How to monitor Site-to-Site VPN uptime

[AntoineDelrue]

Hi,

We have more than 10 S2S VPN tunnels between our gateways, and interoperable devices.

Sometimes, users reports the tunnel is down, but when we check, it's up alright.

We would like to have a way to check the 'uptime' for a given VPN tunnel.

I currently found nothing to achieve this goal.

Anyone have knowledge of a command or report for this ?

Thanks in advance.

Regards,

Antoine.

[PhoneBoy · Accepted solution]

I don't believe we track how long a tunnel has been "up."
The keys for an IPsec tunnel are periodically refreshed and, if there's no traffic on the tunnel, the tunnel isn't brought back up again until there is (unless you've configured permanent tunnels).
You can track current state with SNMP, certainly.