[strongSwan] Monitoring stronswan

[Michael Stiller]

Hi.

What i do is, that i have another strongswan setup on (another) monitoring machine.

This one tries to connect to the vpn server periodically using a special "monitoring user / monitoring command”.

After the connection succeeded i do a “curl” to an "ip address mirror” and compare it with the expected value (e.g. address of the vpn server)

If not -> alarm.

Best regards,

Michael


> On 14. Dec 2017, at 11:29, Michael Schwartzkopff <ms at sys4.de> wrote:
> 
> Hi,
> 
> 
> What is the best way to do a fault monitoring of a strongswan server? In
> the first place, my monitoring service should check if the server is
> able to offer the VPN service, which means i.e. that UDP/500 will send a
> correct answer if checked from the outside.
> 
> 
> Any ideas?
> 
> 
> Mit freundlichen Grüßen,
> 
> -- 
> 
> [*] sys4 AG
> 
> https://sys4.de, +49 (89) 30 90 46 64
> Schleißheimer Straße 26/MG,80333 München
> 
> Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
> Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
> Aufsichtsratsvorsitzender: Florian Kirstein
> 
> 

-- 
2scale GmbH, Schanzenstr. 20, 40549 Düsseldorf
Amtsgericht: 		Düsseldorf HRB 50718
Geschäftsführer: 	Georg von Zezschwitz, Dirk Vleugels
USt-IdNr.: 		DE 210936505