NSClient++ Help (#1) - Recommended means of monitoring several systems from another site across firewalls (#326) - Message List
Hi folks,
Have a situation where Nagios server is located at a particular site behind a NAT'ing firewall. It needs to monitor several windows and linux systems at other sites, also behind NAT'ing firewalls.
At the sites where there is more than one machine to be monitored, I don't want to have to open a port for each individual nsclientpp or nrpe instance (Ie. I'd like to, where possible, avoid port forwarding spaghetti :) )..
Now, I note there's an option that seems to be beta called "check_other" - not a lot of doco on it.. Where's it at?
How have other people handled this situation? What are the other options? I'm thinking there's passive checks, VPNs.. anything else?
As I have several sites, I'm also curious about how I can do this with minimal if any customisation of nsc.ini for each site. The current config I'm using has all the commands statically configured (Ie. they don't accept parameters) but I guess that needs to be balanced with how to specify internal machines if a single machine plays proxy where machines have differing IPs and hostnames..
-
Message #981
I would say either proxy or NSCA (depending on your setup).
NSClient++ can be used as a proxy (limited server support so not to many hosts) if you use the NRPEClient (ie. forward requests to another machine).
NSCA means your clients will all phone home so if they have access to the nagios box this might be simplest.
MickeM
mickem01/15/09 14:42:05 (4 years ago)








