Getting traffic from tunnel interfaces in MRTG

Reply
L1 Bithead

Getting traffic from tunnel interfaces in MRTG

- I can plot data from physical interfaces (from the PA) in MRTG, such as for  instance
data from Eth1/1 and Eth1/2.  But MRTG's cfgmaker doesn't get any info about tunnel
interfaces. Could this be made possible, for instance by adapting some changes in the firewall.

                       If so, which one(s) ?

M.

L7 Applicator

Re: Getting traffic from tunnel interfaces in MRTG

Hello marce1000,

As far as I know, we can only monitor for physical interfaces in MRTG. Virtual interfaces like tunnel interfaces cannot be monitored with MRTG. There are 2 related queries in MRTG forum, but unfortunately not answered.

http://oss.oetiker.ch/mrtg/nabble-mrtg.en.html#nabble-td7579926  >>>>   Monitoring IPSec VPN tunnels on Palo Alto 200 firewall device

http://oss.oetiker.ch/mrtg/nabble-mrtg.en.html#nabble-td807526   >>>>>> Ipsec

Thanks

L6 Presenter

Re: Getting traffic from tunnel interfaces in MRTG

it is not possible to monitor tunnels.

Highlighted
L4 Transporter

Re: Getting traffic from tunnel interfaces in MRTG

Hello marce1000,

Currently not able to monitor logical tunnel interfaces with snmp.

You can reach out to your Sales Engineer to request to vote on the following Feature Request.

FR ID: 1054 - SNMP MIB variable for IPSec VPN tunnel status

FR ID: 1095 - Allow SNMP monitoring of VPN tunnel bandwidth


L6 Presenter

Re: Getting traffic from tunnel interfaces in MRTG

Hi Marce,

Right now Tunnel monitoring is not supported as mentioned above. Contact SE to vote for this FR.

Regards,

Hardik Shah

L2 Linker

Re: Getting traffic from tunnel interfaces in MRTG

Monitoring of tunnel traffic works now - but only after upgrading to PanOS 7.0

L7 Applicator

Re: Getting traffic from tunnel interfaces in MRTG

Thanks for the update on this FR for tunnel monitoring.  This is a welcome feature.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!