{"id":59,"date":"2008-05-20T15:57:46","date_gmt":"2008-05-20T13:57:46","guid":{"rendered":"https:\/\/vpn.univ-fcomte.fr\/?p=59"},"modified":"2008-05-20T17:26:24","modified_gmt":"2008-05-20T15:26:24","slug":"surveillance-des-services-sur-les-serveurs-vpn","status":"publish","type":"post","link":"https:\/\/vpn.univ-fcomte.fr\/?p=59","title":{"rendered":"Surveillance des services sur les serveurs VPN"},"content":{"rendered":"

Pour effectuer la surveillance des serveurs VPN (une fois op\u00e9rationnel, ces serveurs seront des points d’entr\u00e9e critique), nous avons d\u00e9cider d’utiliser NAGIOS et l’addon<\/em> NRPE.
\nSur les serveurs VPN, lancer apt-get update && apt-get install nagios-plugins nagios-nrpe-server<\/small><\/code>
\net apt-get install nagios-plugins-lifc<\/small><\/code>.
\nModifier le fichier \/etc\/nagios\/nrpe.cfg
\nallowed_hosts=127.0.0.1,<adresse_serveur_nagios><\/small><\/code><\/p>\n

#command[check_disk1]=\/usr\/lib\/nagios\/plugins\/check_disk -w 20 -c 10 -p \/dev\/hda1
\n#command[check_disk2]=\/usr\/lib\/nagios\/plugins\/check_disk -w 20 -c 10 -p \/dev\/hdb1
\ncommand[check_disk1]=\/usr\/lib\/nagios\/plugins\/check_disk -w 20% -c 10% -p \/
\ncommand[check_ppp_connect]=\/usr\/lib\/nagios\/plugins\/check_ppp_connect -w 20 -c 30
\ncommand[check_xl2tpd]=\/usr\/lib\/nagios\/plugins\/check_xl2tpd<\/small><\/code><\/p>\n

relancer le serveur NRPE : \/etc\/init.d\/nagios-nrpe-server restart<\/small><\/code><\/p>\n

modification non obligatoire dans le fichier \/etc\/services<\/small><\/code>
\nnrpe 5666\/tcp # Nagios NRPE<\/small><\/code><\/p>\n

On v\u00e9rifie que le service nrpe tourne correctement :
\nnetstat -at | grep nrpe<\/small><\/code><\/p>\n

Tester la connexion depuis le serveur Nagios : \/usr\/local\/nagios\/libexec\/check_nrpe -H <adresse_client_nagios> -c check_users <\/small><\/code>
\nsur le serveur nagios
\nd\u00e9finition d’un template service :
\ndefine service{
\nis_volatile 0
\ncheck_period 24x7
\nmax_check_attempts 3
\nnormal_check_interval 5
\nretry_check_interval 2
\nnotification_interval 120
\ncontact_groups\t\t\tadmins-serveurs-vpn
\nnotification_options w,u,c,r
\nnotification_interval 120
\nnotification_period 24x7
\nname\t\t\t\tservices-vpn
\nactive_checks_enabled 1 ; Active service checks are enabled
\npassive_checks_enabled 1 ; Passive service checks are enabled\/accepted
\nparallelize_check 1 ; Active service checks should be parallelized (disabling this can lead to major performance problems)
\nobsess_over_service 1 ; We should obsess over this service (if necessary)
\ncheck_freshness 0 ; Default is to NOT check service 'freshness'
\nnotifications_enabled 1 ; Service notifications are enabled
\nevent_handler_enabled 1 ; Service event handler is enabled
\nflap_detection_enabled 1 ; Flap detection is enabled
\nfailure_prediction_enabled 1 ; Failure prediction is enabled
\nprocess_perf_data 1 ; Process performance data
\nretain_status_information 1 ; Retain status information across program restarts
\nretain_nonstatus_information 1 ; Retain non-status information across program restarts
\nregister 0 ; DONT REGISTER THIS DEFINITION - ITS NOT A REAL SERVICE, JUST A TEMPLATE!
\n}<\/small><\/code><\/p>\n

d\u00e9finition d’un template host :
\ndefine host{
\nname linux-box ; The name of this host template
\nuse generic-host ; This template inherits other values from the generic-host template
\ncheck_period 24x7 ; By default, Linux hosts are checked round the clock
\ncheck_interval \t\t\t5
\n#\tretry_interval \t\t\t1
\nmax_check_attempts \t\t10
\ncheck_command \t\t\tcheck-host-alive
\nnotification_period \t\t24x7
\nnotification_interval \t\t120
\nnotification_options \t\td,r
\ncontact_groups \t\t\tadmins-serveurs-vpn
\nregister \t\t\t0
\n}<\/small><\/code><\/p>\n

cr\u00e9ation des hotes :<\/p>\n

define host{
\nhost_name \tBesancon_Bouloie_metro-C_test-vpn \t; The name we're giving to this server
\nalias \t\ttest-vpn \t\t\t\t; A longer name for the server
\naddress \t194.57.91.251 \t\t\t\t; IP address of the server
\nuse \t\tlinux-box \t\t\t\t; Inherit default values from a template
\n}
\n...<\/small><\/code><\/p>\n

cr\u00e9ation des services :<\/p>\n

define service{
\nuse \t\t\t\tservices-vpn
\nhost_name \t\t\tBesancon_Bouloie_metro-C_test-vpn
\nservice_description \t\tCPU Load
\ncheck_command \t\t\tcheck_nrpe!check_load
\n}
\n...<\/small><\/code><\/p>\n

cr\u00e9ation du hostgroup :<\/p>\n

define hostgroup{
\nhostgroup_name TEST_Equipements
\nalias TEST
\nmembers Besancon_Bouloie_metro-C_test-vpn, Besancon_Bouloie_metro-C_vpn1, Besancon_Bouloie_metro-C_vpn2
\n}<\/small><\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

Pour effectuer la surveillance des serveurs VPN (une fois op\u00e9rationnel, ces serveurs seront des points d’entr\u00e9e critique), nous avons d\u00e9cider d’utiliser NAGIOS et l’addon NRPE. Sur les serveurs VPN, lancer apt-get update && apt-get install nagios-plugins nagios-nrpe-server et apt-get install nagios-plugins-lifc. Modifier le fichier \/etc\/nagios\/nrpe.cfg allowed_hosts=127.0.0.1,<adresse_serveur_nagios> #command[check_disk1]=\/usr\/lib\/nagios\/plugins\/check_disk -w 20 -c 10 -p \/dev\/hda1 #command[check_disk2]=\/usr\/lib\/nagios\/plugins\/check_disk -w […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[80,82,81],"class_list":["post-59","post","type-post","status-publish","format-standard","hentry","category-informations-techniques","tag-nagios","tag-nrpe","tag-surveillance"],"_links":{"self":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts\/59","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=59"}],"version-history":[{"count":0,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts\/59\/revisions"}],"wp:attachment":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=59"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=59"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=59"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}