Tunnel Monitoring

[Sanjay_Ramaiah]

Hi Team,

I wanted to setup Tunnel Monitoring for the Dynamic IPSec tunnels. Peer end IPs are dynamic, we have around 5 to 6 VPNs that we need to monitor. I was going through the SK where it says for Tunnel monitoring, we need to have IP address configured on the tunnel interface used for the VPN. And even the Tunnel interface IP can be any dummy IP which is not in the network. But if we use dummy IP will it be able to ping the peer IP which we need to monitor? Also configuring dummy IP on tunnel interface will have any impact to the tunnel which is already up and running without any issues. Please suggest.

Regards,

Sanjay S

[reaper]

if you set your dummy ips to an appropriate subnet (e.g. 169.254.0.1/30 & 169.254.0.2/30) that will create a 'connected' route in your routing table and have monitor packets find their way to the remote end of the tunnel

adding tunnel IPs won't interfere with the existing tunnels

[Sanjay_Ramaiah]

Thank you @reaper i will try to set this up and get back to the thread in case if i face any issues.