How to monitoring VPN IPsec

viky · 08-28-2007, 02:57 AM

Hi,

I would use a vendor independent way to monitoring the VPN-IPsec status

With snmp, I can monitoring VPN-Phase 1 and VPN-Phase 2; I use VPN-Phase 2 to generate a Trigger, which send an alarm... but I see that any time the VPN-Phase 2 is down without particular problem...

What can I do?
Is there an other way to monitoring a Tunnel IPsec??

Thanks so much

acid_kewpie · 08-29-2007, 12:21 PM

best way to monitor somethign is to use it. can you not periodically ping something on the other side of the VPN?

viky · 08-30-2007, 02:17 AM

Thank you for the reply

I thought about the ping, but I manage only one FW.

Normally, have the IPsec Phase2 a time to roll over?
If I don't send traffic in the tunnel, will the IPsec tunnel go down?

Anyway I try to improve the trigger's algorithm, with a timer and so...