Monitoring an IPsec VPN

[jimmyjoseph]

Hi,

I have multiple IPsec VPNs from my office to partner location. The way i monitor the connectivity to the partner locations is by doing a ping to some machine in the partner network. But this method is not always reliable as the ping could fail because of several reasons other than the VPN. Is there a method or a tool (a freeware) that could be used to check periodically weather the VPN connectivity is functional at any point of time (Purely the TCP/IP connectivity from my VPN box to the remote VPN box)

regards,

jimmy.

[ebreniz]

Hi,

I think some kind of Network Management System, that supports VPN would do the job. Also there might be some VPN Management software available for monitoring this.

May be this link would be of some help:

http://www.cisco.com/en/US/netsol/ns110/ns106/ns107/ns130/networking_solutions_package.html

[jegrimm]

Hello,

You could try monitoring/pinging the private address of the concentrator. That is what I do in my network...I use ICMP to the router address and to the private address of the concentrator...Not the public one...

This pretty much guarantees that the tunnel is up.

Cheers!

Jim