Hi All
Slightly odd query - I’ve some SNMP checks against our production firewalls (Cisco devices). Check_MK / OMD works perfectly fine against these as you’d expect. However a (planned) failover between these pair of devices has left a warning message loitering around against them.
Firewall 1 says : WARN - Device is the Active unit expecting to be standby!
Which sounds fair enough, however :
Firewall 2 says: WARN - Device is the Standby unit expecting to be standby!
What’s the best way to remove these warnings? The devices are going to stay in this configuration - a re-inventory didn’t seem to do it. Do I need to remove those auto checks? Or is this an action that needs to take place on the device?
Regards
Jolyon Brown
···
Limilo Ltd
Registered in England no: 07778174
Registered office: Netpark Incubator, Thomas Wright Way, Sedgefield, TS21 3FD
VAT no: 190425515
If you use WATO try the “Tabula rasa” Button on inventoried services page and if you configure from command line use the “-II” switch for reinventory.
Should this not help then there is a problem with the data from the firewall devices.
Best regards
Andreas
···
Jolyon Brown jolyon@limilo.com schrieb am Di., 3. März 2015 um 14:00 Uhr:
Hi All
Slightly odd query - I’ve some SNMP checks against our production firewalls (Cisco devices). Check_MK / OMD works perfectly fine against these as you’d expect. However a (planned) failover between these pair of devices has left a warning message loitering around against them.
Firewall 1 says : WARN - Device is the Active unit expecting to be standby!
Which sounds fair enough, however :
Firewall 2 says: WARN - Device is the Standby unit expecting to be standby!
What’s the best way to remove these warnings? The devices are going to stay in this configuration - a re-inventory didn’t seem to do it. Do I need to remove those auto checks? Or is this an action that needs to take place on the device?
Regards
Jolyon Brown
Limilo Ltd
Registered in England no: 07778174
Registered office: Netpark Incubator, Thomas Wright Way, Sedgefield, TS21 3FD
VAT no: 190425515
checkmk-en mailing list
checkmk-en@lists.mathias-kettner.de
http://lists.mathias-kettner.de/mailman/listinfo/checkmk-en
Hi
This is a cisco thing…the optimal state for a pair of ASAs in failover config is Primary running Active, Secondary running Standby…any other state is technically
not optimal. Fail the firewalls back over and the alarm will clear.
Thanks
Jason
On Behalf Of Jolyon Brown
···
Hi All
Slightly odd query - I’ve some SNMP checks against our production firewalls (Cisco devices). Check_MK / OMD works perfectly fine against these as you’d expect. However a (planned) failover between these pair of devices has left a warning
message loitering around against them.
Firewall 1 says : WARN - Device is the Active unit expecting to be standby!
Which sounds fair enough, however :
Firewall 2 says: WARN - Device is the Standby unit expecting to be standby!
What’s the best way to remove these warnings? The devices are going to stay in this configuration - a re-inventory didn’t seem to do it. Do I need to remove those auto checks? Or is this an action that needs to take place on the device?
Regards
Jolyon Brown
Limilo Ltd
Registered in England no: 07778174
Registered office: Netpark Incubator, Thomas Wright Way, Sedgefield, TS21 3FD
VAT no: 190425515
Jolyon,
Two options, either remove the failover check, which I don’t recommend. Or go into the device services, uncheck the cisco_asa_failover service and save the
manual check configuration. Then go back into the services and check it again. Once you activate the changes check_mk should show the correct configuration.
Thanks,
Chris
···
From: checkmk-en-bounces@lists.mathias-kettner.de [mailto:checkmk-en-bounces@lists.mathias-kettner.de]
On Behalf Of Jason Humes
Sent: Thursday, March 05, 2015 8:16 AM
To: Jolyon Brown; checkmk-en
Subject: Re: [Check_mk (english)] SNMP query - Cisco Firewall
Hi
This is a cisco thing…the optimal state for a pair of ASAs in failover config is Primary running Active, Secondary running Standby…any other state is technically
not optimal. Fail the firewalls back over and the alarm will clear.
Thanks
Jason
From:
checkmk-en-bounces@lists.mathias-kettner.de [mailto:checkmk-en-bounces@lists.mathias-kettner.de]
On Behalf Of Jolyon Brown
Sent: Tuesday, March 03, 2015 7:57 AM
To: checkmk-en
Subject: [Check_mk (english)] SNMP query - Cisco Firewall
Hi All
Slightly odd query - I’ve some SNMP checks against our production firewalls (Cisco devices). Check_MK / OMD works perfectly fine against these as you’d expect. However a (planned) failover between these pair of devices has left a warning
message loitering around against them.
Firewall 1 says : WARN - Device is the Active unit expecting to be standby!
Which sounds fair enough, however :
Firewall 2 says: WARN - Device is the Standby unit expecting to be standby!
What’s the best way to remove these warnings? The devices are going to stay in this configuration - a re-inventory didn’t seem to do it. Do I need to remove those auto checks? Or is this an action that needs to take place on the device?
Regards
Jolyon Brown
Limilo Ltd
Registered in England no: 07778174
Registered office: Netpark Incubator, Thomas Wright Way, Sedgefield, TS21 3FD
VAT no: 190425515