OpenVPN Client Status

[emcgarcia101]

OpenVPN Client Status

[rbicelli]

Hello! I released an optional template which monitors the connected clients. Please check it out.

[rbicelli]

Hi!
Are you monitoring a client which authenticaates to another pfsense in remote access/user auth mode or are you monitoring the server configured as user auth?

[emcgarcia101]

Hello!

Using remote access with user auth and ssl/tls certs, only one PfSense per site, the two production instances is on different companies, and the lab is on my home.

[rbicelli]

Please try running the script without arguments in pfSense shell and post the output. If posting here you should anonymize relevant data or send them to my mail address (is on top header of the script :))

[emcgarcia101]

Hi!

The return of the script, i used command "php pfsense_zbx.php" to run.
One client connected at the moment with user: suporte.ti

logzabbix.txt

[rbicelli]

What's your expected result? According to the template you should see the value
OpenVPN Server {#NAME} Clients Connected ramping up to 1.

[emcgarcia101]

The Zabbix are not getting the information, below a screenshot.

Dont show anything about clients, just the server information...

[rbicelli]

Sorry, but I still do not understand.

According to discovery rules the template is showing correctly the number of clients connected (the first value you see - Last Value 1, Change +1).
(BTW There's no implementation about which client is connected because to me is out of the scope of Zabbix. However making a new set of discovery rules for this is possible)

If you put to monitor the pfSense instance which is running as client you'll see a value like this:

But you'll se this value only if you are initiating a tunnel as client.

[emcgarcia101]

exactly this implementation I was looking for, I will try the discovery rules and if successful I let you know

[kevendoliveira]

Sorry, but I still do not understand.

According to discovery rules the template is showing correctly the number of clients connected (the first value you see - Last Value 1, Change +1).
(BTW There's no implementation about which client is connected because to me is out of the scope of Zabbix. However making a new set of discovery rules for this is possible)

If you put to monitor the pfSense instance which is running as client you'll see a value like this:

But you'll se this value only if you are initiating a tunnel as client.

So as I understand it, the status "None" for the item Tunnel Status is normal, in case of using remote access mode is it better to disable the item?

[rbicelli]

So as I understand it, the status "None" for the item Tunnel Status is normal, in case of using remote access mode is it better to disable the item?

Yes, it is normal. Even in pfSense GUI you won't see the VPN tunnel status when in user auth mode but only clients connected.

AFAIK in Zabbix you can't disable an item on a single element of a discovery rule. The only way I see for having this valued disabled (or hidden) is to split the OpenVPN Server discovery in two parts:

• OpenVPN Servers P2P
• OpenVPN Servers User Auth
  But the value itself is excluded from triggers, so I don't see a reason for splitting discovery rules.

[emcgarcia101]

You're the best!