topic SNMP VPN tunnel Bandwidth by tunnel in General Topics

SNMP VPN tunnel Bandwidth by tunnel

FortiBoy — Wed, 14 Aug 2024 09:05:14 GMT

Hello,

According to an old topic (https://community.checkpoint.com/t5/General-Topics/VPN-Throughput-SNMP/td-p/109494), it seems not possible to get bandwidth by tunnel with snmp (only with smart view monitor).

But the post is old and maybe there is an improvement to retrieve this information? Anyone has added a bandwidth snmp monitoring by tunnel communities ? How the smart view monitor retrieve this data ?

Regards,

Quentin.

Re: SNMP VPN tunnel Bandwidth by tunnel

_Val_ — Wed, 14 Aug 2024 10:14:01 GMT

sk90860 mentioned in that thread is up to date, so the info is still relevant.

Re: SNMP VPN tunnel Bandwidth by tunnel

FortiBoy — Wed, 14 Aug 2024 10:17:54 GMT

Thanks for your feedback. So no way to do that ?

Re: SNMP VPN tunnel Bandwidth by tunnel

PhoneBoy — Wed, 14 Aug 2024 13:10:53 GMT

In R82 Early Availability:

Introducing the Advanced VPN Monitoring tool that shows information on each VPN Tunnel and tracks its health and performance.

Not sure if this will translate to SNMP or not.

Re: SNMP VPN tunnel Bandwidth by tunnel

the_rock — Wed, 14 Aug 2024 13:38:53 GMT

At this point, dont believe its possible. In R82, as Phoneboy mentioned, it should be.

Andy

Re: SNMP VPN tunnel Bandwidth by tunnel

the_rock — Wed, 14 Aug 2024 16:47:13 GMT

Btw, if you need to test anything in R82, I have a lab, so hit me up any time, happy to do it. Since I see your username, I also have Forti OS 7.6 in the lab too, pretty interesting 🙂

Andy

Re: SNMP VPN tunnel Bandwidth by tunnel

FortiBoy — Mon, 19 Aug 2024 09:16:45 GMT

Yes it could be interesting to see if there is more objects with R82. A snmpwalk of .1.3.6.1.4.1.2620.500.9002 (.iso.org.dod.internet.private.enterprises.checkpoint.tables.tunnelTable) doesn't contains tunnel statistics.

The other interesting OID is .1.3.6.1.4.1.2620.1.2.5.2 (.iso.org.dod.internet.private.enterprises.checkpoint.products.vpn.cpvIpsec.cpvSaStatistics) and .1.3.6.1.4.1.2620.1.2.5.4 (.iso.org.dod.internet.private.enterprises.checkpoint.products.vpn.cpvIpsec.cpvIpsecStatistics) but it's only global IPSEC statistics and not possible to filter it by tunnel.

Re: SNMP VPN tunnel Bandwidth by tunnel

the_rock — Mon, 19 Aug 2024 12:43:57 GMT

Correct, last one, Im fairly sure cant be filtered per tunnel.

Re: SNMP VPN tunnel Bandwidth by tunnel

the_rock — Mon, 19 Aug 2024 12:47:40 GMT

For the reference.

Andy

https://support.checkpoint.com/results/sk/sk63663