topic Re: Tunnel Monitoring in General Topics

Tunnel Monitoring

Sanjay_Ramaiah — Thu, 30 Nov 2023 10:39:08 GMT

Hi Team,

I wanted to setup Tunnel Monitoring for the Dynamic IPSec tunnels. Peer end IPs are dynamic, we have around 5 to 6 VPNs that we need to monitor. I was going through the SK where it says for Tunnel monitoring, we need to have IP address configured on the tunnel interface used for the VPN. And even the Tunnel interface IP can be any dummy IP which is not in the network. But if we use dummy IP will it be able to ping the peer IP which we need to monitor? Also configuring dummy IP on tunnel interface will have any impact to the tunnel which is already up and running without any issues. Please suggest.

Regards,

Sanjay S

Re: Tunnel Monitoring

reaper — Thu, 30 Nov 2023 13:47:52 GMT

if you set your dummy ips to an appropriate subnet (e.g. 169.254.0.1/30 & 169.254.0.2/30) that will create a 'connected' route in your routing table and have monitor packets find their way to the remote end of the tunnel

adding tunnel IPs won't interfere with the existing tunnels

Re: Tunnel Monitoring

Sanjay_Ramaiah — Tue, 05 Dec 2023 07:06:59 GMT

Thank you @reaper i will try to set this up and get back to the thread in case if i face any issues.