Icinga 2 Plugin to check a Fritz!Box


Table of Contents

  1. Introduction
  2. Requirements
  3. Usage
  4. CheckCommand
  5. Security
  6. Contributors
  7. Thanks


This is a check plugin for Icinga 2 to monitor a Fritz!Box.


Required packages

You need the following packages installed to use this check plugin:

  • curl
  • bc

Please use your favorite package manager to install them.

Fritz!Box configuration

The TR-064 feature must be enabled on the Fritz!Box. You can do that by going to the following menu Heimnetz -> Netzwerk, switch to the tab Netzwerkeinstellungen. Now you must enable the entry Zugriff für Anwendungen zulassen. The Fritz!Box needs a restart, after that the TR-064 feature is enabled.

If you don't see the entry Zugriff für Anwendungen zulassen you must enable the advanced view(Erweiterte Ansicht).


  1. Get the latest stable release
  2. Open and extract the archive
  3. Execute the getSecurityPort script, to find your TR-064 SSL port
  4. Copy the check_tr64_fritz script to your Icinga 2 check plugin directory
  5. Add the CheckCommand definition to your Icinga 2 configuration. Have a look inside the Icinga 2 documentation for more details.
  6. Create a new service in Icinga 2 for your Fritz!Box



getSecurityPort <HOST>
Name Description
HOST Hostname or IP address of your Fritz!Box.


$ ./getSecurityPort
Your Fritz!Box Security Port (for TR-064 over SSL) is: 49443


check_tr64_fritz -h <HOSTNAME> -p <PORT> -u <USERNAME> -P <PASSWORD> -f <FUNCTION> -w <WARNING> -c <CRITICAL>


Name Description
-h Optional. Hostname or IP address of your Fritz!Box. Defaults to "".
-p Optional. The port number for TR-064 over SSL. Defaults to "49443".
-u Optional. Username to authenticate against the Fritz!Box. Defaults to "dslf-config".
-P Required. Password to authenticate against the Fritz!Box.
-f Optional. Function that should be checked. Defaults to "status".
-w Optional. Warning threshold. Defaults to "0".
-c Optional. Critical threshold. Defaults to "0".
-v Optional. Print current plugin version and usage text.
-d Optional. Print debug information (TR-064 XML output).

The username and password are the same as for the web interface of your Fritz!Box. If you don't use the login method with username and password, you can leave the username empty.


Name Description
status Returns the connection state.
linkuptime Returns the uptime of the WAN link.
uptime Returns the device uptime.
downstream Returns the usable downstream rate in MBit/s.
upstream Returns the usable upstream rate in MBit/s.
downstreamrate Returns the current downstream speed in MBit/s.
upstreamrate Returns the current upstream speed in MBits/s.
update Returns the update state.
thermometer Requires Index. Returns the connection status and temperature of a smart home thermometer device.

You can specify the index with a double point and the index number after the function name e.g. thermometer:3.


$ ./check_tr64_fritz -P password -f uptime
OK - Uptime 29990 seconds (0d 8h 19m 50s) | uptime=2999

$ ./check_tr64_fritz -P password -f thermometer:3
OK - Comet DECT 03.68 - Wohnzimmer CONNECTED 21.5 °C | thermometer_current_state=0 thermometer_current_temp=21.5 warn=0 crit=0

Please also read the seperate documentation about the Smart Home index


You can use the following CheckCommand definition for your Icinga 2 configuration.

object CheckCommand "check_tr64_fritz" {
  command = [ PluginDir + "/check_tr64_fritz" ]

  arguments = {
    "-h" = "$fritz_host$"
    "-p" = "$fritz_port$"
    "-u" = "$fritz_username$"
    "-P" = "$fritz_password$"
    "-f" = "$fritz_function$"
    "-w" = "$fritz_warning$"
    "-c" = "$fritz_critical$"

  vars.fritz_host = "$address$"
  vars.fritz_port = "49443"
  vars.fritz_username = "dslf-config"
  vars.fritz_function = "status"

You can find more information about a CheckCommand definition inside the offical Icinga 2 documentation.



The check_tr64_script use SSL to communicate with the Fritz!Box. Therefore you need to find out your SSL port for the TR-064 protocol. Please use the script getSecurityPort to find out the port that is used by your Fritz!Box.

The script getSecurityPort don't use the SSL protocol to communitcate with the Fritz!Box. The information about the used port for TR-064 over SSL is available without authentication against the Fritz!Box.

Icinga Web 2

You must specify your Fritz!Box password inside your Icinga 2 configuration to monitor your Fritz!Box, therefore ensure that you are hiding the custom password attribute in Icinga Web 2.

  1. Log in to Icinga Web 2.
  2. Go to Configuration -> Modules -> monitoring -> Security.
  3. Ensure that your custom password attribute is protected (defaults are *pw*,*pass*,community). If you named your custom variable frtiz_password it will be protected by the default entry *pass*.
  4. Check it by going to one of your Fritz!Box service and check if the password is display with ***.


Thanks to all contributors!