+ <\/strong>Click System -> Package Manager<\/strong><\/p>\n

\n
• \n

  <\/figure>\n<\/li>\n<\/ul>\n

  + T\u1ea1i tab Available packages<\/strong> t\u00ecm ki\u1ebfm zabbix-agent<\/strong> v\u00e0 c\u00e0i \u0111\u1eb7t Zabbix agent package<\/strong>. <\/p>\n

  \n
  • \n

    <\/figure>\n<\/li>\n<\/ul>\n

    + C\u00e0i \u0111\u1eb7t zabbix-agent version 4.4<\/p>\n

    \n
    • \n

      <\/figure>\n<\/li>\n<\/ul>\n

      + Confirm c\u00e0i \u0111\u1eb7t<\/p>\n

      \n
      • \n

        <\/figure>\n<\/li>\n<\/ul>\n

        + C\u00e0i \u0111\u1eb7t zabbix-agent th\u00e0nh c\u00f4ng<\/p>\n

        \n
        • \n

          <\/figure>\n<\/li>\n<\/ul>\n

          \n
          • C\u1ea5u h\u00ecnh zabbix agent<\/strong><\/li>\n<\/ul>\n

            + Click Services -> zabbix-agent 4.4<\/p>\n

            \n
            • \n

              <\/figure>\n<\/li>\n<\/ul>\n

              + T\u1ea1i m\u1ee5c “Zabbix Agent Settings”<\/strong> thi\u1ebft l\u1eadp c\u00e1c tham s\u1ed1<\/p>\n

              Server: \u0110\u1ecba ch\u1ec9 IP c\u1ee7a zabbix server
ServerActive: \u0110\u1ecba ch\u1ec9 IP c\u1ee7a zabbix server
Hostname: Hostname c\u1ee7a pfsense firewall
Listen IP: S\u1eed d\u1ee5ng 0.0.0.0 \u0111\u1ec3 l\u1eafng nghe t\u1ea5t c\u1ea3 c\u00e1c \u0111\u1ecba ch\u1ec9 IP
Listen Port: Port m\u1eb7c \u0111\u1ecbnh c\u1ee7a zabbix agent<\/code><\/p>\n

              \n
              • \n

                <\/figure>\n<\/li>\n<\/ul>\n

                + T\u1ea1i m\u1ee5c “TLS-RELATED Parameters<\/strong>” thi\u1ebft l\u1eadp c\u00e1c tham s\u1ed1<\/p>\n

                TLS Connect - PSK
TLS Accept - PSK
TLS PSK IDENTITY - key-pfsense-01
TLS PSK - <\/code>fb6616cd582a2fa0aa161cab3423a9ca640c931b21c8c2e3b7132d6db75aadff (key t\u1ef1 t\u1ea1o c\u1ee7a b\u1ea1n min 32 k\u00fd t\u1ef1) <\/code><\/p>\n

                \n
                • \n

                  <\/figure>\n<\/li>\n<\/ul>\n

                  + L\u01b0u l\u1ea1i c\u1ea5u h\u00ecnh<\/p>\n

                  \n
                  • \n

                    <\/figure>\n<\/li>\n<\/ul>\n

                    \n
                    • C\u1ea5u h\u00ecnh rules<\/strong><\/li>\n<\/ul>\n

                      M\u1eb7c \u0111\u1ecbnh fpsense firewall kh\u00f4ng cho ph\u00e9p k\u1ebft n\u1ed1i ra ngo\u00e0i th\u00f4ng qua WAN interface. Ta ph\u1ea3i t\u1ea1o m\u1ed9t rules cho ph\u00e9p k\u1ebft n\u1ed1i v\u1edbi zabbix server. <\/p>\n

                      + Firewall -> Rules<\/p>\n

                      \n
                      • \n

                        <\/figure>\n<\/li>\n<\/ul>\n

                        + Add rule m\u1edbi t\u1ea1i m\u1ee5c “Edit Firewall Rule<\/strong>” thi\u1ebft l\u1eadp c\u00e1c tham s\u1ed1 sau:<\/p>\n

                        Action: Pass
Interface: WAN
Address family: IPV4
Protocol: TCP <\/code><\/p>\n

                        \n
                        • \n

                          <\/figure>\n<\/li>\n<\/ul>\n

                          + \u1ede ph\u1ea7n c\u1ea5u h\u00ecnh Source c\u1ea7n cho ph\u00e9p pfsense giao ti\u1ebfp v\u1edbi zabbix server.<\/p>\n

                          \n
                          • \n

                            <\/figure>\n<\/li>\n<\/ul>\n

                            + Ph\u1ea7n Destination<\/strong> thi\u1ebft l\u1eadp:<\/p>\n

                            Destination: Wan address
Destination port range- From (Other) 10050\u00a0 to (Other) 10050<\/code><\/p>\n

                            \n
                            • \n

                              <\/figure>\n<\/li>\n<\/ul>\n

                              + Save v\u00e0 \u00e1p d\u1ee5ng rule<\/p>\n

                              \n
                              • \n

                                <\/figure>\n<\/li>\n<\/ul>\n

                                3. Thi\u1ebft l\u1eadp tr\u00ean zabbix server<\/h2>\n

                                \n
                                • C\u00f3 th\u1ec3 s\u1eed d\u1ee5ng l\u1ec7nh \u0111\u1ec3 ki\u1ec3m tra c\u00e1c th\u00f4ng tin thu th\u1eadp \u0111\u01b0\u1ee3c t\u1eeb firewall pfsense<\/strong><\/li>\n<\/ul>\n

                                  touch \/tmp\/key-pfsense-01
vi \/tmp\/key-pfsense-01<\/code><\/p>\n

                                  Th\u00eam n\u00f4i dung \u1edf d\u01b0\u1edbi ch\u00ednh l\u00e0 key \u0111\u00e3 thi\u1ebft l\u1eadp \u1edf pfsense trong ph\u1ea7n 1 v\u00e0o file key-pfsense-01
a97132d6ca640nhanhoac2e3bdb75aa97132d6ca640nhanhoac2e3bdb75a<\/code><\/p>\n

                                  + S\u1eed d\u1ee5ng l\u1ec7nh sau \u0111\u1ec3 check<\/p>\n

                                  zabbix_get -s 172.16.3.148 -k \"agent.version\" --tls-connect=psk --tls-psk-identity=\"key-pfsense-01\" --tls-psk-file=\/tmp\/key-pfsense-01<\/code><\/p>\n

                                  \n
                                  • \n

                                    <\/figure>\n<\/li>\n<\/ul>\n

                                    + C\u00f3 k\u1ebft qu\u1ea3 tr\u1ea3 v\u1ec1 t\u1ee9c l\u00e0 zabbix server \u0111\u00e3 l\u1ea5y \u0111\u01b0\u1ee3c th\u00f4ng tin t\u1eeb pfsense (N\u1ebfu kh\u00f4ng \u0111\u01b0\u1ee3c b\u1ea1n ph\u1ea3i reboot firewall pfsense).<\/p>\n

                                    \n
                                    • Add host pfsense tr\u00ean zabbix server<\/strong><\/li>\n<\/ul>\n

                                      + Login zabbix server <\/p>\n

                                      \n
                                      • \n

                                        <\/figure>\n<\/li>\n<\/ul>\n

                                        + Add host pfsense<\/p>\n

                                        Click\u00a0Configuration -> Hosts -> Create host<\/strong><\/p>\n

                                        \n
                                        • \n

                                          <\/figure>\n<\/li>\n<\/ul>\n

                                          + Nh\u1eadp c\u00e1c th\u00f4ng tin c\u1ee7a firewall pfsense \u0111\u1ec3 add host t\u1ea1i tab “Host<\/strong>“<\/p>\n

                                          \n
                                          • \n

                                            <\/figure>\n<\/li>\n<\/ul>\n

                                            + L\u1ef1a ch\u1ecdn template t\u1ea1i tab \u201cTempaltes<\/strong>\u201d <\/p>\n

                                            \n
                                            • \n

                                              <\/figure>\n<\/li>\n<\/ul>\n

                                              + T\u1ea1i tab “Encryption<\/strong>” l\u1ef1a ch\u1ecdn PSK <\/strong>v\u00e0 nh\u1eadp th\u00f4ng tin key \u0111\u00e3 khai b\u00e1o tr\u00ean pfsense.<\/p>\n

                                              \n
                                              • \n

                                                <\/figure>\n<\/li>\n<\/ul>\n

                                                + Add host th\u00e0nh c\u00f4ng <\/p>\n

                                                \n
                                                • \n

                                                  <\/figure>\n<\/li>\n<\/ul>\n

                                                  \n
                                                  • Sau khi add host th\u00e0nh c\u00f4ng t\u00f9y thu\u1ed9c v\u00e0o time interval c\u1ee7a tempalte m\u00e0 metric s\u1ebd \u0111\u01b0\u1ee3c zabbix server thu th\u1eadp<\/li>\n
                                                  • Ki\u1ec3m tra k\u1ebft qu\u1ea3:\u00a0Monitoring -> Lastest data -> L\u1ef1a ch\u1ecdn host<\/strong><\/li>\n<\/ul>\n
                                                    \n
                                                    • \n

                                                      <\/figure>\n<\/li>\n<\/ul>\n

                                                      \n
                                                      • \n

                                                        <\/figure>\n<\/li>\n<\/ul>\n

                                                        V\u1edbi c\u00e1c b\u01b0\u1edbc c\u01a1 b\u1ea3n tr\u00ean s\u1ebd gi\u00fap b\u1ea1n gi\u00e1m s\u00e1t \u0111\u01b0\u1ee3c firewall pfsense b\u1eb1ng zabbix. Hi\u1ec7n t\u1ea1i Onet.vn<\/a> \u0111\u00e3 cung c\u1ea5p VPS \u0111\u00f3ng g\u00f3i zabbix b\u1ea1n c\u00f3 th\u1ec3 tham kh\u1ea3o v\u00e0 s\u1eed d\u1ee5ng. <\/p>\n","protected":false},"excerpt":{"rendered":"

                                                        Trong m\u1ed9t h\u1ec7 th\u1ed1ng m\u1ea1ng th\u00e0nh ph\u1ea7n kh\u00f4ng th\u1ec3 thi\u1ebfu ch\u00ednh c\u00e1c firewall, t\u00f9y thu\u1ed9c v\u00e0o quy m\u00f4 c\u1ee7a h\u1ec7 th\u1ed1ng m\u00e0 l\u1ef1a ch\u1ecdn firewall n\u00e0o. \u0110\u1ed1i v\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng v\u1eeba v\u00e0 nh\u1ecf vi\u1ec7c l\u1ef1a ch\u1ecdn s\u1eed d\u1ee5ng firewall l\u00e0 t\u01b0\u01a1ng \u0111\u1ed1i kh\u00f3 v\u00ec ph\u1ea3i ch\u1ecdn \u0111\u01b0\u1ee3c firewall \u0111\u00e1p \u1ee9ng \u0111\u01b0\u1ee3c y\u00eau c\u1ea7u m\u00e0 […]<\/p>\n","protected":false},"author":1,"featured_media":148197,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[276],"tags":[],"_links":{"self":[{"href":"https:\/\/onet.com.vn\/wp-json\/wp\/v2\/posts\/148196"}],"collection":[{"href":"https:\/\/onet.com.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onet.com.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onet.com.vn\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/onet.com.vn\/wp-json\/wp\/v2\/comments?post=148196"}],"version-history":[{"count":0,"href":"https:\/\/onet.com.vn\/wp-json\/wp\/v2\/posts\/148196\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/onet.com.vn\/wp-json\/wp\/v2\/media\/148197"}],"wp:attachment":[{"href":"https:\/\/onet.com.vn\/wp-json\/wp\/v2\/media?parent=148196"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onet.com.vn\/wp-json\/wp\/v2\/categories?post=148196"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onet.com.vn\/wp-json\/wp\/v2\/tags?post=148196"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}