Use Zabbix to monitor corporate firewalls through SNMP
The company uses the FortiGate 80C firewall, and now uses Zabbix to monitor its status through SNMP.
Add the -- with-net-snmp parameter to compile and install zabbix.
First, Enable SNMP on the firewall, and then add a host in Zabbix
References
Https://www.zabbix.com/documentation/2.2/manual/config/items/itemtypes/snmp
Use snmpwalk to obtain a series of SNMP strings
$ Snmpwalk-v 2c-c public 10.10.41.254
Find the
Windows OID 'for CPU, memory, disk Utilization2007-10-31 11: 03 windows CPU utilization: Oid:. 1.3.6.1.2.1.25.3.3.1.2 (.iso.org. DOD. Internet. Mgmt. mib-2.host.hrDevice.hrProcessorTable.hrProcessorEntry.hrProcessorLoad) in HOST-RESOURCES-MIB 1.3.6.1.2.1.25.3.3.1.2.2 and 1.3.6.1.2.1.25.3.3.1.2.3 Windows Memory util
workstation. To solve the incompatibility problem between different SNMP versions, RFC3584 defines a three-way coexistence policy.
In addition, the SNMP protocol includes four basic actions:
Get: if the network management system needs to obtain the information of the monitored device, the get action is executed.
GetNext: If you want to obtain information about a project that is one of multiple projects in the project list, the network management system executes getnext to obtain information abo
report network meta information in a timely manner, work with better performance.
2SNMP Protocol
The Simple Network Management Framework Based on SNMP protocol has been rapidly promoted due to the popularity of the Internet and has become one of the most important network management technologies. SNMP is constantly evolving, and three major versions are available: SNMPv1, v2, and v3. In addition, the emergence of remote network monitoring (RMON) makes SNMP a huge step towards Distributed Manage
Simple idea: Start the SNMP service on the router, make sure Zabbix supports SNMP, get the required OIB, design the item1 Start the SMTP service on the routerSnmp-agent Enable Snmp-agentSnmp-agent Local-engineid 800063a280586ab1b9cd1700000001Snmp-agent community read monitor; Create read-only Community--monitorSnmp-agent community write private; Create a privately writable communitySnmp-agent Sys-info version all; support Snmpv1,v2c,v3Snmp-agent target-host Trap Address Udp-domain 60.60.60.11 Ud
All information of a device that needs to be managed is considered as a collection of various managed objects. These managed objects are defined by OSI in a managed Information Base (MIB) in the virtual information library, the following is the Mrtg configuration for MRTG windows traffic monitoring settings.
Mrtg for windows traffic monitoring settings MRTG ConfigurationThe procedure of Mrtg for windows traffic monitoring MRTG is as follows: first, ex
commands such as Snmpd,snmpwalk with the Arm-linux-strip command before porting9. Copy the Snmpd,snmpwalk to the Development Board/usr/bin, snmpd.conf and MiB folder and folder contents to the Development Board/usr/local/share/snmp/No folders created by yourself, note using chmod 777 Snmpd,snmpwalk10. Running snmpd-cc/usr/local/share/snmp/snmpd.confIf snmpd:error while loading shared libraries:libgcc_s.so.1:cannot open Shared object file:no such file
successful, the following illustration shows:
Switch to the Interface tab, click the Start connection to view all port information on the switch and record it, as shown in the following illustration:
Switch to the Mbrowser tab
Select iso->org->dod->internet->mgmt->mib-2->interface->iftable->ifentry-> Ifinoctets
Point start
After the connection is successful, the following illustration shows:
Attention:
Ifinoctets #交换机端口进流量
Ifoutoctets #
information (well, it should be said that all database subtree/subdirectory Information)
Agent.
Community: Well, it's the "community strings" and "query password" pull.
Oid. This is the Object Identifier ).
The oid can be understood as a digital identifier for storing tree resources by various types of information in the MIB Management Information Library.
Okay.
I. Overall understanding
1. Four components of TCP/IP-based network management
(1) Management Information Library (MIB), which contains all the parameters that the Agent process may query or modify, that is, the parameters of the managed object.
(2) management information structure (SMI). management information is a collection of managed objects. SMI defines a rule set maintained by a device and is used to name and encode managed objects.
(3)
This article explains the Zabbix monitoring of Dell Compellent storage devices through the SNMP protocol.The monitoring of the idea and monitoring network equipment is the same: first determine whether the device supports SNMP protocol, if supported, the next step to get the device's private MIB library, usually to the manufacturers to obtain or download online. If you do not get the MIB library, the value
protocol version, separated by commas, such as Cmdgen. Communitydata (' my-agent ', ' Public ', 1)2.cmdgen. Udptransporttarget () # #通道参数, pass in a tuple that contains the host ip/domain name and port, for example: Cmdgen. Udptransporttarget (' 192.168.70.237 ', 161)3. OID # #mib值, e.g. '. 1.3.6.1.4.1.1800.5.13.2 'Note: The three parameters are separated by a ",".The following example is the acquisition o
Windows OID 'for CPU, memory, disk Utilization2007-10-31 11: 03 windows CPU utilization:Oid:. 1.3.6.1.2.1.25.3.3.1.2 (.iso.org. DOD. Internet. Mgmt. mib-2.host.hrDevice.hrProcessorTable.hrProcessorEntry.hrProcessorLoad) in HOST-RESOURCES-MIB1.3.6.1.2.1.25.3.3.1.2.2 and 1.3.6.1.2.1.25.3.3.1.2.3Windows Memory utilization:Total: oid: 1.3.6.1.2.1.25.2.2.0 unit (Kb) -
10.0.0.1 received by the switch
SNMPTrap information
(Config) # snmp-server trap-source loopback0 use the IP address of the loopback0 interface as SNMP
Traps sending Source Address
2. Create a custom template
First, we need to obtain the corresponding OID of Cisco 3750 SNMP. I will put this OID at the bottom of the document.
Here I will talk about port inbound and outbound traffic monitoring. Here is an ex
Build a mib2c environment in ubuntu and a mib2c environment in ubuntu
1. Download net-snmpHttp://net-snmp.sourceforge.net/download.htmlFor example, download version 5.52. Go to the download directory and decompress the. net-snmp package.# Tar zxf net-snmp-5.5.tar.gz3. configure# Cd net-snmp-5.5#. /Configure -- with-default-snmp-version = "2" -- with-sys-contact = "contact @ contact" -- with-sys-location = "location" -- with-logfile = "/var/log/snmpd. log "-- with-persistent-directory ="/var/net-
1. Download Net-snmpHttp://net-snmp.sourceforge.net/download.htmlFor example, download version 5.52. Go to the download directory, unzip the NET-SNMP compression pack#tar ZXF net-snmp-5.5.tar.gz3.configure#cd net-snmp-5.5#./configure--with-default-snmp-version= "2"--with-sys-contact= "[email protected]"--with-sys-location= "Location" --with-logfile= "/var/log/snmpd.log"--with-persistent-directory= "/var/net-snmp"4.make# make# make Install5. Configuring the Conf file# vi/etc/snmpd.confEnter a lin
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.