<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><div style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">On Mar 17, 2008, at 12:00 PM, Marcel wrote:</div></span></div><div><br class="Apple-interchange-newline"><blockquote type="cite">If you would have a round-robin dns setup to reach that particular host, you would be fine tweaking a check_host_alive command with high lost percentage, but still reachable. But you will rely on dns name resolution to do that.</blockquote><div><br class="webkit-block-placeholder"></div><div>Right, unfortunately we aren't set up quite that fancy. We simply have two seperate DNS entries for the two ports, and when we can't reach the device on one, we go on the other. The dual connections are more for outgoing traffic than incoming, such that devices behind the device will still have a route to the outside world should one route die (load balancing and failover), but nagios is on the outside looking in.</div><div><br class="webkit-block-placeholder"></div><div>-----------------------------------------------</div><div>Israel Brewster</div><div>Computer Support Technician</div><div>Frontier Flying Service Inc.</div><div>5245 Airport Industrial Rd</div><div>Fairbanks, AK 99709</div><div>(907) 450-7250 x293</div><div>-----------------------------------------------</div><blockquote type="cite"><br><br>HTH,<br>Marcel<br><br><div class="gmail_quote">On Mon, Mar 17, 2008 at 4:45 PM, Israel Brewster <<a href="mailto:israel@frontierflying.com">israel@frontierflying.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div style=""><div class="Ih2E3d"><div><span style="border-collapse: separate; border-spacing: 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div style=""> On Mar 17, 2008, at 11:03 AM, Cook, Garry wrote:</div></span></div></div><div><div class="Ih2E3d"><br><blockquote type="cite"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div link="blue" vlink="purple" style="" lang="EN-US"> <div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="font-size: 11pt; font-family: Calibri,sans-serif; color: rgb(31, 73, 125);">Do you have the ability to use loopback addresses on these devices? If so, that would be used as the host address, and then you could use other checks for the interfaces. For instance, all of my Cisco routers have a loopback setup. I then use 'check_ifstatus' to check the individual interfaces.</span></div> <div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="font-size: 11pt; font-family: Calibri,sans-serif; color: rgb(31, 73, 125);"> </span></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="font-size: 10pt; font-family: Arial,sans-serif; color: rgb(31, 73, 125);">Thanks,</span><span style="font-size: 11pt; font-family: Calibri,sans-serif; color: rgb(31, 73, 125);"><span> </span><br> </span><span style="font-size: 10pt; font-family: Arial,sans-serif; color: rgb(31, 73, 125);">Garry</span><span style="font-size: 11pt; font-family: Calibri,sans-serif; color: rgb(31, 73, 125);"></span></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"> <span style="font-size: 11pt; font-family: Calibri,sans-serif; color: rgb(31, 73, 125);"> </span></div></div></div></span></blockquote><div><br></div></div><div>I assume the check_ifstatus for the interfaces are services associated with the host? If so, then what do you use for your host check? How do you get the host to show as down if all the interfaces are down, but not if one or both (or more, if you have more than two, although that is not the case with any of our devices) are up? </div> <div><div></div><div class="Wj3C7c"><div><br></div><div><div>-----------------------------------------------</div><div>Israel Brewster</div><div>Computer Support Technician</div><div>Frontier Flying Service Inc.</div><div> 5245 Airport Industrial Rd</div><div>Fairbanks, AK 99709</div><div>(907) 450-7250 x293</div><div>-----------------------------------------------</div><div><br></div></div><blockquote type="cite"><span style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;"><div link="blue" vlink="purple" style="" lang="EN-US"> <div><div><div style="border-style: solid none none; border-top: 1pt solid rgb(181, 196, 223); padding: 3pt 0in 0in;"><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><b><span style="font-size: 10pt; font-family: Tahoma,sans-serif;">From:</span></b><span style="font-size: 10pt; font-family: Tahoma,sans-serif;"><span> </span><a href="mailto:nagios-users-bounces@lists.sourceforge.net" target="_blank">nagios-users-bounces@lists.sourceforge.net</a> [<a href="mailto:nagios-users-bounces@lists.sourceforge.net" style="color: blue; text-decoration: underline;" target="_blank">mailto:nagios-users-bounces@lists.sourceforge.net</a>]<span> </span><b>On Behalf Of<span> </span></b>Israel Brewster<br> <b>Sent:</b><span> </span>Monday, March 17, 2008 12:41 PM<br><b>To:</b><span> </span>Nagios Users Mailinglist<br><b>Subject:</b><span> </span>Re: [Nagios-users] Dual-port monitoring</span></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"> </div><div><div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="font-size: 9pt; font-family: Helvetica,sans-serif; color: black;">On Mar 17, 2008, at 9:03 AM, Gary Every wrote:</span></div></div> </div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><br><br></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;">In your services file:<br><br>define service {<br> use generic-service<br> name Ping<br> host_name multi_homed_server_name<br> service_description Ping Second IFace<br> check_command check_ping2!10.1.1.100!3000,10%!10000,20%<br> contact_groups Unix<br> }<span> </span><br><br>for your checkcommands:<br><br>define command{<br> command_name check_ping2<br> command_line /usr/lib/nagios/plugins/check_ping -H $ARG1$ -w $ARG2$ -c $ARG3$ -p 5<br> }<br> <br><br>check_ping2 adds the first ARG as the ip address that you want monitored - This means that the HOSTNAME will remain the same, but a diff interface will be checked.<br><br></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"> </div></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span>Thanks for the response. If I understand your reply correctly, though, this just adds a second service for the host, with a separate IP from that specified in the host directive. it does not, however, allow me to monitor the HOST on two separate IP's, taking into account that if either interface is up, the host is up. Perhaps my question wasn't quite clear enough. Take, for example, the following situation:</span></div> <div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"> </div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;">host a has two network interfaces: a primary with an IP of <a href="http://10.1.1.100" target="_blank">10.1.1.100</a> and a secondary with an IP of <a href="http://10.1.1.101" target="_blank">10.1.1.101</a>.</div> </div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;">Host a can be reached through either interface.</div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;">Host a has its host address defined as the primary of <a href="http://10.1.1.100" target="_blank">10.1.1.100</a>, with a check command of check_ping</div> </div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;">Host a also has a service defined as above, checking the secondary interface (<a href="http://10.1.1.101" target="_blank">10.1.1.101</a>)</div></div><div> <div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"> </div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;">If the secondary interface goes down, then everything is fine: nagios notices that the service for the secondary interface is critical, checks the host on the primary, sees that as being fine, and sends an alert about the service (secondary port), while leaving the host in an OK state. This is exactly as it should be.</div> </div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"> </div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;">However, now imagine that the primary interface goes down instead. Nagios attempts to check the host on the primary interface, which also fails (sicne the interface is down), and therefore nagios alerts that the host is down, and any devices behind it are unreachable. This, however, is incorrect-since the secondary interface is still connected and fully functional, the host and everything behind it is still up and reachable. What I want is a situation where Nagios will send me an alert if either interface of a host is down, but only consider the host to be down if BOTH interfaces on the host are down. As I explained in my original posting, I have considered a couple of options that may accomplish this, but neither seems as elegant as I would like. Thanks for any thoughts!</div> </div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"> </div><div><div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="color: black;">-----------------------------------------------</span></div> </div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="color: black;">Israel Brewster</span></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="color: black;">Computer Support Technician</span></div> </div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="color: black;">Frontier Flying Service Inc.</span></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="color: black;">5245 Airport Industrial Rd</span></div> </div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="color: black;">Fairbanks, AK 99709</span></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="color: black;">(907) 450-7250 x293</span></div> </div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><span style="color: black;">-----------------------------------------------</span></div></div></div></div></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;"> <div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"> </div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;">On Mon, Mar 17, 2008 at 9:38 AM, Israel Brewster <<a href="mailto:israel@frontierflying.com" style="color: blue; text-decoration: underline;" target="_blank">israel@frontierflying.com</a>> wrote:</div> <div style="margin: 0in 0in 0.0001pt; font-size: 12pt;">I have a number of devices on my network that have dual-interfaces<br>such that either one can go down, but the device itself, and all the<br>devices behind it (in the case of a router) is still up and reachable.<br> What is the best way to set up monitoring of such devices, considering<br>that as far as I can tell you can only assign one IP per host? I have<br>looked at check_cluster, but if that is the best method I am unsure of<br> the best way of implementing it. Things I have thought of:<br><br>1) Create two "dummy" hosts which are the two ports, and then a third<br>host with a check command of check_cluster that looks at those two<br>dummy hosts. This seems overly complicated, not to mention cluttering<br> up my configs and nagios interface with three hosts where there is<br>really only one.<br><br>2) Simply monitor the two ports as two separate hosts. This could<br>work, but again clutters things up with multiple hosts where only one<br> exists, and adds the requirement of multi-parenting any child devices,<br>which can get ugly, especially in a graphical representation of the<br>network.<br><br>I have read<span> </span><a href="http://nagios.sourceforge.net/docs/2_0/clusters.html" style="color: blue; text-decoration: underline;" target="_blank">http://nagios.sourceforge.net/docs/2_0/clusters.html</a>, but<br> that doesn't seem to apply, at least not directly, in that it refers<br>either to situations where you have redundant services on one or more<br>hosts (perhaps that is sort of what I want?) or to where you have<br>multiple redundant hosts, but not to the situation where you have one<br> host offering one service over two ports. The main problem with that<br>doc, though, is that the cluster is always a service, which wouldn't<br>work in my situation, as the host itself is a cluster. Any thoughts?<br>Thanks.<br> -----------------------------------------------<br>Israel Brewster<br>Computer Support Technician<br>Frontier Flying Service Inc.<br>5245 Airport Industrial Rd<br>Fairbanks, AK 99709<br>(907) 450-7250 x293<br>-----------------------------------------------<br> <br><br><br>-------------------------------------------------------------------------<br>This SF.net email is sponsored by: Microsoft<br>Defy all challenges. Microsoft(R) Visual Studio 2008.<br><a href="http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/" style="color: blue; text-decoration: underline;" target="_blank">http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/</a><br> _______________________________________________<br>Nagios-users mailing list<br><a href="mailto:Nagios-users@lists.sourceforge.net" style="color: blue; text-decoration: underline;" target="_blank">Nagios-users@lists.sourceforge.net</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" style="color: blue; text-decoration: underline;" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a><br>::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.<br> ::: Messages without supporting info will risk being sent to /dev/null</div></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"><br><br clear="all"><br>--<span> </span><br>Gary Every<br>"Pay it Forward!"</div> </blockquote></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt;"> </div></div></div><br><hr><font color="Black" face="Arial" size="-2">NOTICE: This e-mail and any files transmitted with it are the property of ARCADIS U.S., Inc. and its affiliates. All rights, including without limitation copyright, are reserved. The proprietary information contained in this e-mail message, and any files transmitted with it, is intended for the use of the recipient(s) named above. If the reader of this e-mail is not the intended recipient, you are hereby notified that you have received this e-mail in error and that any review, distribution or copying of this e-mail or any files transmitted with it is strictly prohibited. If you have received this e-mail in error, please notify the sender immediately and delete the original message and any files transmitted. The unauthorized use of this e-mail or any files transmitted with it is prohibited and disclaimed by ARCADIS U.S., Inc. and its affiliates.<br> </font></div></span></blockquote></div></div></div><br></div><br>-------------------------------------------------------------------------<br> This SF.net email is sponsored by: Microsoft<br> Defy all challenges. Microsoft(R) Visual Studio 2008.<br> <a href="http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/" target="_blank">http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/</a><br>_______________________________________________<br> Nagios-users mailing list<br> <a href="mailto:Nagios-users@lists.sourceforge.net">Nagios-users@lists.sourceforge.net</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a><br> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.<br> ::: Messages without supporting info will risk being sent to /dev/null<br></blockquote></div><br></blockquote></div><br></body></html>