4. Monitoring¶

4.1. KPI¶

The following commands will export KPIs to a time-series database hosted by the LAN host, and which can then be used with a graphical tool, like Grafana.

concentrator1-vm> edit running
concentrator1-vm running config# / system kpi enabled true
concentrator1-vm running config# / vrf main kpi
concentrator1-vm running kpi# interface ntfp1
concentrator1-vm running kpi# interface ntfp2
concentrator1-vm running kpi# interface ntfp3
concentrator1-vm running kpi# telegraf influxdb-output url http://172.30.0.10:8086 database telegraf
concentrator1-vm running kpi# commit
Configuration committed.

4.2. SNMP¶

4.2.1. Configuration¶

The following commands set a minimal SNMP support. Let’s set a monitor community and authorize the LAN host to poll SNMP MIBs and information from the VPN Concentrators.

concentrator1-vm running kpi# / vrf main snmp
concentrator1-vm running snmp# static-info
concentrator1-vm running static-info# location paris
concentrator1-vm running static-info# contact noc@6wind.com
concentrator1-vm running static-info# .. community local
concentrator1-vm running community local#! authorization read-only
concentrator1-vm running community local# source 127.0.0.1
concentrator1-vm running community local# .. community monitor
concentrator1-vm running community monitor#! authorization read-only
concentrator1-vm running community monitor# source 172.30.0.10
concentrator1-vm running community monitor# commit
Configuration committed.

4.2.2. Monitoring¶

From the LAN host, we can now browse the SNMP MIB of the VPN concentrators:

root@hostlan-vm:~# snmpwalk -c monitor -v 2c 172.30.0.2
iso.3.6.1.2.1.1.1.0 = STRING: "Linux concentrator1-vm 5.3.0-42-generic #34~18.04.1-Ubuntu SMP Fri Feb 28 13:42:26 UTC 2020 x86_64"
iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.8072.3.2.10
iso.3.6.1.2.1.1.3.0 = Timeticks: (36263) 0:06:02.63
iso.3.6.1.2.1.1.4.0 = STRING: "noc@6wind.com"
iso.3.6.1.2.1.1.5.0 = STRING: "concentrator1-vm"
iso.3.6.1.2.1.1.6.0 = STRING: "paris"
iso.3.6.1.2.1.1.8.0 = Timeticks: (1) 0:00:00.01
iso.3.6.1.2.1.1.9.1.2.1 = OID: iso.3.6.1.6.3.1
iso.3.6.1.2.1.1.9.1.2.2 = OID: iso.3.6.1.6.3.16.2.2.1
iso.3.6.1.2.1.1.9.1.2.3 = OID: iso.3.6.1.2.1.49
iso.3.6.1.2.1.1.9.1.2.4 = OID: iso.3.6.1.2.1.4
iso.3.6.1.2.1.1.9.1.2.5 = OID: iso.3.6.1.2.1.50
iso.3.6.1.2.1.1.9.1.2.6 = OID: iso.3.6.1.6.3.13.3.1.3
[...]

The 6WIND custom IKE MIB provides information about the currently established VPNs:

root@hostlan-vm:~# snmpwalk -c monitor -v 2c 172.30.0.2 .1.3.6.1.4.1.7336.2.1
iso.3.6.1.4.1.7336.2.1.1.2.1.6.1.4.1.1.1.1.50.3472877975.0 = Gauge32: 0
iso.3.6.1.4.1.7336.2.1.1.2.1.6.1.4.2.2.2.2.50.3231952047.0 = Gauge32: 0
iso.3.6.1.4.1.7336.2.1.1.2.1.6.1.4.66.66.66.66.50.3300045186.0 = Gauge32: 0
iso.3.6.1.4.1.7336.2.1.1.2.1.6.1.4.66.66.66.66.50.3422768795.0 = Gauge32: 0
iso.3.6.1.4.1.7336.2.1.1.2.1.7.1.4.1.1.1.1.50.3472877975.0 = INTEGER: 1
iso.3.6.1.4.1.7336.2.1.1.2.1.7.1.4.2.2.2.2.50.3231952047.0 = INTEGER: 1
iso.3.6.1.4.1.7336.2.1.1.2.1.7.1.4.66.66.66.66.50.3300045186.0 = INTEGER: 1
iso.3.6.1.4.1.7336.2.1.1.2.1.7.1.4.66.66.66.66.50.3422768795.0 = INTEGER: 1
iso.3.6.1.4.1.7336.2.1.1.2.1.8.1.4.1.1.1.1.50.3472877975.0 = STRING: "BBBB"
iso.3.6.1.4.1.7336.2.1.1.2.1.8.1.4.2.2.2.2.50.3231952047.0 = STRING: "BBBB"
[...]