Page 1 of 1

UDP Port Monitors

Posted: Wed Jan 06, 2021 10:35 am
by FrontlineIT
Hello,

We're trying to setup UDP port checks across four Windows 2019 servers in Nagios XI (5.6.14) using the Configuration Wizard. The port we're trying to monitor is UDP port 1812 (Authentication). The Configuration Wizard requires we supply send/receive strings. My question is where can I find those strings? I uploaded a screen shot of what I'm referring to in the Configuration Wizard.

Thanks ahead of time

Re: UDP Port Monitors

Posted: Wed Jan 06, 2021 12:33 pm
by dchurch
The strings are arbitrary here, but they represent what data the service takes in (i.e. the send string), and what should be expected back (i.e. the receive string).

Port 1812/udp tells me this is a RADIUS server.

In this case I think you could instead use the check_radius.py plugin that Nagios XI ships with. For ease of use, this can be set up using the RADIUS Server wizard.

Re: UDP Port Monitors

Posted: Wed Jan 20, 2021 12:23 pm
by FrontlineIT
Is there more documentation on this for the RADIUS Server wizard? Duo provides a client secret but I don't believe there is a username/password for this.

Re: UDP Port Monitors

Posted: Thu Jan 21, 2021 2:54 pm
by dchurch
The User Name and password would be a user name and password for an account on the RADIUS server.

Beyond that, here's the help text from the script:

Code: Select all

Usage: check_radius.py [options]

Options:
  -h, --help            show this help message and exit
  -V, --version         Print the version number of the plugin
  -v, --verbose         Print out verbose output
  -H HOSTNAME, --hostname=HOSTNAME
                        The hostname of the RADIUS server to connect to
  -P PORT, --port=PORT  The port of the RADIUS server
  -u USERNAME, --username=USERNAME
                        The username to authenticate
  -p PASSWORD, --password=PASSWORD
                        The password of the auth user
  -s SECRET, --secret=SECRET
                        The shared secret for the RADIUS server
  -t TIMEOUT, --timeout=TIMEOUT
                        The amount of time to try to authenticate before
                        timing out
  -r RETRIES, --retries=RETRIES
                        The number of authentication retries
  -c CHRESPONSE, --chresponse=CHRESPONSE
                        Response to challenge message
  -a ATTRIBUTES, --attributes=ATTRIBUTES
                        Location of attributes file