topic Monitoring VPN tunnel status in General Topics

Monitoring VPN tunnel status

BigPalo — Thu, 04 Oct 2018 15:41:15 GMT

Hi,

I would like to monitor VPN is UP using NAGIOS. I think its necessary configure tunnel monitor for this, right??? what are the options to monitor VPN is UP? and monitor config profile.

Re: Monitoring VPN tunnel status

OtakarKlier — Thu, 04 Oct 2018 15:50:13 GMT

Hello,

The way I monitor my VPN tunnels with a 3rd party tool is to give each tunnel interface an IP address and put in a static route that it can only be accessed by that PAN. Then I point the tool at the far end of the tunnel's IP address. Since the IP can only be accessed if hte tunnel is up. If it ever goes down, the 3rd party tool alerts.

Hope that makes sense.

Re: Monitoring VPN tunnel status

BigPalo — Fri, 05 Oct 2018 06:39:06 GMT

Yes, but you need to configure a tunnel IP in the 3party side. I only want to change my config. What about "VPN monitor"?

Re: Monitoring VPN tunnel status

OtakarKlier — Fri, 05 Oct 2018 14:05:09 GMT

Hello,

That would be more for like a failover scenario. You could do a special log filter option that I recently learned about from @BPry, https://live.paloaltonetworks.com/t5/General-Topics/customised-option-for-email-alert-for-ISP-link-up-or-down/m-p/234052#M67086

Hope this helps!