Hello All

In my current infrastructure i have several Vyatta VPN servers. I can monitor the memory etc of these servers without a problem. But i am a bit stuck. How can i monitor the actual tunnel status and any changes (up/down) in these tunnels?

I am running the Vyattas on CentOS.

Thank you

Article Comments

Hm, there is no native sensor for it and I didn't find any MIBs for it :( Seems like you're bound to parse the output of

which should look something like this: 

vyatta@vyatta:~$ show vpn ipsec sa

Peer ID / IP                            Local ID / IP  

------------                            -------------

198.x.x.101                          64.x.x.101 


    Tunnel  State  Bytes Out/In   Encrypt  Hash  NAT-T  A-Time  L-Time  Proto
    ------  -----  -------------  -------  ----  -----  ------  ------  -----
    1       up     0.0/0.0        aes256   sha1  no     906     1800    all

Bash or python should be able to parse this :)


Aug, 2015 - Permalink

Thank you Stephan

I already have a script similar running. Was hoping for something a little more elegant :D

what suprises me most is that there are no available MIB for this... but this is an issue for Brocade i imagine.

Please if possible can we add Vyatta IPSEC sensors to PRTG Wish list?


Aug, 2015 - Permalink

Ah okay, nice! :) It's indeed Broadcast's fault :D
I'm afraid that there's too little demand for that..Sorry!


Aug, 2015 - Permalink