[fortigate_ipsecvpn_tunnel] Invalid check parameter string 'None' with CheckMK 1.6

[koeberlue]

We are trying to use the fortigate_ipsecvpn_tunnel plugin witch CheckMK 1.6b6 Enterprise (with CMK Microcore).

What's okay:

• Running Inventory via CLI and Bulk Discovery (Services found)
• Showing Service State
• Configuring Service Parameters via WATO

What doesn't run:

• Inventorize Services via WATO (Host Properties => Services)
  => Error: "Invalid check parameter string 'None'

When removing the Plugin everything runs fine.

Unfortunately the error message is pretty generic here. Do we need to change something in our configuration? Or is the plugin not yet compatible with CheckMK 1.6?

[davidedg]

Hi, as 1.6 is still beta, we did not have a chance to try it in production yet. Also, mind that we only use the CRE version, so we do not develop features for the CEE (e.g. Plugin bakery). I'll try the plugin again when 1.6 will be out and mature. Bye! Il mar 20 ago 2019, 15:40 koeberlue <notifications@github.com> ha scritto:

…

We are trying to use the fortigate_ipsecvpn_tunnel plugin witch CheckMK 1.6b6 Enterprise (with CMK Microcore). What's okay: - Running Inventory via CLI and Bulk Discovery (Services found) - Showing Service State - Configuring Service Parameters via WATO What doesn't run: - Inventorize Services via WATO (Host Properties => Services) => Error: "Invalid check parameter string 'None' When removing the Plugin everything runs fine. Unfortunately the error message is pretty generic here. Do we need to change something in our configuration? Or is the plugin not yet compatible with CheckMK 1.6? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#3?email_source=notifications&email_token=ABKQ7GQV6LCXY2J42ADDJF3QFPX3DA5CNFSM4INWZL32YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4HGH7KBA>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ABKQ7GT5JN2XGJ752XZFIGTQFPX3DANCNFSM4INWZL3Q> .

[gildasiosousa]

Hi davidedg, thanks for sharing your knowledge, I'm trying to create a plugin with this command that checks the health of the tunels. Would you help me?

FGT # diagnose sys virtual-wan-link health-check
Health Check(server):
Seq(1): state(alive), packet-loss(0.000%) latency(15.247), jitter(5.231) sla_map=0x0
Seq(2): state(alive), packet-loss(0.000%) latency(13.621), jitter(6.905) sla_map=0x0

[davidedg]

FGT # diagnose sys virtual-wan-link health-check

Hi gildasiosousa, those are fgt cli commands, while instead the plugin is using SNMP.
You may try starting to explore if those commands (their results) are somehow exposed by the snmp interface.
You can find the SNMP mib file on the support.fortinet.com page, under firmware downloads (together with the firmware files for the specific version).
Then use a MIB Browser to explore the mib against a live fortigate unit.
I use ManageEngine Mibbrowser Free Tool for these tasks.

HTH.
Bye!