Cisco ASA IPsec Tunnel Monitoring

[jason crockett]

I need to monitor a few IPsec tunnels running on an ASA5510 running IOS version 8.4(2). I'd like to create traps in Solarwinds that will alert me when these tunnels start/stop. Has anyone done anything similar? If yes, can you send me the MIBs and steps you took to make this work?

Thanks!

[James Leinweber]

Not sure about the MIB side (my SNMP expert is out today), but for syslog messages, the key one for us has been IKE "New Phase 1".  The individual SA messages and phase 2 key renegotiations are too noisy to be helpful.

   %ASA-5-713041: IP = XXX, IKE Initiator: New Phase 1, ...

-- Jim Leinweber, WI State Lab of Hygiene

[Collin Clark]

No MIB is needed. I too have trapped on that and works like a champ in SW too.