IPSEC Tunnel monitor for policy based site to site VPN

[S.Shaikh647896]

We have connected site to site VPN tunnel with remote peered using policy based. so ca we monitor this IPsec VPN tunnel if it goes down with some trigger mechanism over email. 

[PavelK]

Hello @S.Shaikh647896

similar topic has been discussed in this thread: https://live.paloaltonetworks.com/t5/general-topics/alert-when-vpn-destination-stop-working/td-p/436.... Could you please check whether it is useful?

Kind Regards

Pavel

[S.Shaikh647896]

Hello @PavelK , yes it was useful. we also need to understand to enable tunnel monitoring what destination IP that can be use in tunnel monitor to monitor phase1 status.

Regards,

Sufiyan

[S.Shaikh647896]

While enabling tunnel monitor it is giving an error that "enabled tunnel monitoring while binding to tunnel interface tunnel.5 which has no IPV4 address assigned to it yet"

we are using policy based IPsec tunnel hence no IPv4 has assigned on tunnel interface.