Monitor IPSec tunnels in PIX

[manoj-wadhwa]

Hi Team,

I have PIX Version 6.3(5) configured with few IPSec tunnels. I would like to monitor these tunnels through snmp so that the PIX can send the trap notifying my monitoring tool if any IPSec tunnel goes down. I find the only command available is "snmp-server enable traps". Does this command event send traps for IPSec? Or if there is any alternate command, kindly suggest. Appreciate your response. Thanks!

Regards,

Manoj

[Syed Iftekhar Ahmed]

I am not sure about PIX version 6.3(5) but PIX version 7.0 supports the CISCO-IPSEC-FLOW-MONITOR-MIB and can send

cipSecTunnelStart and cipSecTunnelStop SNMP traps.

Syed Iftekhar Ahmed