topic Getting traffic from tunnel interfaces in MRTG in General Topics

Getting traffic from tunnel interfaces in MRTG

marce1000 — Wed, 29 Oct 2014 09:26:52 GMT

- I can plot data from physical interfaces (from the PA) in MRTG, such as for instance
data from Eth1/1 and Eth1/2. But MRTG's cfgmaker doesn't get any info about tunnel
interfaces. Could this be made possible, for instance by adapting some changes in the firewall.

If so, which one(s) ?

Re: Getting traffic from tunnel interfaces in MRTG

HULK — Wed, 29 Oct 2014 12:35:44 GMT

Hello marce1000,

As far as I know, we can only monitor for physical interfaces in MRTG. Virtual interfaces like tunnel interfaces cannot be monitored with MRTG. There are 2 related queries in MRTG forum, but unfortunately not answered.

http://oss.oetiker.ch/mrtg/nabble-mrtg.en.html#nabble-td7579926 >>>> Monitoring IPSec VPN tunnels on Palo Alto 200 firewall device

http://oss.oetiker.ch/mrtg/nabble-mrtg.en.html#nabble-td807526 >>>>>> Ipsec

Thanks

Re: Getting traffic from tunnel interfaces in MRTG

Retired Member — Wed, 29 Oct 2014 12:40:25 GMT

it is not possible to monitor tunnels.

Re: Getting traffic from tunnel interfaces in MRTG

dmaynard — Wed, 29 Oct 2014 12:56:00 GMT

Hello marce1000,

Currently not able to monitor logical tunnel interfaces with snmp.

You can reach out to your Sales Engineer to request to vote on the following Feature Request.

FR ID: 1054 - SNMP MIB variable for IPSec VPN tunnel status

FR ID: 1095 - Allow SNMP monitoring of VPN tunnel bandwidth

Re: Getting traffic from tunnel interfaces in MRTG

hshah — Wed, 29 Oct 2014 13:37:07 GMT

Hi Marce,

Right now Tunnel monitoring is not supported as mentioned above. Contact SE to vote for this FR.

Regards,

Hardik Shah

Re: Getting traffic from tunnel interfaces in MRTG

lavision — Thu, 18 Jun 2015 08:21:18 GMT

Monitoring of tunnel traffic works now - but only after upgrading to PanOS 7.0

Re: Getting traffic from tunnel interfaces in MRTG

pulukas — Thu, 18 Jun 2015 10:41:09 GMT

Thanks for the update on this FR for tunnel monitoring. This is a welcome feature.