check_netscreen_vpn

Project Notes

Check is done through SNMP and can use the "VPN monitor" capacity.

Usage:
-H (--hostname) Hostname to query - (required)
-C (--community) SNMP read community (defaults to public,

used with SNMP v1 and v2c

-v (--snmp_version) 1 for SNMP v1 (default)

2 for SNMP v2c
SNMP v2c will use get_bulk for less overhead
if monitoring with -d

-p (--port) SNMP port (default 161)
-n (--tunnemname) Tunnel name to monitor - (required)
-l (--list) List possible tunnel names
-t (--tunnelstate) Tunnel state for specified tunnel name
-1 (--phase1state) Phase 1 state for specified tunnel name
-2 (--phase2state) Phase 2 state for specified tunnel name
-V (--version) Plugin version
-h (--help) usage help

Example:
List possible tunnels:
#check_netscreen_vpn -H 10.1.1.23 -C securalis -n "somevpn" -l
Displays:
Found interface: VPN_home
Found interface: VPN_partner
Found interface: VPN_test

Check availability of a tunnel if we are using vpnmonitor options:
#check_netscreen_vpn -H 10.1.1.23 -C securalis -n "VPN_home" -t
Displays:
OK: Tunnel UP

Check phase 1 and phase 2 of a tunnel:
#check_netscreen_vpn -H 10.1.1.23 -C securalis -n "VPN_home" -12
Displays:
OK: (P1 OK) (P2 OK)