vrf-aware IPSEC and monitoring

[mike]

Hi,

I am working on a project with overlap ip addresses with vrf-aware IPSEC, I am wondering how I should monitor those IPSEC per vrf bases. I tried look at SNMP mib, it seems they only have traffic counter on per vrf based, is there any counter for IPSEC sa or IPSEC sa error per VRF base. Or if there is any other monitoring solution I would love to hear that.

Appreciate,

~mike

[a-vazquez]

You will need to configure the isakmp profile's and to use the ipsec vrf aware feature with them.

Please see the link : http://www.cisco.com/en/US/products/ps6635/products_white_paper0900aecd8034bd59.shtml