Active/Passive monitoring

[preethu.d]

Hi Team,

We have a firewalls set up in Active/Passive mode, if Active firewall is up and running, all the ports on passive firewall will be admin down, is there any way to stop port monitoring of passive firewall instead of disabling it manually ? Also when this become active is there any way to re-enable its monitoring and stop passive firewall port monitor ?

Regards,
Preethu

[ssax]

You could point the checks at the firewall cluster VIP instead of each individual firewall, then it should always monitor the active node.

[preethu.d]

Hi,

Can you please elaborate on this.

Regards,
Preethu

[ssax]

You can either re-run the Network Switch / Router wizard against the VIP or edit your host in Configure > Core Config Manager > Hosts and set the address to the VIP.

After thinking about this though, I don't think that will work if any of the SNMP lookup tables for the interfaces will be different (they likely will).

What you could do is setup an event handler script that would fire when you want it to disable the checks from occurring:

https://assets.nagios.com/downloads/nag ... ios-XI.pdf

https://assets.nagios.com/downloads/nag ... mand_id=34

[preethu.d]

Hi,

Is there any sample script you can share for this scenario.

Regards,
Preethu

[kfanselow]

Hi Preethu,

Unfortunately we do not have prebuilt scripts for this scenario but you can take a look at our "Core External Commands" which include example scripts that should be useful to you.

List of the external command functions available with script examples:
https://assets.nagios.com/downloads/nag ... ernalcmds/

Here specifically is the DISABLE_HOST_CHECK example.
https://assets.nagios.com/downloads/nag ... mand_id=34

Hope this is useful.

Thanks and Best Regards,
Keith