Monitoring site-to-site IPsec tunnel bandwidth via SNMP?

ericgearhart — Fri, 24 May 2013 14:45:35 GMT

Do the tunnel interfaces that get created as part of building a Site-to-Site IPSec tunnel show up via SNMP interface polling? That would be awesome if we could monitor tunnel bandwidth by walking the device and monitoring the ifInOctets and ifOutOctets for the tunnel interfaces themselves.

Re: Monitoring site-to-site IPsec tunnel bandwidth via SNMP?

ericgearhart — Fri, 24 May 2013 17:29:18 GMT

To answer myself it looks like an snmpwalk of 'ifName' doesn't show that tunnel interfaces are exposed... I tested on a PA5020 with PANOS4.1 and a PA4020 with PANOS 5

$ snmpwalk -v2c -c my_super_secret_snmp_v2_password pa4020 ifName

IF-MIB::ifName.1 = STRING: mgmt

IF-MIB::ifName.2 = STRING: ha1

IF-MIB::ifName.3 = STRING: ethernet1/1

IF-MIB::ifName.4 = STRING: ethernet1/2

IF-MIB::ifName.5 = STRING: ethernet1/3

IF-MIB::ifName.6 = STRING: ethernet1/4

IF-MIB::ifName.7 = STRING: ethernet1/5

IF-MIB::ifName.8 = STRING: ethernet1/6

IF-MIB::ifName.9 = STRING: ethernet1/7

IF-MIB::ifName.10 = STRING: ethernet1/8

IF-MIB::ifName.11 = STRING: ethernet1/9

IF-MIB::ifName.12 = STRING: ethernet1/10

IF-MIB::ifName.13 = STRING: ethernet1/11

IF-MIB::ifName.14 = STRING: ethernet1/12

IF-MIB::ifName.15 = STRING: ethernet1/13

IF-MIB::ifName.16 = STRING: ethernet1/14

IF-MIB::ifName.17 = STRING: ethernet1/15

IF-MIB::ifName.18 = STRING: ethernet1/16

IF-MIB::ifName.19 = STRING: ethernet1/17

IF-MIB::ifName.20 = STRING: ethernet1/18

IF-MIB::ifName.21 = STRING: ethernet1/19

IF-MIB::ifName.22 = STRING: ethernet1/20

topic Monitoring site-to-site IPsec tunnel bandwidth via SNMP? in General Topics

Monitoring site-to-site IPsec tunnel bandwidth via SNMP?

Re: Monitoring site-to-site IPsec tunnel bandwidth via SNMP?