-
Re: VPN Tunnel Monitoring
havox May 26, 2017 8:08 AM (in response to harrisa94)1 of 1 people found this helpfulWe were doing something similar with a VPN that we wanted to make sure that it was up all the time. We setup the UDP using the cikeTunRemoteValue OID (1.3.6.1.4.1.9.9.171.1.2.3.1.7) to grab the IP addresses on the far end of the tunnel. The MIB Value Type is Raw Value and the SNMP Get Type is GET TABLE. We only cared about a single IP so we set up alerting around that. This required help from Solarwinds support but we managed to get it going. See image for alert triggers.
Not sure if this fits your use case, but hopefully it helps a bit.
-Jon
-
Re: VPN Tunnel Monitoring
kboldizar Jan 29, 2018 3:05 PM (in response to harrisa94)That's a tough one being that they aren't all supposed to be up all the time. I've done this for someone in the past that worked for their situation. Perhaps you can use this idea or build off of it?
One thing we did for setting up a VPN as a dependency was to monitor the public IP of the VPN endpoint and the internal private IP of that same device. We'd made everything that's behind the VPN dependent on the private IP, and the private IP dependent on the public IP. That allows you to determine whether it's an ISP issue or a VPN issue that interrupted the connection. If the public IP is still available, but not the private, then the VPN itself was having an issue. If the public IP went down, then the issue is more likely an ISP issue.
Maybe not 100% relevant but still an option for VPN monitoring.
-KatieB
-
Re: VPN Tunnel Monitoring
rschroederJan 29, 2018 3:19 PM (in response to harrisa94)
1 of 1 people found this helpfulHave you tried using NPM 12.2's latest Cisco ASA VPN monitoring function? Once you're seeing VPN tunnels in it, try to filter out the times when the tunnels are expected to be down. Any VPN tunnels down outside of that range should be configured to send an alert.
-
Re: VPN Tunnel Monitoring
havox Feb 26, 2018 8:50 AM (in response to rschroeder)We just upgraded to 12.2 and the new function works very well. Thanks!
-
-
Re: VPN Tunnel Monitoring
hoppingubu Feb 26, 2018 2:22 PM (in response to harrisa94)1 of 1 people found this helpfulNPM 12.2's ASA VPN monitoring is great! I can select my favorites, but only 3. When you have a mesh, it might be good to see if more that 3 VPNs can be monitored from the summary page.