Re: [NV-L] VPN tunnel monitoring

[Mario Behring <mariobehring@yahoo.com>]

Hi Stephen,

I guess it does............I'm going to test it.

My scenario is like this: several VPN tunnels pointing to different customers where we monitor servers, switches and routers using SNMP. The Cisco PIX where they are connected performs NAT operations and each client has its own subnet and IP addresses.......

Thanks in advance.

Mario

----- Original Message ----
From: Stephen Hochstetler <shochste@us.ibm.com>
To: Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>
Sent: Wednesday, January 10, 2007 6:50:05 PM
Subject: Re: [NV-L] VPN tunnel monitoring

It has been a few years, but what I did for monitoring the 'internet' access at a customer may work for your VPN tunneling access.

My current use of VPN tunnels require an IP address on both ends that are within the same subnet. The question for you...are these fairly static tunnels with known endpoints? Can you ping that endpoint?

If so, then what I suggest is that you create a 'virtual' node called VPNTUNNEL1 and put that into your etc/hosts file. Plus put any IP addresses that are at the other end of your tunnels (and are pingable) under the same hostname.

You can then use loadhosts command to create this virtual node and add the other interfaces. It will be non-snmp, but it will give you the ability to see if the tunnels are active. If one goes down, you will get an interface down event for the host VPNTUNNEL1. If all the VPN tunnels go down you will see a HOST DOWN event for VPNTUNNEL1.

Does this do what you need?


Stephen Hochstetler shochste@us.ibm.com
International Technical Support Organization at IBM
Office - 512-838-6198 (t/l 678) FAX - 512-838-6931
http://www.redbooks.ibm.com

_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to internal IBM'ers only)

---

Any questions?  Get answers on any topic at Yahoo! Answers. Try it now.
_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to 
internal IBM'ers only)