VPN monitoring

[marcio.tormente]

Hello folks,

Can anyone tell me how can I make shure that a specific trafic is going to VPN Tunnel?

How can I monitor this trafic on ASDM or CLI?

I have a network that shoulb be pass though the VPN, but I'm not sure if is working.

Thanks

Marcio

[Philip D'Ath]

In the ASDM go "Monitor" and then "VPN".  If the encryption/decryption counters are increasing then traffic is flowing over that VPN connection.

[marcio.tormente]

Hello Philip,

I have many differents IP range that pass though the VPN, see only the encryption/decryption counters doesn´t show me if a specific range or IP is going to or not the VPN.

I need monitoring a specific IP or range.

Thanks

[Philip D'Ath]

I would use "Tools/Packet Tracer" and simulate the flow and see if it reports it is going via VPN.

[Marvin Rhoads]

From the cli, use the command:

show crypto ipsec sa

That will show you all the pairwise Security Associations (SAs) - i.e .source and destination subnets for each given site-site VPN.