Monitoring ASA Client and Site to Site tunnels

Question

I looked through a lot of the VPN tunnel monitor requestes and it doesn't seem to be getting much updates. So in a question how can I monitor the up/down statis of both client and site to site IPSEC tunnels, either with a UnDP, or some other method within NPM?

Thanks,

Bob James

Stealthn · Answer

Thanks guys, I still can't believe Solarwinds doesn't have something for this considering the requests for it.

Anyway some of the tunnels are partners so I can't do anything to the other end. I am monitoring IPSEC phase 2 active tunnels, and am waiting for one to go down to see if I have the right MIB variable. The issue with this is I cannot correlate the index number the ASA uses for the tunnel to a client. If the correct MIB I might be able to figure out some labelling, but then again the tunnel might come back with a different index number so we'll see.

Bob James

Questionario · Answer

maybe a UnDP to see the amount of active IPSEC tunnels?

if a set number is fine for you... or you want to alert whenever it changes...

Donald_Francis · Answer

I mentioned this on a post a few minutes ago, maybe it applies here maybe it does not.

What if you use a loopback and assuming you have multiple connections advertise that loopback in only one direction over you link.  When your link drops so does your route to the loopback setting a normal down node alert off.