Getting traffic from tunnel interfaces in MRTG

Showing results for 
Search instead for 
Did you mean: 

Getting traffic from tunnel interfaces in MRTG

L1 Bithead

- I can plot data from physical interfaces (from the PA) in MRTG, such as for  instance
data from Eth1/1 and Eth1/2.  But MRTG's cfgmaker doesn't get any info about tunnel
interfaces. Could this be made possible, for instance by adapting some changes in the firewall.

                       If so, which one(s) ?



L7 Applicator

Hello marce1000,

As far as I know, we can only monitor for physical interfaces in MRTG. Virtual interfaces like tunnel interfaces cannot be monitored with MRTG. There are 2 related queries in MRTG forum, but unfortunately not answered.  >>>>   Monitoring IPSec VPN tunnels on Palo Alto 200 firewall device   >>>>>> Ipsec


L6 Presenter

it is not possible to monitor tunnels.

L4 Transporter

Hello marce1000,

Currently not able to monitor logical tunnel interfaces with snmp.

You can reach out to your Sales Engineer to request to vote on the following Feature Request.

FR ID: 1054 - SNMP MIB variable for IPSec VPN tunnel status

FR ID: 1095 - Allow SNMP monitoring of VPN tunnel bandwidth

L6 Presenter

Hi Marce,

Right now Tunnel monitoring is not supported as mentioned above. Contact SE to vote for this FR.


Hardik Shah

L2 Linker

Monitoring of tunnel traffic works now - but only after upgrading to PanOS 7.0

Thanks for the update on this FR for tunnel monitoring.  This is a welcome feature.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!