1081 lines
50 KiB
XML
1081 lines
50 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<zabbix_export>
|
|
<version>4.0</version>
|
|
<date>2021-01-18T15:02:45Z</date>
|
|
<groups>
|
|
<group>
|
|
<name>Templates/Network Devices</name>
|
|
</group>
|
|
</groups>
|
|
<templates>
|
|
<template>
|
|
<template>Template pfSense Active IPsec</template>
|
|
<name>pfSense Active: IPsec</name>
|
|
<description>Extension for pfSense Active Template.
|
|
Monitor IPsec VPN.
|
|
|
|
Requires pfsense_zbx.php installed to pfSense Box.
|
|
Version 1.0.2
|
|
|
|
https://github.com/rbicelli/pfsense-zabbix-template</description>
|
|
<groups>
|
|
<group>
|
|
<name>Templates/Network Devices</name>
|
|
</group>
|
|
</groups>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<items/>
|
|
<discovery_rules>
|
|
<discovery_rule>
|
|
<name>IPsec Phase 1 Discovery</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.discovery[ipsec_ph1]</key>
|
|
<delay>1200s</delay>
|
|
<status>0</status>
|
|
<allowed_hosts/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<filter>
|
|
<evaltype>0</evaltype>
|
|
<formula/>
|
|
<conditions/>
|
|
</filter>
|
|
<lifetime>30d</lifetime>
|
|
<description>Discovery of IPsec Phase 1</description>
|
|
<item_prototypes>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID} {#NAME} Tunnel Enabled</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph1,{#IKEID},disabled]</key>
|
|
<delay>120s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Phase 1 Tunnel Mode</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap>
|
|
<name>pfSense IPsec Enabled</name>
|
|
</valuemap>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID} {#NAME} IKE Type</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph1,{#IKEID},iketype]</key>
|
|
<delay>600s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Phase 1 IKE Type</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap>
|
|
<name>pfSense IPsec IKE Type</name>
|
|
</valuemap>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID} {#NAME} Tunnel Mode</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph1,{#IKEID},mode]</key>
|
|
<delay>600s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Phase 1 Tunnel Mode</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap>
|
|
<name>pfSense IPsec Tunnel Mode</name>
|
|
</valuemap>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID} {#NAME} Protocol</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph1,{#IKEID},protocol]</key>
|
|
<delay>600s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Phase 1 Protocol</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap>
|
|
<name>pfSense IPsec Protocol</name>
|
|
</valuemap>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID} {#NAME} Remote Gateway</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph1,{#IKEID},remote-gateway]</key>
|
|
<delay>600s</delay>
|
|
<history>90d</history>
|
|
<trends>0</trends>
|
|
<status>0</status>
|
|
<value_type>4</value_type>
|
|
<allowed_hosts/>
|
|
<units/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Phase 1 Remote Gateway</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap/>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID} {#NAME} Phase 1 Status</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph1,{#IKEID},status]</key>
|
|
<delay>60s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Phase 1 Tunnel Mode</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap>
|
|
<name>pfSense IPsec Phase 1 Status</name>
|
|
</valuemap>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
</item_prototypes>
|
|
<trigger_prototypes>
|
|
<trigger_prototype>
|
|
<expression>{Template pfSense Active IPsec:pfsense.value[ipsec_ph1,{#IKEID},disabled].last()}=0 and {Template pfSense Active IPsec:pfsense.value[ipsec_ph1,{#IKEID},status].last()}<>1 and {Template pfSense Active IPsec:pfsense.value[ipsec_ph1,{#IKEID},status].last()}<10</expression>
|
|
<recovery_mode>0</recovery_mode>
|
|
<recovery_expression/>
|
|
<name>IPsec Tunnel {#IKEID} ({#NAME}) Not Connected</name>
|
|
<correlation_mode>0</correlation_mode>
|
|
<correlation_tag/>
|
|
<url/>
|
|
<status>0</status>
|
|
<priority>4</priority>
|
|
<description>IPsec Phase 1 is not connected.</description>
|
|
<type>0</type>
|
|
<manual_close>0</manual_close>
|
|
<dependencies/>
|
|
<tags/>
|
|
</trigger_prototype>
|
|
</trigger_prototypes>
|
|
<graph_prototypes/>
|
|
<host_prototypes/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
</discovery_rule>
|
|
<discovery_rule>
|
|
<name>IPsec Phase 2 Discovery</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.discovery[ipsec_ph2]</key>
|
|
<delay>1200s</delay>
|
|
<status>0</status>
|
|
<allowed_hosts/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<filter>
|
|
<evaltype>0</evaltype>
|
|
<formula/>
|
|
<conditions/>
|
|
</filter>
|
|
<lifetime>30d</lifetime>
|
|
<description>Discovery of IPsec Phase 2</description>
|
|
<item_prototypes>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID}.{#REQID} {#NAME} Phase 2 Byte Received</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph2,{#EXTID},status.bytes-in]</key>
|
|
<delay>60s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units>b</units>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Tunnel Phase 2 Protocol</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap/>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID}.{#REQID} {#NAME} Phase 2 Byte Sent</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph2,{#EXTID},status.bytes-out]</key>
|
|
<delay>60s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units>b</units>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Tunnel Phase 2 Protocol</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap/>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID}.{#REQID} {#NAME} Phase 2 Status</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph2,{#EXTID},status]</key>
|
|
<delay>60s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Tunnel Phase 2 Protocol</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap>
|
|
<name>pfSense IPsec Phase 2 Status</name>
|
|
</valuemap>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID}.{#REQID} {#NAME} Phase 2 Enabled</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph2,{#UNIQID},disabled]</key>
|
|
<delay>120s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Tunnel Phase 2 Protocol</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap>
|
|
<name>pfSense IPsec Enabled</name>
|
|
</valuemap>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID}.{#REQID} {#NAME} Phase 2 Life Time</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph2,{#UNIQID},lifetime]</key>
|
|
<delay>600s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units>s</units>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Tunnel Phase 2 Life Time</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap/>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID}.{#REQID} {#NAME} Phase 2 Mode</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph2,{#UNIQID},mode]</key>
|
|
<delay>600s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Tunnel Phase 2 Mode</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap/>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
<item_prototype>
|
|
<name>IPsec Tunnel {#IKEID}.{#REQID} {#NAME} Phase 2 Protocol</name>
|
|
<type>7</type>
|
|
<snmp_community/>
|
|
<snmp_oid/>
|
|
<key>pfsense.value[ipsec_ph2,{#UNIQID},protocol]</key>
|
|
<delay>600s</delay>
|
|
<history>90d</history>
|
|
<trends>365d</trends>
|
|
<status>0</status>
|
|
<value_type>3</value_type>
|
|
<allowed_hosts/>
|
|
<units/>
|
|
<snmpv3_contextname/>
|
|
<snmpv3_securityname/>
|
|
<snmpv3_securitylevel>0</snmpv3_securitylevel>
|
|
<snmpv3_authprotocol>0</snmpv3_authprotocol>
|
|
<snmpv3_authpassphrase/>
|
|
<snmpv3_privprotocol>0</snmpv3_privprotocol>
|
|
<snmpv3_privpassphrase/>
|
|
<params/>
|
|
<ipmi_sensor/>
|
|
<authtype>0</authtype>
|
|
<username/>
|
|
<password/>
|
|
<publickey/>
|
|
<privatekey/>
|
|
<port/>
|
|
<description>IPsec Tunnel Phase 2 Protocol</description>
|
|
<inventory_link>0</inventory_link>
|
|
<applications>
|
|
<application>
|
|
<name>IPsec</name>
|
|
</application>
|
|
</applications>
|
|
<valuemap>
|
|
<name>pfSense IPsec Phase 2 Protocol</name>
|
|
</valuemap>
|
|
<logtimefmt/>
|
|
<preprocessing/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<output_format>0</output_format>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
<application_prototypes/>
|
|
<master_item/>
|
|
</item_prototype>
|
|
</item_prototypes>
|
|
<trigger_prototypes/>
|
|
<graph_prototypes/>
|
|
<host_prototypes/>
|
|
<jmx_endpoint/>
|
|
<timeout>3s</timeout>
|
|
<url/>
|
|
<query_fields/>
|
|
<posts/>
|
|
<status_codes>200</status_codes>
|
|
<follow_redirects>1</follow_redirects>
|
|
<post_type>0</post_type>
|
|
<http_proxy/>
|
|
<headers/>
|
|
<retrieve_mode>0</retrieve_mode>
|
|
<request_method>0</request_method>
|
|
<allow_traps>0</allow_traps>
|
|
<ssl_cert_file/>
|
|
<ssl_key_file/>
|
|
<ssl_key_password/>
|
|
<verify_peer>0</verify_peer>
|
|
<verify_host>0</verify_host>
|
|
</discovery_rule>
|
|
</discovery_rules>
|
|
<httptests/>
|
|
<macros/>
|
|
<templates/>
|
|
<screens/>
|
|
</template>
|
|
</templates>
|
|
<value_maps>
|
|
<value_map>
|
|
<name>pfSense IPsec Enabled</name>
|
|
<mappings>
|
|
<mapping>
|
|
<value>0</value>
|
|
<newvalue>Yes</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>1</value>
|
|
<newvalue>No</newvalue>
|
|
</mapping>
|
|
</mappings>
|
|
</value_map>
|
|
<value_map>
|
|
<name>pfSense IPsec IKE Type</name>
|
|
<mappings>
|
|
<mapping>
|
|
<value>0</value>
|
|
<newvalue>Auto</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>1</value>
|
|
<newvalue>IKE v1</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>2</value>
|
|
<newvalue>IKE v2</newvalue>
|
|
</mapping>
|
|
</mappings>
|
|
</value_map>
|
|
<value_map>
|
|
<name>pfSense IPsec Phase 1 Status</name>
|
|
<mappings>
|
|
<mapping>
|
|
<value>0</value>
|
|
<newvalue>Down</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>1</value>
|
|
<newvalue>Established</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>2</value>
|
|
<newvalue>Connecting</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>10</value>
|
|
<newvalue>Down on CARP Secondary</newvalue>
|
|
</mapping>
|
|
</mappings>
|
|
</value_map>
|
|
<value_map>
|
|
<name>pfSense IPsec Phase 2 Protocol</name>
|
|
<mappings>
|
|
<mapping>
|
|
<value>1</value>
|
|
<newvalue>ESP</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>2</value>
|
|
<newvalue>AH</newvalue>
|
|
</mapping>
|
|
</mappings>
|
|
</value_map>
|
|
<value_map>
|
|
<name>pfSense IPsec Phase 2 Status</name>
|
|
<mappings>
|
|
<mapping>
|
|
<value>0</value>
|
|
<newvalue>Down</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>1</value>
|
|
<newvalue>Installed</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>2</value>
|
|
<newvalue>Rekeyed</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>10</value>
|
|
<newvalue>Down on CARP Secondary</newvalue>
|
|
</mapping>
|
|
</mappings>
|
|
</value_map>
|
|
<value_map>
|
|
<name>pfSense IPsec Protocol</name>
|
|
<mappings>
|
|
<mapping>
|
|
<value>0</value>
|
|
<newvalue>Dual Stack (IPv4 & IPv6)</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>1</value>
|
|
<newvalue>IPv4</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>2</value>
|
|
<newvalue>IPv6</newvalue>
|
|
</mapping>
|
|
</mappings>
|
|
</value_map>
|
|
<value_map>
|
|
<name>pfSense IPsec Tunnel Mode</name>
|
|
<mappings>
|
|
<mapping>
|
|
<value>0</value>
|
|
<newvalue>Main</newvalue>
|
|
</mapping>
|
|
<mapping>
|
|
<value>1</value>
|
|
<newvalue>Aggressive</newvalue>
|
|
</mapping>
|
|
</mappings>
|
|
</value_map>
|
|
</value_maps>
|
|
</zabbix_export>
|