<font size=2 face="sans-serif">Hello,</font>
<br>
<br><font size=2 face="sans-serif">You get it. To monitor with XYMON a
special network zone, you have to use the XYMON proxy.</font>
<br>
<br><font size=2 face="sans-serif">To install it:</font>
<br><font size=2 face="sans-serif">A.\ Install
a XYMON server.</font>
<br><font size=2 face="sans-serif">B.\ Change
its task.cfg file as follow:</font>
<br><font size=2 face="sans-serif"> *
DISABLE the xymond (daemon fr the XYMONserver)</font>
<br><font size=2 face="sans-serif"> *
Enable xymonproxy (proxy XYMON), xymonnet (ping and nework test) and xymonclient
(local XYMONclient)</font>
<br>
<br>
<div>
<br><font size=1 face="Courier New">[xymond]</font>
<br><font size=1 face="Courier New"> DISABLED</font>
<br>
<br><font size=1 face="Courier New">[xymonproxy]</font>
<br><font size=1 face="Courier New"> ENVFILE
<xymon_path>/etc/xymonserver.cfg</font>
<br><font size=1 face="Courier New"> CMD $XYMONHOME/bin/xymonproxy
--server=YOUR.XYMON.SERVER.IP --report=$MACHINE.xymonproxy --no-daemon
--pidfile=$XYMONSERVERLOGS/xymonproxy.pid</font>
<br><font size=1 face="Courier New"> LOGFILE
$XYMONSERVERLOGS/xymonproxy.log</font>
<br>
<br><font size=1 face="Courier New">[xymonnet]</font>
<br><font size=1 face="Courier New"> ENVFILE
<xymon_path>/etc/xymonserver.cfg</font>
<br><font size=1 face="Courier New"> CMD xymonnet
--report --ping --checkresponse</font>
<br><font size=1 face="Courier New"> LOGFILE
$XYMONSERVERLOGS/xymonnet.log</font>
<br><font size=1 face="Courier New"> INTERVAL
5m</font>
<br>
<br>
<br>
<br><font size=2 face="sans-serif">C.\
Modify/check the hosts.cfg on both xymon proxy and xymon server.</font>
<br><font size=2 face="sans-serif">
On the xymon proxy, indicate the list of the
targets of the "special network zone" you want to monitor</font>
<br><font size=2 face="sans-serif">
On the xymon server, indicate the list of
the targets of the "special network zone" you want to monitor
with the noconn tag at the end. This disable the ping from the xymon server.
It will be done from the the xymon server by the xymonnet process. Don't
do it for the xymon proxy itself.</font>
<br>
<br><font size=2 face="sans-serif">D.\ Configure
your agents in your "special network zone" to send data to the
xymon proxy.</font>
<br>
<br><font size=2 face="sans-serif">E.\ Configure
your FW to enable these flows:</font>
<br><font size=2 face="sans-serif">
- xymonproxy -----> xymonserver:1984 (TCP)</font>
<br><font size=2 face="sans-serif">
- xymonserver -----> xymonproxy (ICMP)</font>
<br>
<br><font size=2 face="sans-serif">F.\ Start your xymonproxy the same way
you do for a xymon server.</font>
<br>
<br><font size=2 face="sans-serif">G.\ Enjoy !! - Rq: Data on communication
flow are shown in the the xymonproxy xymon test.</font>
<br>
<br>
<br>
<br>
<br>
<br><font size=2 face="sans-serif">Cordialement, Regards,Mit freundlichen
Grüßen,<br>
<br>
Gautier BEGIN<br>
<br>
<br>
<br>
CSC • This is a PRIVATE message. If you are not the intended recipient,
please delete without copying and kindly advise us by e-mail of the mistake
in delivery. NOTE: Regardless of content, this e-mail shall not operate
to bind CSC to any order or other contract unless pursuant to explicit
written agreement or government initiative expressly permitting the use
of e-mail for such purpose<br>
• <br>
CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10
Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in
France: RCS Nanterre B 315 268 664</font>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From:
</font><font size=1 face="sans-serif">"L.M.J" <linuxmasterjedi@free.fr></font>
<br><font size=1 color=#5f5f5f face="sans-serif">To:
</font><font size=1 face="sans-serif"><xymon@xymon.com></font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date:
</font><font size=1 face="sans-serif">03/10/2014 07:07 PM</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject:
</font><font size=1 face="sans-serif">[Xymon] XYmon
in a DMZ</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Sent by:
</font><font size=1 face="sans-serif">"Xymon"
<xymon-bounces@xymon.com></font>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size=2>Hi,<br>
<br>
Can someone explain me if I could do this with XYmon !<br>
1) DMZ hosts send all data to a "local DMZ xymon"<br>
2) XYmon global server fetch all data from this "local DMZ
xymon"<br>
<br>
I bet I have to use "xymonproxy", but I read and re-read
the documentation,<br>
it's very cristal clear for me. Can someone explain to the big picture<br>
please ?<br>
<br>
Also, I have hosts in a remote site, I installed a Xymon server
there. Remote<br>
hosts report to this remote XYmon server. For a few hosts, I add
an extra IP<br>
to XYMSERVERS and it sends also data to my XYmon global server<br>
Is it the best to do it ? Like the previous questin, can the XYmon
global<br>
server fetch data from the remote Xymon server.<br>
<br>
With my choice : 1 global xymon, 1 on each remote location, I have
to watch a<br>
couple of the XYmon pages, I don't have an global overview...<br>
<br>
How do you guys do ? Any Xymon architecture advices is welcome
!<br>
<br>
Thanks<br>
<br>
-- <br>
LMJ<br>
"May the source be with you my young padawan"<br>
_______________________________________________<br>
Xymon mailing list<br>
Xymon@xymon.com<br>
</font></tt><a href=http://lists.xymon.com/mailman/listinfo/xymon><tt><font size=2>http://lists.xymon.com/mailman/listinfo/xymon</font></tt></a><tt><font size=2><br>
</font></tt>
<br></div>