topic Re: SNMP Polling - IPSec Tunnel Status in General Topics

SNMP Polling - IPSec Tunnel Status

welly_59 — Wed, 22 Aug 2018 11:04:55 GMT

I have downloaded the MIB's but cant find anything which would enable me to monitor the status of an IPSec tunnel.

Is it possible to monitor IPSec tunnel Up/Down via SNMP?

Re: SNMP Polling - IPSec Tunnel Status

tirexxerit — Wed, 22 Aug 2018 12:26:35 GMT

There are following traps but not sure if there is OID to monitor.

panVPNTunnelStatusDownTrap

panVPNTunnelStatusUpTrap

Re: SNMP Polling - IPSec Tunnel Status

OtakarKlier — Wed, 22 Aug 2018 13:26:55 GMT

Hello,

What I do is make sure I apply an IP address to each tunnel interface. Then have a monitoring solution that monitors the far end of the tunnel so that if its unreachable, there is something wrong with the tunnel possibly. Using a SIEM is another method if you are parsing the logs.

Just some thoughts.

Re: SNMP Polling - IPSec Tunnel Status

patmal — Thu, 23 Aug 2018 08:03:38 GMT

The tunnel interfaces show up as interfaces via SNMP, we monitor the status of them using IF-MIB

Re: SNMP Polling - IPSec Tunnel Status

Remo — Sat, 25 Aug 2018 21:48:49 GMT

@patmal

Not sure, but isn't the status of the tunnel interface always "up" even if the IPSec tunnel is down?

Re: SNMP Polling - IPSec Tunnel Status

welly_59 — Sun, 26 Aug 2018 03:47:24 GMT

Yep, you are correct