is running well, but then I often having notifications with
> host cehck time out and check_nt
> the VPN firewalls are also monitored and I have no problems there, so the
> connections are okay
>
> I googled but can not find further information how to solve this.
>
> Can someone help?
>
>
> tia
> stefan
>
> ------------------------------------------------------------------------------
> This SF.net Dev2Dev email is sponsored by:
>
> Show off your parallel programming skills.
> Enter the Intel(R) Threading Challenge 2010.
> http://p.sf.net/sfu/intel-thread-sfd
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>

------------------------------------------------------------------------------
This SF.net Dev2Dev email is sponsored by:

Show off your parallel programming skills.
Enter the Intel(R) Threading Challenge 2010.
http://p.sf.net/sfu/intel-thread-sfd
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null