Cisco ASA VPN monitoring Question

[rene.schmid]

Hello Support Community,

I have a question regarding the monitoring of VPN Sessions. We have a ASA 5515-X Cluster with some LAN2LAN VPN tunnels and with about 50 Default LAN2LAN tunnels. That means, that on 50 remote sides we do not have an fixed public ip address, we work with 4G routers and IPSec tunnels. We now want to monitor with PRTG or Ipswitch WhatsUp Gold, the established IPSec VPN tunnels to see the actual public IP address and the remote network.

In troubleshooting case it's very difficult for our NOC to log into the ASA and look at each established IPSec tunnel to find the correct one.

Does anyone has an idea?

Thanks for help.

Rene

[Marvin Rhoads]

With a little bit of regular expression you can grab the information you need from the cli.

show crypto ipsec sa | i remote ident|current_peer

If they want to find a specific tunnel then instead of "remote ident" field use a unique remote subnet at a given site.

I don't think this can be gotten easily via SNMP polling.