Zone proxy inside zone conundrum

Started by troffasky, September 17, 2021, 03:03:32 PM

Previous topic - Next topic

troffasky

Server: 3.9.235-1
Agent: 3.9.235-1
Agent config:

MasterServers=192.168.253.0/24
SubAgent = ping.nsm
# Allow server to proxy requests through here
EnableSNMPProxy=yes
EnableProxy=yes



Zone contains the agent + other devices.
The agent is 100% reachable from the server. I can ping it from the server, I can telnet to port 4700 on the agent from the server. If I packet capture on port 4700 on the agent, I can see dialogue between agent and server happening regularly.
I want this zone configured with this one agent as the proxy.
If I make this agent the proxy for the zone, it becomes unreachable.

Poll agent status. Note how quick it is. Doing a packet capture on agent and server I see no ICMP at all between them whilst the poll is running, and ICMP being down seems to preclude any further checks. Nothing logged on agent when poll is run even at debug level 5.

[2021.09.17 12:49:59] **** Poll request sent to server ****
[2021.09.17 12:49:59] Poll request accepted, waiting for outstanding polling requests to complete...
[2021.09.17 12:49:59] Starting status poll for node zabbixproxy
[2021.09.17 12:49:59]    Starting status poll on interface lo
[2021.09.17 12:49:59]       Current interface status is UNKNOWN
[2021.09.17 12:49:59]       Interface status cannot be determined
[2021.09.17 12:49:59]       Interface is UNKNOWN for 9417 polls (1 poll required for status change)
[2021.09.17 12:49:59]       Interface status after poll is UNKNOWN
[2021.09.17 12:49:59]    Finished status poll on interface lo
[2021.09.17 12:49:59]    Starting status poll on interface ens160
[2021.09.17 12:49:59]       Current interface status is UNKNOWN
[2021.09.17 12:49:59]       Starting ICMP ping via proxy
[2021.09.17 12:49:59]       ICMP proxy not available
[2021.09.17 12:49:59]       Interface is UNKNOWN for 1 poll (1 poll required for status change)
[2021.09.17 12:49:59]       Interface status after poll is UNKNOWN
[2021.09.17 12:49:59]    Finished status poll on interface ens160
[2021.09.17 12:49:59] Node is still unreachable
[2021.09.17 12:49:59] Finished status poll for node zabbixproxy
[2021.09.17 12:49:59] Node status after poll is CRITICAL
[2021.09.17 12:49:59] **** Poll completed successfully ****



Remove this agent as the proxy for the zone, re-poll:

[2021.09.17 12:50:31] **** Poll request sent to server ****
[2021.09.17 12:50:31] Poll request accepted, waiting for outstanding polling requests to complete...
[2021.09.17 12:50:31] Starting status poll for node zabbixproxy
[2021.09.17 12:50:31]    Starting status poll on interface lo
[2021.09.17 12:50:31]       Current interface status is UNKNOWN
[2021.09.17 12:50:31]       Interface status cannot be determined
[2021.09.17 12:50:31]       Interface is UNKNOWN for 9418 polls (1 poll required for status change)
[2021.09.17 12:50:31]       Interface status after poll is UNKNOWN
[2021.09.17 12:50:31]    Finished status poll on interface lo
[2021.09.17 12:50:31]    Starting status poll on interface ens160
[2021.09.17 12:50:31]       Current interface status is UNKNOWN
[2021.09.17 12:50:31]       Starting ICMP ping
[2021.09.17 12:50:31]       Interface is NORMAL for 1 poll (1 poll required for status change)
[2021.09.17 12:50:31]       Interface status changed to NORMAL
[2021.09.17 12:50:31]       Interface status after poll is NORMAL
[2021.09.17 12:50:31]    Finished status poll on interface ens160
[2021.09.17 12:50:31] Node recovered from unreachable state
[2021.09.17 12:50:31]    Starting status poll on interface lo
[2021.09.17 12:50:31]       Current interface status is UNKNOWN
[2021.09.17 12:50:31]       Interface status cannot be determined
[2021.09.17 12:50:31]       Interface is UNKNOWN for 9419 polls (1 poll required for status change)
[2021.09.17 12:50:31]       Interface status after poll is UNKNOWN
[2021.09.17 12:50:31]    Finished status poll on interface lo
[2021.09.17 12:50:31]    Starting status poll on interface ens160
[2021.09.17 12:50:31]       Current interface status is NORMAL
[2021.09.17 12:50:31]       Starting ICMP ping
[2021.09.17 12:50:31]       Interface is NORMAL for 1 poll (1 poll required for status change)
[2021.09.17 12:50:31]       Interface status after poll is NORMAL
[2021.09.17 12:50:31]    Finished status poll on interface ens160
[2021.09.17 12:50:31] Node is connected
[2021.09.17 12:50:37] Finished status poll for node zabbixproxy
[2021.09.17 12:50:37] Node status after poll is MAJOR
[2021.09.17 12:50:37] **** Poll completed successfully ****



I feel like I'm missing something here.

Victor Kirhenshtein

Hi!

So initially zone is without proxy? Try to set this node as proxy for the zone, then run full configuration poll on it. Also please try to set debug level 6 on server for tag poll.*, and check server log after running status and configuration poll.

Best regards,
Victor

troffasky

It seems like upgrading to 4.0 got this working without me having to do anything else.