[c-nsp] ASA - Monitor an IPSEC Tunnel via SNMP

[Ryan West]

B,

> -----Original Message-----
> Sent: Wednesday, February 17, 2010 1:22 PM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] ASA - Monitor an IPSEC Tunnel via SNMP
> 
> What's the best way to monitor an IPSec tunnel via SNMP on an ASA (v8)?
> I
> just want to know if it is up or down.
> I did an snmpwalk but can't find anything related to the tunnels.

Check out this MIB, CISCO-IPSEC-FLOW-MONITOR-MIB.  

.1.3.6.1.4.1.9.9.171.1.3.1.1.0 will retrieve the number of active tunnels.

.1.3.6.1.4.1.9.9.171.1.2.1.1.0 will retrieve the number of active IKE peers.

-ryan