Getting traffic from tunnel interfaces in MRTG

[marce1000]

- I can plot data from physical interfaces (from the PA) in MRTG, such as for  instance
data from Eth1/1 and Eth1/2.  But MRTG's cfgmaker doesn't get any info about tunnel
interfaces. Could this be made possible, for instance by adapting some changes in the firewall.

                       If so, which one(s) ?

M.

[HULK]

Hello marce1000,

As far as I know, we can only monitor for physical interfaces in MRTG. Virtual interfaces like tunnel interfaces cannot be monitored with MRTG. There are 2 related queries in MRTG forum, but unfortunately not answered.

http://oss.oetiker.ch/mrtg/nabble-mrtg.en.html#nabble-td7579926  >>>>   Monitoring IPSec VPN tunnels on Palo Alto 200 firewall device

http://oss.oetiker.ch/mrtg/nabble-mrtg.en.html#nabble-td807526   >>>>>> Ipsec

Thanks

[panos]

it is not possible to monitor tunnels.

[dmaynard]

Hello marce1000,

Currently not able to monitor logical tunnel interfaces with snmp.

You can reach out to your Sales Engineer to request to vote on the following Feature Request.

FR ID: 1054 - SNMP MIB variable for IPSec VPN tunnel status

FR ID: 1095 - Allow SNMP monitoring of VPN tunnel bandwidth

[hshah]

Hi Marce,

Right now Tunnel monitoring is not supported as mentioned above. Contact SE to vote for this FR.

Regards,

Hardik Shah

[lavision]

Monitoring of tunnel traffic works now - but only after upgrading to PanOS 7.0

[pulukas]

Thanks for the update on this FR for tunnel monitoring.  This is a welcome feature.