Cisco VPN Monitoring

mjonathan

Greetings to the community,

I need to monitor VPNs on several Cisco models: Cisco 3945, Cisco 2851, ASR1002-HX, and Cisco 7206. Do you know if SolarWinds monitors them natively or if it needs to be done via OID? If so, do you know which ones? Thanks in advance.

naveensingh43

1. Native Support via SolarWinds NPM

• Cisco ASA devices have native SNMP pollers in SolarWinds NPM for:
  • Site-to-Site VPNs
  • Remote Access VPNs
• These pollers include:
  • N.VPN_SiteToSite_Status.SNMP.CiscoAsa
  • N.VPN_SiteToSite_Detail.SNMP.CiscoAsa
  • N.VPN_RemoteAccess.SNMP.CiscoAsa 
    1

However, Cisco ISR (3945, 2851), ASR1002-HX, and 7206 are not ASA models, so they do not benefit from these native VPN pollers.

2. Monitoring via SNMP OIDs

• For non-ASA Cisco devices, custom SNMP monitoring using Universal Device Pollers (UnDP) is typically required.
• You’ll need to identify the correct SNMP OIDs for VPN tunnel status, active sessions, and error states.
• Some relevant Cisco OIDs include:
  • 1.3.6.1.4.1.9.9.171 (used for VPN monitoring on Cisco Firepower)
  • 1.3.6.1.4.1.9.9.87 and 1.3.6.1.4.1.9.9.711 (used for various VPN and crypto map stats)

Monitor VPN on Cisco ASA, Palo Alto, and other firewalls with NPM

Hope above detail can help you. If still you unable find the OIDs reach Cisco support.