VPN SNMP Monitoring

[Ernesto Fernandez gomez-pinto]

Hello,

Can i see the bytes of one IPsec session using SNMP?

Can i obtain a list of reason for a tunnel termination using SNMP?

Regards.

[wong34539]

It depends on which device you are looking at. If that device supports the MIB that has these variables supported, then an SNMP manager can query these values over SNMP. I believe PIX< VPN Concentrator and IOS routers will have different level of MIB support.

[merabtavart]

Check

http://www.vpnttg.com/

Advantage  of VPNTTG over other SNMP based monitoring software’s is  following:  Other (commonly used) software’s are working with static OID  numbers,  i.e. whenever tunnel disconnects and reconnects, it gets  assigned a new  OID number. This means that the historical data, gathered  on the  connection, is lost each time. However, VPNTTG works with VPN  peer’s IP  address and it stores for each VPN tunnel historical  monitoring data  into the SQL server and into the RRD (Round Robin  Database) file.

HTH