topic Re: VPN Tunnel Monitoring in General Topics

VPN Tunnel Monitoring

iguarino — Wed, 04 Jun 2014 18:13:31 GMT

What is generally used for a tunnel interface IP? Can it be arbitrary or must it be an IP that is part of the tunnel? I've read the docs on the site, but they don't say all that much about the interface IP itself.

Thanks!

Re: VPN Tunnel Monitoring

HULK — Wed, 04 Jun 2014 20:09:47 GMT

Hello Iguarino,

One of the most common purpose of using a IPSec tunnel interface with an IP address is, if you want to run a Dynamic Routing Protocol (that is OSPF, RIP, BGP) across the VPN tunnel. Hence, you can configure any IP subnet on it.

Thanks

Re: VPN Tunnel Monitoring

VinceM — Thu, 05 Jun 2014 15:16:44 GMT

Hi,

IP on tunnel interface can be very usefull for monitoring too (ping traceroute ...)

Re: VPN Tunnel Monitoring

santonic — Mon, 09 Jun 2014 08:26:20 GMT

I'd definitely recommend using an IP address which is a part of encryption domain (proxy ID) so you don't have to worry about adding extra routes.