IPSEC crypto-map and MRTG bandwidth

[jraarons]

We may need to add another ipsec tunnel for our FLA location. This is becoming a very popular option. We need to figure out how to do this so that we don’t exhaust all internet bandwidth. Is there a way to measure bandwidth per tunnel? We currently have six ipsec tunnels on a 7120.

[mnaveen]

Hi,

There is no direct way to measure bandwidth per tunnel. Rather you can take the cummulative statistics of the crypto interface. You can use "show interface summary" command (if the image supports it) which shows the transmission and reception rate on the interface. This rate (pps) divided by number of tunnels would give you approximately the bandwidth per tunnel.

Thanks,

Naveen.