topic Re: How to monitor Site-to-Site VPN uptime in Firewall and Security Management

How to monitor Site-to-Site VPN uptime

AntoineDelrue — Mon, 28 Sep 2020 12:01:58 GMT

Hi,

We have more than 10 S2S VPN tunnels between our gateways, and interoperable devices.

Sometimes, users reports the tunnel is down, but when we check, it's up alright.

We would like to have a way to check the 'uptime' for a given VPN tunnel.

I currently found nothing to achieve this goal.

Anyone have knowledge of a command or report for this ?

Thanks in advance.

Regards,

Antoine.

Re: How to monitor Site-to-Site VPN uptime

PhoneBoy — Thu, 01 Oct 2020 00:15:38 GMT

I don't believe we track how long a tunnel has been "up."
The keys for an IPsec tunnel are periodically refreshed and, if there's no traffic on the tunnel, the tunnel isn't brought back up again until there is (unless you've configured permanent tunnels).
You can track current state with SNMP, certainly.