topic Is The MIB object tunnelProbState (.1.3.6.1.4.1.2620.500.9002.1.9) relevent for "regular" tunnels? in Firewall and Security Management

Is The MIB object tunnelProbState (.1.3.6.1.4.1.2620.500.9002.1.9) relevent for "regular" tunnels?

snthl — Sat, 16 Mar 2024 07:22:41 GMT

Hi all,

Trying to use snmp to monitor cehckpoint vpn tunnel status. With respect to this, the checkpoint MIB, has two mib objects

tunnelState OBJECT-TYPE
SYNTAX INTEGER {
active(3),
destroy(4),
idle(129),
phase1(130),
down(131),
init(132)
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION "No description available"
::= { tunnelEntry 3 }

and

tunnelProbState OBJECT-TYPE
SYNTAX INTEGER {
unknown(0),
alive(1),
dead(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION "No description available"
::= { tunnelEntry 9 }

My doubt /question is

Is the tunnelProbeState valid only for "Permanent" tunnels and is not relevant / set for "regular " tunnels ?

Thanks in advance for your responses.

Re: Is The MIB object tunnelProbState (.1.3.6.1.4.1.2620.500.9002.1.9) relevent for "regular&q

_Val_ — Mon, 18 Mar 2024 08:27:40 GMT

Yes it is showing you the status of any tunnel, permanent or not.

From the documentation:

SNMP

You can use the OID sub-tree tunnelTable (.1.3.6.1.4.1.2620.500.9002 ) in the Check Point MIB to see the VPN status.

Re: Is The MIB object tunnelProbState (.1.3.6.1.4.1.2620.500.9002.1.9) relevent for "regular&q

_Val_ — Mon, 18 Mar 2024 08:28:24 GMT

Also, refer here: https://support.checkpoint.com/results/sk/sk63663

Re: Is The MIB object tunnelProbState (.1.3.6.1.4.1.2620.500.9002.1.9) relevent for "regular&q

snthl — Mon, 18 Mar 2024 15:22:01 GMT

Thanks for the response. I noticed the mib table tunnelTable does report the tunnelState for all type of tunnels But My doubt was specifically for the tunnelProbeState . I was not sure if the "probe" is running or is relevant for both regular type tunnels.