Skip navigation
2106 Views 3 Replies Latest reply: Apr 17, 2012 11:40 AM by nilie RSS
Christian Elsen Newbie 2 posts since
Apr 12, 2012
Currently Being Moderated

Apr 12, 2012 12:09 PM

Monitor multiple router interfaces via ping

I have a bunch of core routers where I'd like to monitor the health of the interfaces via ping. But somehow I can't seem to find an easy way to do this.

 

I've seen that the expectation is to rely on the core router to sent traps about interface up/down events. But that has proven to be unreliable.

Another approach is apparently to model each interface as it's own device. That's really cumbersome as we are talking about lot's of devices.

Yet a different approach seems to be using the method describe in http://community.zenoss.org/docs/DOC-2494 and adapting it to create an event on lack of inbound traffic on an interface as an indication that this interface must be down.

But all these approaches seem rather like a workaround to me.

 

What's the recommended way to accomplish what I'm looking for?

 

Thanks!

 

Chris

  • nilie Rank: Green Belt 372 posts since
    May 27, 2010
    Currently Being Moderated
    1. Apr 12, 2012 1:33 PM (in response to Christian Elsen)
    Re: Monitor multiple router interfaces via ping

    What exactly do you mean by the health of the interfaces ? You wand to know the up/down status or the amount of port errors ?

     

    If you want to be notified on interface status change, you can use snmp trap or you may use the syslog messages generated by router. I had way much better results with the second approach and in my opinion, it is less complex.

    Modeling each interface as its own device is not working at all. Up to the v3.1 Zenoss will not allow you to add or will refuse to model a device as soon as it discovers the IP address you're trying to use belongs to a device already monitored. The idea of creating an event class transform didn't work for me, I found myself flooded with events from thousands of interfaces going up and down on my access switches, on top of syslog messages with the same subject.

     

    You are right, they are all workarounds and unfortunately none of them is a good candidate for a final solution.

     

    Let's pray the Zenoss dev team got it right this time and v4 will allow us to see the interface status at all times without any other need for workarounds.

  • nilie Rank: Green Belt 372 posts since
    May 27, 2010
    Currently Being Moderated
    3. Apr 17, 2012 11:40 AM (in response to Christian Elsen)
    Re: Monitor multiple router interfaces via ping

    Please keep in mind that interface status has nothing to do with VPN status. As implemented in many devices, a VPN tunnel is at best a virtual interface while interface status as reported by SNMP in Zenoss is the layer 2 status of the physical interface.

    So even if your IPSec peer is down or is taken away completely, your interface status is up because at layer 2 it is connected, up and running to the next hop switch or router. Pinging the IP address will not give you anything since it is a static configuration applied to a virtual interface or to a property of your device.

    If you really want to detect when your IPSec tunnel si down, see your device capabilities looking for keepalive messages, snmp traps or syslog messages that you might use to be notified when the IPSec tunel is down.

More Like This

  • Retrieving data ...

Legend

  • Correct Answers - 4 points
  • Helpful Answers - 2 points